Personal data protection

In accordance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679 of the European Parliament and of the Council, hereinafter referred to as "the Regulation"), we provide information on the processing of personal data.

1. Our contact details for data protection matters

1.1 Our company Lino s.r.o. acts as a so-called personal data controller. In case of questions, requests or objections relating to the processing of personal data, please contact us using the contact details below:

Written contact:

Lino s.r.o.Václavská 226/2

603 00 Brno

Electronic contact:

[email protected]

1.2 We do not have a Data Protection Officer.

2. Legal basis for processing personal data, method and purpose of processing, storage period

We are entitled to your personal data andwithout your consentprocess:

• to the extent necessary to fulfil our obligations under the Purchase Agreement,
• to the extent necessary to fulfill our obligations in maintaining the user account,
• to the extent necessary to comply with a legal obligation imposed on us by a legal provision, such as a law,
• to the extent necessary to protect our legitimate interests - direct marketing

Below is more detailed information about the different legal bases for processing personal data:

2.1 Processing for the performance of the contract you have entered into with us

• 2.1.1 We process personal data in order to enter into a purchase contract with you and to fulfil our obligations under the purchase contract you have entered into with us (Article 6(1)(b) of the Regulation). In this way, we process your identification data (first name, surname) and address data (home address, or the delivery address you have provided, e-mail address, telephone number) or descriptive data if you have provided them in the order (academic degree).
• 2.1.2Purpose of processingpersonal data is the conclusion of the purchase contract and the subsequent fulfilment of our obligations under the purchase contract, in particular the delivery of the goods to the address you provide, including the transfer of personal data to the carrier or delivery service of your choice.
• 2.1.3Storage time:For the time necessary to fulfil our obligations under the Purchase Agreement.

2.2 Processing for the purpose of maintaining a user account

• 2.2.1 We set up a user account for our buyers and process their personal data in order to fulfil our obligations under the terms and conditions (Article 6(1)(b) of the Regulation) and to allow customers to remotely access their personal data directly or to allow them to make changes and corrections to it (Article 6(1)(c) of the Regulation).
• 2.2.2Purpose of processingpersonal data is a service consisting in automatic pre-filling of the order form, displaying the order history in the user account and providing direct access to personal data.
• 2.2.3Storage time:For the duration of the user account, i.e. until you cancel your user account. However, in the case of inactive customers, we may cancel their user account and delete their personal data upon prior notice.

2.3 Processing for compliance with a legal obligation imposed on us by law

• 2.3.1 We also process your personal data because it is necessary for compliance with legal obligations to which we are subject (Article 6(1)(c) of the Regulation).
• 2.3.2 We issue tax documents which we are obliged to keep and archive for the period of time stipulated by the legislation, in particular the Accounting Act (Act No. 563/1991 Coll.) and the Value Added Tax Act (Act No. 235/2004 Coll.). Other obligations arise from the Civil Code, in particular from the legal regulation of so-called consumer contracts.
• 2.3.3Purpose of processingYour personal data is the fulfillment of our legal obligations, especially in the field of accounting and tax regulations, as well as the handling of any complaints of defects in goods, the receipt of goods in the event of withdrawal from the purchase contract.
• 2.3.4Storage time:We keep personal data only for the necessary period of time and archive it in accordance with the statutory time limits imposed by law.

2.4 Our legitimate interests for direct marketing

• 2.4.1 We continue to process your personal data because it is necessary for the purposes of our legitimate interests (Article 6(1)(f) of the Regulation) in the manner set out below.
• 2.4.2 We may send an e-mail newsletter (commercial communication) to your e-mail address, which you have provided to us in connection with the conclusion of the purchase contract, but only with an offer of goods and related services of our e-shop - we will not send you any offers from third parties. You have the option to refuse the newsletter.
• 2.4.3Purpose of processingYour personal data is an opportunity to inform you about new products, events and services of our e-shop. We consider this necessary for the purposes of our legitimate interests. For this purpose, we only process your e-mail address. You can object to this processing of your personal data (see article 5.5) and you can very easily stop the processing of your personal data for direct marketing purposes by unsubscribing from the newsletter.
• 2.4.4Storage time:We keep your email address for the duration of your user account.

Onlyon the basis of your consentwith the processing of personal data we process your personal data:

• in connection with the use of cookies or network identifiers
• for the purpose of sending the newsletter (if you are not our customer)

2.5 Cookies and website visit data

• 2.5.1 If you consent to the use of cookies, we will collect information about which of our websites you visit and how you use them. In doing so, we will collect the following information:
• IP address,
• the date and time of your visit and the time you visited the site,
• the source URL (the page you are coming from),
• list of our visited pages
• and device and browser information (browser type and version, operating system, etc.).
• 2.5.2 We use and analyse this personal data for remarketing purposes.

2.6 Sending the newsletter

• 2.6.1 We need consent to send the newsletter from visitors to our website who are not our customers. They have the possibility to subscribe to the newsletter by entering their e-mail address.
• 2.6.2Purpose of processingemail addresses is to send commercial communications and offers to the email address you have entered in the login box.
• 2.6.3 You have the right to withdraw your consent to the processing of your e-mail address (personal data) at any time. However, this does not affect the lawfulness of the processing of your personal data prior to such withdrawal of consent. You can withdraw your consent to the processing of your personal data directly via the newsletter in the manner specified in the footer of each newsletter.
• 2.6.4 Unless you withdraw your consent beforehand, we will process your e-mail address for a period of five years.

3. Who do we provide your personal data to?

• 3.1 We pass on your personal data to third parties, i.e. recipients of personal data, in particular for the purpose of operating our e-shop, fulfilling our contractual obligations and for direct marketing purposes to the extent specified in Article 2 above.

3.2 Recipients of personal data may be:

• 3.2.1 Transport and dispensing service providers.
• 3.2.2 emailing service provider Rocket Science Group (known as MailChimp), 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA as the processor.
• 3.2.3 suppliers, insurance companies, external legal representation, other consumer authorities, transport companies in connection with the handling of claims and insurance claims.
• 3.2.4 tax authorities, tax advisors and auditors, where necessary to comply with our legal obligation.

4. Transfer of personal data to third countries

• 4.1 We process personal data in the Czech Republic or in EU member states.
• 4.2 In connection with the use of MailChimp, personal data is transferred to the USA. The recipient is the Rocket Science Group, which is, however, listed as a certified Privacy Shield company and thus ensures an adequate level of protection for personal data.

5. Your rights in relation to our processing of your personal data

5.1 We process your personal data in a fair and transparent manner, in accordance with the law. We also set out the rights you have in relation to the processing of your personal data.

5.2 Right of access to personal data

• 5.2.1 You have the right to access personal data concerning you as a so-called data subject under the conditions set out in Article 15 of the Regulation.
• 5.2.2 Your personal data is accessible to you within your user account for the entire duration of your account.

5.3 Right to rectification of personal data

• 5.3.1 If you believe that the personal data we process about you is inaccurate or incomplete, you have the right to ask us to correct or complete it. However, you can correct or amend your personal data yourself within your user account.

5.4 Right to erasure ("right to be forgotten"), right to restriction of processing

• 5.4.1 You have the right to request that we delete personal data relating to you without undue delay, but only if one of the grounds set out in Article 17 of the Regulation applies.
• 5.4.2 You have the right to restrict processing in any of the cases listed in Article 18 of the Regulation.

5.5 Right to object to the processing of personal data concerning you

• 5.5.1 You have the right to object to the processing of personal data concerning you where we process personal data on the basis of Article 6(1)(f) of the Regulation, i.e. for the purposes of our legitimate interests; we justify processing for direct marketing purposes on the basis of legitimate interests (see Article 2.4).
• 5.5.2 In practice, objecting to processing for direct marketing purposes means that you can object to receiving newsletters or other commercial communications and we will no longer send you newsletters or other commercial communications. However, you can simply unsubscribe from newsletters directly via the newsletter you receive or in your user account.

5.6 Right to portability of personal data

• 5.6.1 You have the right to obtain personal data relating to you in a structured, commonly used and machine-readable format and, where applicable, the right to transfer that data to another entity without us preventing you from doing so.
• 5.6.2 You also have the right to ask us to transfer your personal data to another entity that acts as a so-called data controller, if this is technically feasible.

5.7 Right to withdraw consent to the processing of personal data

• 5.7.1 If you have given us consent to process your personal data for purposes that require such consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent given prior to withdrawal.

5.8 Right to lodge a complaint with the supervisory authority

• 5.8.1 You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data is in breach of the law. You can lodge a complaint with the supervisory authority, which is:

Office for Personal Data Protection (OPDP)

Pplk. Sochora 27

170 00 Praguewww.uoou.cz

5.9. How to exercise the right?

• 5.9.1 You may exercise your data protection rights in writing or electronically at the addresses listed in Article 1 above. Please note that in case of doubt, we are entitled to verify the identity of the person who made the request or objection. The rights under Article 5 cannot be exercised by telephone.