Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation; "GDPR"), Act No. 110/2019 Sb., on the processing of personal data (the so-called Adaptation Act), and Act No. 480/2004 Sb., on certain services in the information society
1. Personal data administrator/Operator
(see point 1.8 of the GT&C)):
Rehacentrum Smíšek, Identification No. 06478794, with its registered office at Na Úbočí 2250/10, Praha 8, Postal Code 182 00, registered in the Commercial Register administered by the Municipal Court in Prague, Section C, Insert 281941, e-mail: firstname.lastname@example.org.
2. Categories of data processed:
Identification and contact details relating to the Users (see point 1.11 of the GT&C) of the E-shop (see point 1.2 of the GT&C) and/or the Website (see point 1.14 of the GT&C):
3. Lawful basis for processing and purposes for processing:
4. To whom the data may be provided:
We do not transfer personal data to third countries of international organizations.
5. Time of personal data processing:
We process personal data for the time necessary to fulfil the purpose for which the personal data were collected.
6. Source from which the personal data originate:
Personal data may come directly from the data subject whose personal data we process (i.e. the User), as well as from public registers and/or other sources (e.g., websites).
7. Method of personal data processing:
Personal data are processed in electronic form in an automated manner or in printed form in a non-automated manner. We do not perform systematic and/or extensive processing of personal data. We do not perform automated individual decision-making with legal or similar effects, including profiling, within Article 22 of the GDPR.
8. Data subject's rights to protection of personal data:
9. Voluntary provision of personal
If the processing of personal data is based on the consent of the User, their provision is completely voluntary; therefore, if the User does not provide us with his or her personal data, he or she will not suffer any legal damage, but will not be able to use our services. Otherwise, the processing of personal data is possible only on the basis of a legal or contractual request (e.g., if personal data must be included in the Purchase Agreement).
Should the data subject have any questions related to the processing of personal data or an investigated security incident, he or she may contact the administrator by e-mail (see contact details in point 1 above).