GDPR

Principles of Processing Personal Data of Individuals

We would like to assure you that LE PATIO LIFESTYLE s.r.o., a company with its registered office at Jungmannova 748/30, Prague 1, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 101858, ID: 27173038 (hereinafter referred to as "LE PATIO" or "we"), pays utmost attention to the security of your personal data. In addition to Regulation (EU) 2016/679 (hereinafter referred to as "GDPR"), we comply with the applicable laws of the Czech Republic.

LE PATIO operates the websites www.lepatio.cz, www.lepatiostudio.cz, and the online store eshop.lepatio.cz (hereinafter referred to as the "website" or "websites").

All data collected by LE PATIO is processed solely for justified purposes, for a limited period of time, and with the highest level of security. Protecting the personal data of our customers, partners, and employees is our priority, and we pay utmost attention to their security. The protection of personal data of a buyer who is an individual is provided by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), which replaced Act No. 101/2000 Coll., on the protection of personal data, on 25 May 2018. The abbreviation commonly used for this regulation is GDPR (General Data Protection Regulation). Furthermore, we comply with the applicable laws of the Czech Republic. If you have any questions regarding the processing of your personal data, please do not hesitate to contact us at the email address client@lepatio.cz.

Types of data we process:

Definition of personal data according to Regulation (EU) 2016/679, Article 4:

- Identification data: name, surname, username, password, delivery address, billing address, email address, phone number.

- Data about ordered goods: ordered goods, payment method (including account number for prepayment), and data related to complaints.

- When browsing the websites: your IP address is recorded, as well as the duration of your visit to the page and the website you came from. We consider the use of cookies for the proper functioning of the online store and the customization of website display as a legitimate interest.

Why We Process Personal Data and the Legal Basis

In the course of our activities, we process personal data for various purposes and to varying extents either:

- Without your consent, based on the performance of a contract, our legitimate interests, or the fulfillment of a legal obligation.

- With your consent.

The specific processing activities that we can perform without your consent depend on the purpose of the processing and the nature of our relationship with you – whether you are just a visitor to our website or have entered into a contract with us or ordered goods from us (Regulation (EU) 2016/679 of the European Parliament and of the Council, Article 6). Giving consent for the processing of personal data in accordance with this article is not a requirement that would prevent the conclusion of a purchase contract.

Purposes of Processing:

1. If you order goods from us, we carry out the following processing:

1.1. Processing based on the performance of a contract:

When you order goods from us, we process your personal data to fulfill this contract, including your identification and contact information, as well as data about your orders. This means that we use your data, in particular, for the following purposes:

- To communicate with you.

- For payment purposes or to perform the service; in this context, we may also disclose your data to our partners, especially carriers, as described in the section "Who Processes and Receives Your Personal Data?"

- In relation to complaints.

- In response to any other requests you may have.

1.2. Processing based on legitimate interests:

If you order goods from us, we retain your identification and contact information, as well as data about the ordered products, based on our legitimate interests (without your consent), for the purpose of protecting our legal rights and for internal records and controls. Our legitimate interests in this case are the protection of legal claims and ensuring the proper provision of our services.

To protect legal rights, property, and for internal records and controls, we process your data for a period of 10 years from the expiration of the limitation period, and one year thereafter with respect to claims made at the end of the limitation period. In the event of a judicial, administrative, or other proceeding, we process your personal data to the extent necessary throughout the duration of such proceedings and for the remaining part of the limitation period after its termination.

Furthermore, based on our legitimate interests (i.e., without your consent), we process your identification and contact information, as well as data about the ordered goods, for the purpose of sending promotional offers via email; our legitimate interest here is the promotion of our products and services. For this purpose, we use personal data for a period of 12 months from the date of the last order.

You have the right to object to these processing activities based on our legitimate interests.

1.3. Processing based on the fulfillment of legal obligations:

We, too, have certain legal obligations to fulfill. If we process your personal data for this reason, we do not need to obtain your consent. Based on this legal basis, we process your identification and contact information, as well as data about the ordered products, to comply with, in particular, the following regulations: Act No. 89/2012 Coll. (Civil Code), Act No. 634/1992 Coll. (Consumer Protection Act), Act No. 235/2004 Coll. (Value Added Tax Act), Act No. 563/1991 Coll. (Accounting Act), and EU regulations against terrorism financing and money laundering.

For these purposes, we use personal data for a maximum period of 10 years.

2. If you visit our website

2.1. Use of cookies and other technologies

When you visit our website, we store and subsequently read small files called cookies on your device. Cookies are small files consisting of letters and numbers that we store in your web browser or on your computer's hard drive. Some cookies allow us to link your activities while browsing our pages from the moment you open the web browser window until you close it, while others remain on your device for a set period and are activated whenever you visit a web page that created a specific cookie. We not only store cookies on your device but also read the cookies that our website has stored on it. In this document, we will refer to this process simply as "storing." These cookies do not contain any personal data and are encrypted.

These cookies help us:

- Identify you as you navigate between different pages on our website and during subsequent visits. For example, we can remember which version of our website to display to you or which products you have filtered for display.

- Record your consent as outlined in this document.

- Ensure the full functionality of the shopping cart. When you add items to your cart, they are stored in cookies. Without this feature, the e-shop would not remember what you have in your cart, and it would be cleared when navigating between the e-shop's pages.

Such cookies and other files are necessary for the functioning of our website. If you block these cookies in your browser, our website may not work correctly, and we may not be able to provide our services to you.

Additionally, we store cookies from our website on your device, which allow us to:

- Track the visitation and behavior on our website, its individual pages, and create statistics and overviews of purchasing behavior on our e-shop.

- Enable us to store cookies for third parties, which they can use to collect data about your behavior on our website.

In order to display customized offers and targeted advertising within advertising and social networks on other websites besides our own, we also share data about your website behavior with advertising and social networks. However, we do not provide your identification data to these partners. You can find a list of the social and advertising networks we use in the section "Who processes your personal data and to whom we disclose it."

If you do not disable cookies in your browser and continue to browse our pages, we will assume that you consent to the use of these cookies and the sharing of your data with advertising and social networks. You can revoke your consent at any time by disabling this feature in your browser.

For information on the settings of specific browsers, please visit the following addresses:

- Internet Explorer: https://support.microsoft.com/cs-cz

- Google Chrome: https://support.google.com/

- Mozilla Firefox: https://support.mozilla.org/cs/

- Opera: http://help.opera.com/

- Safari: https://support.apple.com/

For more information about cookies, please visit here: https://www.google.cz/intl/cs/policies/technologies/cookies/ or here: https://cs.wikipedia.org/wiki/HTTP_cookie.

2.2. Use of personal data of website visitors:

If you visit our website, we process data about your behavior on the website based on our legitimate interest (without your consent) for the following purposes:

- Obtaining information to improve our website in the future. Our legitimate interest lies in improving our services for you.

- Creating statistics and overviews, particularly tracking the website's traffic, individual pages, and measuring the effectiveness of advertisements. Our legitimate interest lies in measuring the efficiency of our website and advertising expenses.

We obtain data about your behavior on the website not only from cookies but also supplement it with the following information:

- IP address of your device (the address your device uses to communicate with other devices on the internet)

- Operating system of your device, its version, and language settings

- Browser you use on your device, its version, and language settings

- Web page address (URL) from which you arrive at our website

We use these personal data for a period of 14 months. You have the right to object to this processing.

3. Communication through various channels:

If you communicate with us through different channels, particularly via email and social media, we process your identification and contact information, as well as records of the communication, based on our legitimate interest (without your consent) for the following purposes:

- Handling your requests. If you have ordered goods from us and your request relates to that contract, we may process this information based on the fulfillment of the contract with you.

- Keeping records of your requests to ensure that we fulfill them properly and in a timely manner.

- Providing evidence that we have received and addressed your requests, for example, when you place an order or file a complaint through these channels.

- Analyzing the requests to improve the quality of our services.

We retain these personal data for a period of 12 months. You have the right to object to the processing based on our legitimate interest.

4. If you give us your consent:

If you have not yet used our services (not ordered goods or products from us) and you provide us with your data and give us your consent, we may use your identification and contact information for sending offers via email.

Your consent is entirely voluntary, and you can revoke it at any time. To withdraw your consent, contact us at client@lepatio.cz or simply click on the "Unsubscribe" link at the bottom of each email/newsletter, and you will be removed from the list for receiving offers/newsletters.

We process all the personal data mentioned as the data controller. This means that we determine the purposes for which we collect your personal data, specify the means of processing, and are responsible for ensuring proper execution.

We may also disclose your personal data to other entities acting as data controllers, including:

- If you are the recipient of goods ordered from us, we may disclose your personal data to our partners involved in fulfilling the order, specifically partners providing transportation and delivery services, such as Česká pošta, a courier service, or another carrier, as agreed.

- In fulfilling our legal obligations, we may disclose certain personal data to administrative authorities and government agencies if required to do so.

- Based on your consent, we may disclose data to advertising and social networks, as described in the section on the use of cookies and other technologies, specifically: Google Ireland Limited (registration number: 368047), headquartered at Gordon House, Barrow Street, Dublin 4, Ireland; the privacy policy of this company is available here: https://policies.google.com/technologies/ads, Seznam.cz, a.s., Radlická 3294/10, 150 00 Prague 5, Czech Republic, Facebook Ireland Limited, headquartered at 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, and Heureka Shopping s.r.o., Rumunská 655/9, 460 01 Liberec 4.

- We also utilize the services of other processors to process personal data solely according to our instructions and for the purposes described in the section on why we process personal data and what entitles us to do so. Such processors include:

  - Providers of cloud and hosting services and other technology suppliers, support, and related services for our internal processes.

  - Providers of email and other communication tools when processing personal data to facilitate communication with you.

  - Lawyers, tax advisors, auditors, debt collection agencies.

All our partners are carefully selected and are bound to secure your personal data through technical and organizational security measures (software protection, access rights, employee confidentiality obligations).

How do we protect your personal data?

Your data is stored on servers managed by IRISOFT SYSTEMS, s.r.o. (https://www.byznysweb.cz/) for the e-shop and by ACTIVE 24, s.r.o. (https://www.active24.cz/) for the website. Both companies employ state-of-the-art security measures at a professional level. Therefore, your data is not physically located in our company but rather on secure servers on the Internet, accessible only to authorized personnel. Only trained employees have access to company PCs.

From which sources do we obtain personal data?

In most cases, we process personal data that you provide to us when ordering goods or communicating with us. We also obtain personal data directly from you by tracking your behavior on our website. In certain cases, LE PATIO is authorized to obtain personal data from public registers, particularly when LE PATIO is exercising its legitimate interests, especially the interest to act cautiously.

What rights do you have regarding the processing of personal data?

Just as we have rights and obligations in processing your personal data, you also have certain rights in the processing of your personal data. These rights include:

Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we disclose it, who processes it besides us, and what other rights you have related to the processing of your personal data. You can find all this information in the document "Personal Data Processing Principles for Natural Persons." However, if you are unsure about which personal data we process about you, you can request confirmation of whether personal data concerning you is being processed by us, and if so, you have the right to access this personal data. Within the right of access, you can request a copy of the processed personal data, with the first copy provided free of charge and any subsequent copies subject to a reasonable fee.

Right to rectification

If you discover that the personal data we process about you is inaccurate or incomplete, you have the right for us to promptly rectify or complete it.

Right to erasure

In certain cases, you have the right for us to erase your personal data. We will erase your personal data without undue delay if one of the following reasons applies:

* Your personal data is no longer necessary for the purposes for which we processed it.

* You withdraw your consent to the processing of personal data, and the data processing is based solely on your consent, with no other legal grounds for us to continue the processing.

* You exercise your right to object to the processing (see the section Right to object to processing) of personal data processed based on our legitimate interests, and we determine that we no longer have any overriding legitimate interests justifying such processing.

* You believe that our processing of your personal data no longer complies with applicable laws and regulations.

This right does not apply if the processing of your personal data remains necessary to fulfill our legal obligations or to establish, exercise, or defend our legal claims (see the section Why do we process personal data and what is the legal basis).

Note: The accuracy of the translation may vary, and the original text should be referred to for official purposes.

Right to restriction of processing

In certain cases, in addition to the right to erasure, you can exercise the right to restriction of processing of personal data. This right allows you to request, in specific circumstances, the labeling of your personal data and that these data are not subject to any further processing operations, but only for a limited period of time, unlike the right to erasure which is permanent. We must restrict the processing of personal data when:

* You dispute the accuracy of the personal data until we can establish the accuracy of the data.

* We are processing your personal data without sufficient legal basis (beyond what we are required to process), but you prefer restriction of processing instead of erasure (for example, if you anticipate providing us with such data in the future).

* Your personal data is no longer necessary for the purposes of processing stated above, but you require them for the establishment, exercise, or defense of your legal claims.

* You object to the processing. The right to object is described in more detail below in the section Right to object to processing.

During the period of investigation, if your objection is justified, we are obligated to restrict the processing of your personal data.

Right to data portability

You have the right to receive all your personal data that you have provided to us and that we process based on your consent (see the section If you grant us your consent) and for the performance of a contract. We will provide your personal data to you in a structured, commonly used, and machine-readable format. In order to facilitate the transfer of the data upon your request, this can only apply to data that we process automatically in our electronic databases.

Note: The accuracy of the translation may vary, and the original text should be referred to for official purposes.

Right to object to processing

You have the right to object to the processing of personal data based on our legitimate interests (see the section Why we process personal data and what authorizes us to do so). If it concerns marketing activities, we will cease processing your personal data without undue delay. In other cases, we will do so unless we have compelling legitimate grounds for continuing such processing.

Right to lodge a complaint

Exercising the above-mentioned rights does not affect your right to lodge a complaint with the relevant supervisory authority. You can exercise this right, especially if you believe that we are processing your personal data unlawfully or in violation of applicable laws. You can file a complaint against the processing of personal data carried out by us with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, or on the website of the authority: https://www.uoou.cz/podatelna-uradu/os-1006, or via email at posta@uoou.cz.

How to exercise individual rights

For all matters related to the processing of your personal data, whether it's an inquiry, exercising a right, filing a complaint, or anything else, you can contact us via the email address client@lepatio.cz.

We will handle your request without undue delay, but no later than within one month. In exceptional cases, especially due to the complexity of your request, we are entitled to extend this period by an additional two months. We will inform you about any such extension and its justification.