AirsoftShop.cz — Bohemia Air Soft

Privacy policy

PERSONAL DATA PROCESSING STATEMENT
This statement has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons (hereinafter the "GDPR") and the legislation of the Czech Republic, in particular Act No. 101/2000 Coll., on Personal Data Protection, as amended, in connection with the processing of personal data, the free movement of such data and the information to be provided to data subjects.
The purpose of this statement is to inform customers of the conditions of the processing of personal data carried out by the personal data controller, as defined below, in connection with the operation and use of the e-shop www.airsoftshop.cz, as well as of certain other cases of personal data processing where the personal data of customers or other persons are processed in the course of the controller's activities.


Personal Data Controller and Contact Details of the Controller
Jan Šulc – Bohemia Air Soft
address: Lánovská 1550, 190 16 Praha 9 – Újezd nad Lesy
e-mail: info@airsoft.cz
tel.: +420 281 972 592
(hereinafter the "controller")

In accordance with the applicable legislation, the controller has not appointed a data protection officer.

Scope, Legal Basis and Purpose of the Processing of Personal Data
Personal data (basic contact and identification data, in particular name and surname, address, e-mail, telephone, data box, bank details or assigned identification numbers) are processed to the extent to which the respective data subject has provided them to the controller of their own free will in connection with the conclusion of a contractual or other legal relationship with the controller, or which the controller has lawfully obtained in connection with its activities from the data subject or an authorised third party, or which it has otherwise lawfully collected in connection with its activities, e.g. from public records and registers, and the controller processes them in accordance with the applicable legislation or for the performance of its legal obligations and other obligations imposed on it by the applicable laws.


The legal bases for the processing of personal data are:
- the preparation and performance of a contract between the data subject and the controller pursuant to Article 6(1)(b) GDPR;
- any further processing to which the data subject has given explicit consent pursuant to Article 6(1)(a) GDPR;
- the performance of obligations imposed on the controller by law and the keeping of records required by law pursuant to Article 6(1)(c) GDPR;
- the legitimate interests of the controller or a third party pursuant to Article 6(1)(f) GDPR.
The personal data of data subjects are processed by the controller through its own employees in electronic or printed form. The controller does not carry out automated individual decision-making within the meaning of Article 22 GDPR.


Processing of Personal Data in Connection with the Purchase of Goods or Services in the Online Shop or in Direct Sales
In the case of a purchase of goods in the e-shop www.airsoftshop.cz, the controller is also in the position of the seller of the goods concerned. In view of this fact, the controller will process the personal data of the customer (data subject) to the following extent: name, surname, e-mail address, telephone and delivery address for the goods, or other data relevant to the delivery of the goods (for example, the name of the employer when goods are delivered to a workplace).
The processing of these personal data of customers will be carried out for the purpose of performing the purchase contract between the controller and the customer, delivering the ordered goods, and also for the purpose of protecting the rights and legally protected interests of the controller.
The controller will process the above personal data of customers only for the period strictly necessary. Personal data stored in a customer account on the website will be retained until the customer account is deleted by the data subject (the data subject is also entitled to ask the controller to delete it) or by the controller. Certain personal data (e.g. personal data on an invoice issued by the controller) will be retained for the archiving periods prescribed by law.
The processing of personal data under this article will be carried out by the controller itself, through its own employees, as processor. Where the ordered goods or services are, at the customer's request, delivered to the address stated in the order, the controller will also provide the customer's personal data to the relevant carrier.
If the customer chooses to pay via a payment gateway or by credit card, the data necessary to process the payment are shared with the operators of these services, namely Global Payments Europe, s.r.o. and KB Smart Pay s.r.o., under the terms and conditions set by them.
If payment by bank transfer is chosen, the customer receives from the controller the details for making the bank transfer, which the customer then arranges through their bank under the terms and conditions set by that bank.
Where, as part of verifying compliance with the conditions laid down by Act No. 119/2002 Coll., on Firearms and Ammunition, as amended, verification by checking the personal identification number (rodné číslo) is required, this number is not further recorded or otherwise stored by the controller.

Processing of Personal Data in Connection with Enrolment in Discount Programmes
If the customer registers for discount programmes, the controller also keeps, in addition to the data referred to above, data demonstrating the customer's eligibility for such participation (for example, team membership, the website or Facebook address of the relevant team, information about membership of a service or unit to which special discounts are granted, etc.). These data are kept for the duration of the customer's participation in the relevant discount programme. The processing of personal data under this article will be carried out by the controller itself, through its own employees, as processor.
The customer may withdraw their consent to the keeping of these data at any time by sending an e-mail message to: gdpr@airsoft.cz.
The processing of personal data under this article will be carried out by the controller itself, through its own employees, as processor.

Processing of Personal Data in Connection with the Handling of Complaints
If a complaint (warranty claim) concerning a product or service is made to the controller, who is also the seller, the controller will also process personal data for the purpose of handling such complaint. The legal basis for this processing of personal data is the performance of the contractual and legal obligations of the controller as seller, and it is therefore processing of personal data which does not require the consent of the person making the complaint.
In connection with the handling of complaints, the controller also processes personal data for the purpose of protecting its rights and legally protected interests in the event of a possible dispute arising from the complaint. In this case, too, the consent of the data subject to the processing is not required. The duration, scope and other aspects of the processing of personal data for the purpose of handling a complaint depend on the controller's obligation to handle the complaint in question.
The processing of personal data under this article will be carried out by the controller itself, through its own employees, as processor.
Where appropriate or necessary for the handling of a complaint, the controller may pass personal data on to its suppliers and manufacturers for the processing and handling of the complaint, always depending on the product to which the complaint relates. Information about the specific supplier or manufacturer to whom personal data may be provided can be obtained by e-mail enquiry to the controller.

Processing of Personal Data for Sending Newsletters
If the data subject wishes to receive newsletters and other marketing communications, they shall give the controller explicit consent to the processing of personal data for this purpose. In such a case, the controller will process the personal data provided for these purposes, always at least to the extent of the e-mail address. If the data subject also provides other data, e.g. name, surname, address, telephone, the name of the team of which they are a member, website, Facebook or other pages, etc., the controller also processes these data for the stated purposes. Without consent being given, the controller is unable to send newsletters.
The content of the newsletter may be personalised on the basis of the data provided and other data used for content personalisation.
The personal data provided are processed until the consent given is withdrawn. The processing of personal data under this article will be carried out by the controller itself, through its own employees, as processor.
Consent to this processing of personal data is entirely voluntary, is not tied to any other services and may be withdrawn at any time by sending an e-mail message to: gdpr@airsoft.cz.

Use of Cookies and Website Analytics
Cookies are small data files, short texts, which are placed in the web browser of visitors to the controller's website. The controller uses these cookies on its websites on the basis of its legitimate interest for the purpose of improving their functioning, evaluating their traffic, adapting content and optimising its range of goods.
The cookies collected are processed via the Google Analytics service, operated by Google Inc., with its registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The cookies collected are subsequently processed by Google Inc. in accordance with its Privacy Policy, see: policies.google.com.
If a visitor to the website does not agree to the collection of cookies, they may prevent their collection by changing the settings of their internet browser, namely by using the anonymous (private) browsing function, which prevents data about visited websites from being stored.

Use of Social Plug-ins
The controller's websites also contain third-party social plug-ins by means of which visitors to the websites can share content with their friends and other contacts. These are:
- the Facebook plug-in
- the Twitter plug-in
- the Google+ plug-in
These social plug-ins are not managed by the controller, who is therefore not responsible for any processing of personal data by the above-mentioned operators (controllers) of these plug-ins or of the websites to which they link, nor for their functionality or any damage which they might cause.

Recipients of Personal Data
The processing of personal data is carried out by the controller itself or through its own instructed and vetted employees as processors and an external accountant.
To the extent necessary for the performance of the contractual relationship with the customer, the controller shares them with shipping companies and the above-mentioned providers of payment and banking services.
The management of information and communication technologies for the controller is provided by CompCity s.r.o.
Data hosting services for the www.airsoftshop.cz server and the administration of the e-shop system for the controller are provided by a-net group, a.s.

The management of e-mail services for the controller is provided by INTERNET CZ, a.s.

We assess your satisfaction with your purchase by means of e-mail questionnaires as part of the Verified by Customers (Ověřeno zákazníky) programme, in which our e-shop participates. We send these to you every time you make a purchase from us, unless you refuse to receive them within the meaning of Section 7(3) of Act No. 480/2004 Coll., on Certain Information Society Services. We process personal data for the purpose of sending questionnaires as part of the Verified by Customers programme on the basis of our legitimate interest, which consists in ascertaining your satisfaction with your purchase from us. To send the questionnaires, evaluate your feedback and analyse our market position, we use a processor, namely the operator of the Heureka.cz portal; for these purposes we may pass on to it information about the goods purchased and your e-mail address. When e-mail questionnaires are sent, your personal data are not passed on to any third party for its own purposes. You may object at any time to the sending of e-mail questionnaires as part of the Verified by Customers programme by refusing further questionnaires via the link in the e-mail containing the questionnaire. If you object, we will not send you any further questionnaires.

Rights Relating to the Protection of Personal Data
Personal data are processed by the controller in a transparent manner and data subjects have, throughout the period of their processing, the following rights, of which the processor informs them in accordance with Article 12 GDPR:
- the right of access to their personal data pursuant to Article 15 GDPR and to related information;
- the right to rectification of personal data pursuant to Article 16 GDPR;
- the right to erasure of personal data pursuant to Article 17 GDPR;
- the right to restriction of processing pursuant to Article 18 GDPR;
- the right to data portability pursuant to Article 20 GDPR;
- the right to object to processing pursuant to Article 21 GDPR.

The data subject may exercise the right to withdraw consent to the processing of personal data, and raise other requests and exercise their rights, in writing or electronically at the address or e-mail of the controller stated in Article 1 of these terms.
Any data subject who discovers or believes that the controller or processor is carrying out processing of their personal data which is contrary to the protection of the private and personal life of the data subject or contrary to the law, in particular if the personal data are inaccurate with regard to the purpose of their processing, may ask the controller for an explanation and request that the controller remedy the situation thus arisen; this may in particular involve blocking, rectifying, supplementing or erasing the personal data.
If the data subject's request is found to be justified, the controller shall remedy the defective situation without delay. If the controller does not comply with the data subject's request, the data subject has the right to contact the supervisory authority directly, which is the Office for Personal Data Protection (ÚOOÚ).
The data subject has the right to address their request or complaint to the above-mentioned supervisory authority directly, without taking the preceding steps, in accordance with Article 16 GDPR and related provisions.
Personal Data Security Conditions
The controller declares that it has adopted all appropriate technical and organisational measures to secure personal data.
The controller has adopted technical measures to secure data storage facilities and storage facilities for personal data in paper form.
The controller declares that only persons authorised by it have access to personal data.
Final Provisions
By submitting an order from the online form of the e-shop www.airsoftshop.cz, the customer, who is also the data subject, confirms that they have familiarised themselves with the personal data protection terms and that they accept them in their entirety as set out here.
The controller is entitled to amend these terms, in which case it shall promptly publish the new version of these personal data protection terms, in the form of a statement, on its publicly accessible website www.airsoftshop.cz
These personal data protection terms and statement take effect on 25 May 2018.