Privacy policy

PERSONAL DATA PROTECTION POLICY

 

BJUTIP a.s., Id. No.: 10865373, Tax Id. No.: CZ10865373, registered seat at Vintrovna 395/25, Popuvky 664 41, registered with the Municipal Court in Brno under file number B 8541, as the operator of the website https://hu.afnan.com (hereinafter referred to as the “E-shop”), respects the right to personal data protection. For the purposes of this Personal Data Protection Policy, the term “BJUTIP” refers to BJUTIP a.s., or any other entities controlled by BJUTIP a.s., controlling BJUTIP a.s., or controlled by an entity controlling BJUTIP a.s. This Personal Data Protection Policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “Regulation” or “GDPR”).

 

1.      COLLECTED DATA

 

In accordance with the Regulation, BJUTIP processes personal data actively provided by users of the E-shop while using the website https://hu.afnan.com.

 

Personal data refers to any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, by reference to a specific identifier.

 

In providing its services, BJUTIP may process the following categories of personal data:

 

Personal identification data:

·       Name and surname;

·       Date of birth;

·       Permanent residence address;

·       Name of the business entity, association, legal entity, or artistic group;

·       Id. No. (IČ), Tax Id. No. (DIČ);

·       Registered office or place of business;

·       Billing address;

·       Identification details of a representative designated by a specific person or entity;

·       Identification details of the payer;

·       Bank account details;

·       Photographs;

·       Username and password;

·       Personal description or preferences.

 

Contact details:

·       E-mail address;

·       Telephone number;

·       Social media addresses.

 

Data on service usage and payment behaviour:

·       Type and specification of services provided and their price;

·       Payment information.

 

Data from communication between BJUTIP and data subjects:

·       Records of face-to-face interactions;

·       Written and electronic correspondence;

·       Transcriptions of telephone conversations;

·       Recordings of telephone conversations.

 

Data processed based on processing consent or legitimate interest:

·       Information about user behaviour on the E-shop, referring websites, and the path taken by the website visitor, including data obtained from cookies;

·       Information about clicks and products viewed by the visitor on the E-shop;

·       Information about the visitor’s computer, IP address, date, time, the address of the website from which the visitor connects to the E-shop, search terms, file names, the browser used to access the E-shop, and internet connection details, including operating system data;

·       Data obtained from surveys;

·       Contact details in case of persons other than E-shop customers.

 

2.     PERSONAL DATA USE AND RETENTION PERIOD

 

BJUTIP uses your personal data primarily for the following purposes:

 

(a)    to conclude and exercise rights and obligations under a purchase or other agreement on the E-shop;

(b)   to communicate with E-shop users and administer contractual relationships;

(c)    to analyse, evaluate, and improve services for E-shop users;

(d)   to handle complaints, claims from defective performance, and grievances;

(e)    to fulfil legal duties; and

(f)    to inform users about changes and updates in products and services provided, as well as personalised offers.

 

BJUTIP retains personal data only for as long as any of the aforementioned purposes for processing exist and subsequently only for the period and under the conditions in accordance with applicable legal regulations.

 

If consent is granted for business and marketing purposes, this retention period is [10] years from the granting or renewal of consent. In other cases, the retention period depends on the purpose of the processing or is stipulated by applicable law.

 

3.     PERSONAL DATA PROCESSING LEGAL BASIS

 

The specific legal basis enabling BJUTIP to process personal data depends on the purpose for which given personal data are being processed. In specific cases, BJUTIP may process personal data even without the user’s consent if:

 

3.1 Performance of a Contract

Processing is necessary for the conclusion or performance of a contract, including the administration of any events, surveys, or competitions organised by BJUTIP, responding to customer and user inquiries, communicating with them, offering consumer programs, or managing user preferences.

 

3.2 Compliance with Legal Obligations

Processing is necessary to fulfil legal obligations (e.g., in the fields of accounting and taxation).

 

3.3 Legitimate Interest

Processing is necessary to protect BJUTIP’s legitimate interests, for example in relation to enforcing claims under concluded contracts or analysing and improving our services;

 

The data subject is a contractual partner, client, participant in competitions or other promotional events. In such cases, BJUTIP may, based on legitimate interest, process personal data for direct marketing purposes, i.e., offering products, informing about updates, or other commercial communications personally, by phone, or via email;

 

Legitimate interest in improving our services. This serves our business interests in better understanding user needs and expectations, thereby improving our services, the E-shop, and its features for the benefit of users as consumers, including conducting analyses, satisfaction measurements, and collecting statistical data;

 

Legitimate interest in proper functioning of the E-shop, including the proper display of content, creation and retention of orders, login credentials, personalisation, user device parameters including display or screen resolution, testing new ideas, measuring responses to advertising campaigns, and tracking how users discover the website, including technical cookies;

 

Legitimate interest in preventing fraud;

 

Legitimate interest in protecting the E-shop, ensuring it remains secure, protected, and continuously functional and improved.

 

3.4 Consent

 

As of 11 November 2024, BJUTIP processes personal data based upon a consent for business purposes, i.e. for the purpose of news notifications or other commercial communications, specifically to create suitable product and service offers from BJUTIP or third parties in connection with contacting customers by telephone, in writing, through all forms of internet advertising, and via electronic communication using the contact details provided. Accordingly, BJUTIP will also create and retain data about users who grant this consent, including information about their typical behaviour when using BJUTIP’s services and products, and create and retain anonymised behaviour analyses. All these activities are absolutely necessary for addressing customers with appropriate marketing offers.

 

Based upon a user’s consent, BJUTIP is also authorised to process contact details for marketing purposes. For individuals who have given consent to marketing contact via electronic means, BJUTIP processes their contact details provided for the purposes of marketing BJUTIP’s services and products for the period specified in the consent. If such consent is granted through websites operated by BJUTIP, data from BJUTIP cookies placed on those websites will also be processed, provided that cookies are enabled in the user’s web browser.

 

Users may withdraw their consent for such use of personal data at any time by sending a notification to info@bjutip.com by mail to BJUTIP’s address specified above.

 

BJUTIP uses e-mail for its own or third-party commercial communication. BJUTIP is always identified as the sender of each such communication. BJUTIP may send commercial communications either based on BJUTIP’s legitimate interest to the contacts of individuals who have entered into a Portal Usage Agreement,  until the user in question chooses to opt out, or based on explicit personal data processing consent granted for marketing and business purposes. The commercial communications include a contact address for rejecting further communications.

With the user’s consent for the use of cookies, BJUTIP is authorised to deliver behaviourally targeted online advertisements for products and services that might interest the user based on their previous behaviour; display advertisements and content on social media platforms; send recommendations, marketing communications, or content based on the user’s profile and interests; and personalise services for the user.

 

The effective date of data processing consent concerning the purposes mentioned above is specified in the consent. Providing consent for commercial purposes is voluntary and may be withdrawn by the user at any time. Based on a consent, all categories of data specified in the COLLECTED DATA section of this Personal Data Protection Policy may be processed for business purposes, for as long as BJUTIP is authorised to retain such data for the purposes of providing services, fulfilling legal obligations, and protecting its legitimate interests, but no longer than until the withdrawal of consent or the expiry of the period for which the consent was granted. If a user withdraws their consent, this does not affect the processing of their personal data by BJUTIP for other purposes and based on other legal grounds, in accordance with this Personal Data Protection Policy.

 

4.     DATA COLLECTING ENTITY

 

The controller and processor of personal data provided by users through the use of the E-shop, the conclusion of any agreement, or the provision of any personal data for a specified purpose is BJUTIP a.s., Id. No.: 10865373, Tax Id. No.: CZ10865373, registered seat at Vintrovna 395/25, Popuvky 664 41, registered with the Municipal Court in Brno under file number B 8541.

 

5.     PERSONAL DATA RECIPIENTS

 

We may provide personal data to:

 

(a)    Service providers who provide services related to our operations, including but not limited to payment intermediaries, entities assisting in contract administration and mutual claims fulfilment, entities responsible for printing and delivering documents, providers of digital services, online sales services such as social media monitoring, web analytics and search engines, as well as user-generated content processing tools;

(b)   Other entities in accordance with applicable legal regulations (such as tax authorities where required by law or the police in the context of criminal investigations etc.).

 

With a user’s consent, we may share personal data with third parties for direct marketing purposes.

 

We may share personal data with our partners if the services or products were co-developed by BJUTIP and its partner. In such cases, BJUTIP and the respective partner will process the user’s personal data independently, each in accordance with their respective personal data processing policies.

6.     PERSONAL DATA RECIPIENT CATEGORIES

 

BJUTIP shares personal data within its organisation. To fulfil its obligations and duties, BJUTIP may engage the services of specialised and professional entities. If such entities process personal data provided by BJUTIP, they act as personal data processors and are authorised to process such data only under BJUTIP’s instructions. These entities may not use the data for any other purposes. These services may include IT system administration, online advertising, business agency, expert activities, legal services, auditing, or debt collection.

 

BJUTIP carefully selects each such entity and enters into a data processing agreement with them, which imposes strict obligations regarding the protection and security of personal data. A list of processors is available upon request at info@bjutip.com. Personal data may be processed by entities based in the Czech Republic, EU member states, or so-called “safe countries.” Transfers and processing of personal data outside the European Union are always conducted in compliance with applicable legislation. For transfers outside the EEA, BJUTIP ensures data protection through appropriate contractual clauses or other suitable safeguards in accordance with GDPR.

 

BJUTIP is also entitled to disclose personal data to third parties in the following situations:

• If BJUTIP sells any business undertaking or assets, personal data may be disclosed to prospective buyers of such undertakings or assets. If BJUTIP or part of its assets is acquired by a third party, the personal data of its clients relating to such assets will be among the transferred assets. In such cases, the buyer processes personal data as the new controller under its privacy policy.
• If BJUTIP has a legal obligation to disclose or share personal data to comply with legal requirements, enforce or apply these terms of use/sale or other terms agreed upon by the user, or protect the rights, property, or safety of BJUTIP, its clients, or employees.
• If BJUTIP has the data subject’s consent or is otherwise authorised by law.

 

In fulfilling its legal obligations, BJUTIP transfers personal data to administrative authorities and agencies as required by applicable legislation.

 

7.     COOKIES

 

Cookies are small data files essential for the proper functioning of the E-shop website, placed on the user’s computer, as is common practice for most websites. These are text files stored by websites on the user’s computer or mobile device when the user begins using the site.

 

Cookies allow the website to remember user actions and settings for a certain period. This eliminates the need to re-enter such information during subsequent visits or while navigating between sections of the website.

 

If a user has enabled cookies in their web browser, we also use them to collect statistical data and personalise advertisements, allowing for further improvement of the website and the services provided. Information about how users interact with the website is shared with advertising and analytics partners, specifically Google. Details on how Google handles cookies can be found at https://www.google.com/policies/technologies/cookies/.

 

If a user disapproves of the use of cookies and data collected through our website employing cookie technology for the purposes outlined above, such user has the following options:

 

(a)    Block the use of cookies by adjusting their web browser or other computer program settings (i.e., configure the browser or program to block or disable cookies); or

(b)   Withdraw their consent free of charge by sending an email to info@bjutip.com or a letter to BJUTIP’s address.

 

Cookies are stored for 13 months in accordance with the Recommendation on the Use of Cookies and Similar Tracking Technologies from 25 May 2018 as issued by the Office for Personal Data Protection on 22 May 2018.

 

8.     USER RIGHTS

 

BJUTIP respects the right to privacy and ensures that data subjects have control over their personal data. In connection with personal data protection, the following rights apply:

 

Your Right	What It Means and How to Exercise It
Right to Be Informed	The right to receive clear and easily understandable information about how personal data are used and what rights the data subject has. Basic information is included in this Policy. For any additional questions, contact the controller.
Right of Access to Personal Data	The right to access personal data about the data subject held by BJUTIP (subject to certain restrictions).   BJUTIP is entitled to charge a reasonable fee reflecting administrative costs for providing the requested information. Clearly unfounded, unnecessary, or repetitive requests may not be addressed.   To exercise this right, contact the controller.
Right to Rectification of Personal Data	The data subject has the right to ensure that their personal data are accurate. If they are not, the data subject has the right to have inaccurate or outdated data corrected or incomplete data completed.   To exercise this right, contact the controller.
Right to Erasure of Personal Data (Right to Be Forgotten)	In certain cases, the data subject has the right to have their personal data erased. This right is not absolute, as we may have legal or legitimate grounds for retaining the data.   If you wish us to erase your personal data, contact the controller.
Right to Refuse Direct Marketing, Including Profiling and Automated Decision-Making	BJUTIP does not currently perform automated decision-making or profiling. If it does so in the future, the data subject will have the right to unsubscribe from direct marketing communications or refuse any automated decision-making or profiling.
Right to Withdraw Data Processing Consent at Any Time	As mentioned above, BJUTIP processes personal data based on the data subject’s consent in certain cases. The data subject has the right to withdraw such consent at any time. To withdraw consent, contact the controller.
Right to Object to Processing Based on Legitimate Interests	As mentioned above, BJUTIP processes personal data based on the grounds of legitimate interest in certain cases. The data subject has the right to object to such processing at any time. To object, contact the controller.
Right to Lodge a Complaint with a Supervisory Authority	The right to contact the relevant supervisory authority, in the Czech Republic the Office for Personal Data Protection, to file a complaint regarding BJUTIP’s data protection and privacy practices. Do not hesitate to contact us using the contact information below prior to lodging any such complaint.
Right to Data Portability	The right to transfer, copy, or move personal data from our database to another database. This applies only to data provided by you, processed based on consent or a contract, processed by automated means.
Right to Restrict Processing	The right to request restrictions on the processing of personal data. This means that we may retain the data but will not use or process them further.   This right applies in limited cases specified in the GDPR, namely:   ·       If the accuracy of personal data is disputed by the subject, for the period necessary to verify their accuracy. ·       Processing is unlawful, and the data subject opposes deletion and requests restriction instead. ·       The controller no longer needs the data for processing, but the data is required by the data subject to prove, exercise, or defend legal claims. ·       The data subject has objected to processing based on the controller’s legitimate interest, pending verification of whether the controller’s legitimate grounds override the data subject’s just reasons.
Right to Disable Cookies	You have the right to disable cookies.   Many cookies support the usability and functionality of websites or applications; disabling them may prevent the use of certain parts of the website/application.   If you wish to restrict or block all cookies that run on our websites/applications (which may prevent you from using certain parts of our websites) or on any other websites/applications, you can do so in your browser settings.

 

Contact the controller at info@bjutip.com.

 

9.     SECURITY

 

To ensure the security and confidentiality of personal data, which is of utmost importance to BJUTIP, technical and organisational measures are implemented especially to protect against unauthorised access and misuse, ensure the security of our IT systems, and facilitate data recovery in the event of an incident. Where appropriate, we use encryption to safeguard your data. All measures are regularly reviewed and updated.

 

The processing of personal data occurs both manually and in electronic information systems, which are subject to physical, technical, and procedural control. To protect data, we have established a security mechanism that includes technical, organisational, and personnel measures, and we require the same level of protection from our processors. For this purpose, BJUTIP adheres to its Internal Directive on Personal Data Handling.

 

10.   LINKS TO OTHER COMPANIES

 

Media may contain links to other media, particularly third-party websites. Please note that these third-party media are governed by their own privacy policies, which users should follow, and which BJUTIP cannot influence or be held responsible for in any manner.

 

11.   CHANGES TO THE PERSONAL DATA PROTECTION POLICY

 

We reserve the right to amend this Personal Data Protection Policy at any time. Any changes will be communicated by updating the “last modified” date at the top of the Policy, and your consent to such changes will be required.

 

12.   DATA PROTECTION OFFICER

 

The contact person for personal data processing at BJUTIP is Ing. Michaela Vítek Měsíčková, born on 15 October 1982, house no. 236, 664 48 Nebovidy, email: info@bjutip.com.

 

13.   CONTACT

In addition to the email address info@bjutip.com, the full version of the Personal Data Protection Policy is available at BJUTIP’s registered office.

 

If you have any questions regarding the processing of your personal data, require any related assistance, or wish to exercise your rights, please contact the person responsible for personal data protection by email at info@bjutip.com.

 

This Policy is effective as of 11 November 2024 and is issued in compliance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data, fulfilling BJUTIP’s informational obligations as a controller under Article 13 of the GDPR.