PRIVACY POLICY

This information on the processing of personal data, prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "Regulation"), and also with regard to related regulations, explains what personal data we collect in cooperation with our business partners and how we process and protect this data.

1. Who we are

We are ROSmart, s.r.o., ID No.: 069 74 619, with its registered office at Lomnického 1705/9, 140 00, Prague 4, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File C 292347, and we process the personal data of our business partners in the course of providing our services. In accordance with the Regulation, we therefore act as a personal data controller in relation to the personal data of our business partners - natural persons and members of statutory bodies, representatives and contact persons of our business partners - legal entities.

2. What personal data we process

2.1. When providing our services or using the services of our suppliers, we process various types of personal data ("personal data"), which can be divided into the following categories:

(a) Identification data
E.g. title, first name, surname, registered office, mailing address, registration number, VAT number.

(b) Contact data
E.g. telephone number, e-mail.

(c) Payments and invoicing
E.g. bank account number, VAT number.

2.2. 2.2. When you visit any of our websites, use our services and applications developed by or with our products, we may collect information about you, including your IP address, domain name, operating system and browser type, certain hardware or device information, and other technical information, if available. This is information about browsing and behaviour patterns and the use of certain software products and applications that does not identify any specific person, except in cases where the user configures the settings to provide personal data or where we have expressly informed you during registration or access to the service that personal data will be collected.

Our site may use cookies to distinguish you from other users, to track your browsing patterns and to build a profile of how you and other users use our site. This helps us to provide you with a better experience when you browse our site and use our services, and also allows us to improve our site and services. You can disable cookies at any time.

3. How and why we use personal data

We collect and use personal data for the following purposes:

• Fulfilment of contractual obligations
• Customer account management
• Communication with customers, satisfaction surveys, publication of reviews, book recommendations, handling of suggestions, complaints and claims
• Sending commercial communications and offering our solutions
• Direct marketing and creation of personalised content and advertising
• Improving the quality of our goods and services, analysing traffic to our website and your behaviour on the website
• Protecting our rights, property or safety or the rights, property or safety of others
• Accounting and tax purposes
• Fulfilment of other legal obligations

Your personal data may be processed on the following legal grounds:

• Performance of a contract
• Compliance with legal obligations
• Legitimate interest of the controller in sending commercial communications
• Consent to sending commercial communications

The processing of personal data for the purposes of performing a contractual relationship, accounting and tax purposes, and fulfilling other legal obligations are legal or contractual requirements. If you intend to place an order through our website, you are required to provide us with your personal data for these purposes.

4. What data we share

We only share personal data with trusted partners in a manner permitted by law and on the basis of relevant contracts that ensure adequate protection.

4.1 Our authorised processors

Our processors are primarily providers of legal and other advisory services and providers of support, technical and IT services.

4.2 Other recipients

Other recipients of personal data include legal entities and individuals, government authorities and public institutions, if we believe in good faith that access, use, storage and disclosure of this information is reasonably necessary for:

(a) comply with the law or an enforceable request from a government authority;

(b) enforcing the terms of a contract, including investigating possible violations of those terms;

(c) protect against harm to the rights, property, or safety of our company, our clients, or the public, as required or permitted by law.

We always take care not to provide more data than is necessary to achieve the purpose of processing.

4.3. Processing outside the EU

The controller does/does not intend to transfer personal data to a third country (outside the EU) or to an international organisation. The recipients of personal data in third countries are:

• partners to whom we provide data for the purpose of analysing traffic to our websites, your behaviour on the websites and business conversions,
• IT service and hosting providers, including cloud services,
• Mailing service providers.

5. How you can manage your personal data

As a data subject, you have the right to decide how your personal data is handled. You can exercise the rights listed below (i) in writing or in person at our company headquarters, (ii) by email at gdpr@rosmart.cz, or (iii) by telephone at +420 602 281 307. We will endeavour to respond to you as soon as possible, but always within one month of receiving your request. In case of doubt, we may ask you for additional verification of your identity.

Under applicable laws and regulations, you have the following rights:

(a) Right of access under Article 15 of the Regulation

(b) Right to rectification under Article 16 of the Regulation

(c) The right to erasure under Article 17 of the Regulation

(d) Right to restriction of processing under Article 18 of the Regulation

(e) Right to data portability under Article 20 of the Regulation

(f) Right to object to processing under Article 21 of the Regulation

If we process personal data for the purpose of performing a task carried out in the public interest or in the exercise of official authority, or on the basis of our legitimate interests or the legitimate interests of a third party, you have the right to object to such processing. After you have objected, we will restrict the processing of personal data and, unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of legal claims, we will no longer process the personal data and will erase it.

You have the right to object at any time to the processing of personal data for direct marketing purposes. After raising an objection, we will not process personal data for this purpose.

(g) Right to lodge a complaint You have the right to lodge a complaint with one of the competent supervisory authorities. For the territory of the Czech Republic, the supervisory authority is the Office for Personal Data Protection, with its registered office at Pplk. Sochor 27, Holešovice, 170 00 Prague 7, Czech Republic, website www.uoou.cz, telephone: +420 234 665 111.

(h) Right to withdraw consent pursuant to Article 7(3) of the Regulation

6. Where we hold your personal data and where we store it

Your personal data is processed:

• for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and us and to enforce claims arising from these contractual relationships (4 years);
• for the period necessary to fulfil a legal obligation (accounting documents 5 years, tax documents 10 years);
• for the duration of our legitimate interest in sending commercial communications (2 years from the last opening of a commercial communication);
• for the duration of your consent (no longer than 4 years from its granting, or 4 years from the last order).

7. How are cookies processed?

Processed cookies can be divided according to their validity into:

• temporary cookies (so-called session cookies), which remain stored in your browser only until you close your browser,
• persistent cookies, which remain stored in your browser for a long time until their lifetime expires or until you manually delete them (the storage time of cookies in your browser depends on the settings of the cookie itself and the settings of your browser).

And according to their function:

• essential cookies, which are necessary for the functionality of our website,
• preference cookies, which allow our website to remember information that changes how the website behaves or looks (e.g. your preferred language or the region you are in on ); these cookies are not strictly necessary for the functioning of our website, but they enhance its functionality and usability,
• analytical cookies, which help us analyse your experience on our website (known as User Experience) and enable us to understand how you use our website.

We do not use third-party cookies that track multiple websites in order to provide you with personalised content and advertising on third-party websites and other sales channels.

8. Conclusion

Legislation and our business strategy and related methods of processing your personal data may change. If we decide to update this policy, we will post the changes on our website and inform you of these changes. In cases where there is a significant change to this policy, or where we are required to do so by law, we will inform you in advance. We ask that you read this policy carefully and review it regularly when communicating with us or using our website.