The seller is the administrator of personal data provided for the purpose of fulfilling the subject of the contract. Administrator identification and contact information Company: Dipozitiv s.r.o. Address: Havanská 3a, Prague 7, 170 00 Business ID No.: 04819888 Tax ID No.: CZ04819888 Telephone number: +420 603 713 335 E-mail address: firstname.lastname@example.org Contact address: Havanská 3a, Prague 7, 170 00, Czech Republic Purpose of the processing, scope of personal data and legal basis for its processing The buyer acknowledges that, for the purpose of concluding the purchase contract, its subsequent fulfilment (order processing, securing delivery from the warehouse, and delivering the merchandise) and possible resolution of claims for defective performance, the administrator shall process and store their personal data, in accordance with Regulation 2016/679 of the European Parliament and of the Council (EU) (hereinafter the GDPR), in the following scope: first name, surname, address, e-mail address, and telephone number. The legal basis for processing personal data is in accordance with Article 6 (1) (b) of the GDPR for the fulfilment of a contract to which the buyer is a party. Category of recipient of personal data The administrator undertakes to not provide the buyer’s personal data to subjects other than the following processors: Contracted couriers: DHL and the Czech Post for the purpose of delivering the merchandise, during which the data shall be provided in the following scope: first name, surname, address, e-mail address, telephone number. Dipozitiv s.r.o. for the purpose of its business newsletter, in which the data shall be provided in the following scope: first name, surname, e-mail address. Storage period Personal data shall be stored by the administrator for the period necessary to fulfil the contract (order processing, supply from the warehouse, delivery of the goods), and further for the period of the legal warranty (24 months from receipt of the merchandise) or for the period provided by the contractual warranty. The buyer acknowledges that the administrator is required—in accordance with Section 31 of the Accounting Act (no. 593/1991 Coll.)—to store accounting documentation and accounting records (invoices) for a period of 5 years beginning with the end of the accounting period under which they fall (i.e. if you purchase goods during the year 2018, the invoice must be stored until the end of the year 2023). Pursuant to Section 47 of the Tax Administration Act (No. 337/1992 Coll.) the administrator is also required to store the invoice for a period of 3 years from the end of the taxable period in which the related tax duty for the invoice arose (i.e. if you purchase merchandise during the year 2018, the invoice must be stored until the end of the year 2021). The invoice contains the following personal data: first name, surname, and address, e-mail address, telephone number. The buyer acknowledges that the administrator is required—in accordance with Section 35 of the VAT Act (no. 235/2004 Coll.)—to store accounting documentation and accounting records (invoices) for a period of 10 years beginning with the end of the taxable period in which the fulfilment occurred (i.e. if you purchase goods during the year 2018, the invoice must be stored until the end of the year 2028). The tax document contains the following personal data: first name, surname, and address, e-mail address, telephone number. Rights of the buyer in relation to personal data The buyer furthermore acknowledges that, in accordance with Articles 15 through 21 of the GDPR, they are entitled to: a. access to their personal data that is comprised of the right to obtain confirmation from the administrator whether their personal data is or is not being processed, and if so, they are entitled to gain access to this personal data and to information defined in Article 15 of the GDPR; b. modify erroneous personal data that is related to him/her` furthermore, in terms of the purposes of processing, the buyer has the right to supplement missing personal data, by providing a supplementary declaration in accordance with Article 16 of the GDPR; c. deletion (“the right to be forgotten”) which consists of the administrator deleting personal data related to the buyer without undue delay as soon as it is no longer necessary for the purposes of fulfilling the contract, provided that there is no other reason for their further processing; d. restricting the processing of his/her personal data in cases defined in Article 18 of the GDPR; e. transference of his/her data in accordance with the conditions stated in Article 20 of the GDPR; f. object to the processing of his/her personal data in accordance with article 21 of the GDPR. Upon request, the administrator shall provide the buyer information on adopted measures in each case no later than 15 days from receipt of the request. If the buyer chooses to exercise their right to access to his/her personal data, the administrator agrees to provide the buyer a first copy of the personal data being processed free of charge, as well as a second copy free of charge, if the buyer so requests. In the event of any misgivings about the processing of his/her personal data, the buyer has the right to contact the Office for Personal Data Protection, which is the supervisory authority for these matters, and file a complaint. The seller shall allow purchases without registration, in which they shall use the data of unregistered buyers solely for the purposes of fulfilling the subject of the contract and not for marketing or business purposes.