1. About us and how to get in touch
The website www.emblemm.com/ is operated by EMBLEMM CZ s.r.o., IČO: 06605095, with its registered office at Černilov 71, 503 43, Černilov (hereinafter referred to as “Emblemm”). As defined in personal data protection regulations in force, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”), pietro filipi is the controller of your personal data. The personal data controller is the entity which determines the purposes and means of the processing, that is to say, the entity which decides why and how your personal data is processed.
We provide our contact details below in case you do not find answers to your questions in this document, or should you not understand any of the information given.
2. What personal data do we process?
At Emblemm, we process the following categories of personal data:
Identification details, particularly including first name, surname, date of birth and gender (these are optional);
Contact details, including e-mail address, invoicing address, delivery address, telephone number;
Financial details, particularly including information about your credit/debit card and bank account;
Details on purchases, particularly including details on the purchase and processing of orders (e.g. cart number, order number, amount paid, currency, any discounts applied, delivery method, number of items, product number, etc.); records of payments we have received from you (and any payments you have received from us) and details of other products you have received from us, and communication in regard to your orders;
Technical details, particularly including details on the devices you use to access our website, your IP address, log-in details, user name and password, browser type and version, time zone setting and location, and information on the operating system used;
Details on preferences, particularly including information on your purchases, orders, interests in regard to our products, and also any feedback you have given us.
Beyond the above details, we also collect, use and share aggregate data such as statistics and demographic information. Aggregate data can be derived from your personal details, but it is not considered personal details because you cannot be identified from it. Aggregate data helps us, e.g., to determine the percentage of users accessing a particular function on our website.
3. How we collect personal data?
It is primarily from you that we acquire your personal data, when you enter personal details on our website (e.g. when you fill in a form) or when you communicate with us either electronically, by post, by telephone or in any other way. This particularly applies to cases where
– you create an account or make a purchase on our website;
– you register to receive our newsletter;
– you contact us with a query or to report a problem (e.g. by telephone or e-mail).
We acquire some data on you automatically. This applies particularly to technical information on your device, information on what way you use our website (“data on the use of our website”) and data when you do not complete certain activities on our website (e.g. when you leave a product in your cart or do not complete your order). We acquire this data through cookie files, server logs and other similar technology.
In some cases, a third party provides your personal data. This mainly applies to technical data from analytical tool providers (e.g. Google), contact and financial details and information on the history of purchases you have made from payment and delivery service providers.
4. How we process personal data?
We process your personal data only to the extent necessary for a particular purpose and for a period necessary to fulfill this purpose. As personal data controller, we must have a legal basis for every processing purpose. At Emblemm, we process personal data when:
– you give us your consent to do so;
– it is necessary for the performance of a contract (e.g. so that we can process your order and send you the goods you have ordered, and also so we can assist you through our customer case service);
– we have a legitimate interest in processing the data for a specific purpose;
– law requires us to process the personal data for a particular purpose.
5. Purpose of processing personal data
Category of data processed
Legal basis for processing
Setting up a user account for a new customer
– necessary for the performance of a contract
Processing and delivering your order (including updates on order status, payment processing and fraud prevention)
– necessary for the performance of a contract
Communication with you (including sending out any information you ask for from us, information on changes to our terms and conditions and this information on personal data processing)
– necessary for the performance of a contract and – legitimate interest
Management and improvement of our business and website (e.g. solving problems, data analysis, system testing and maintenance)
– legitimate interest (to develop our business, correct setting of organisation measures and IT and fraud prevention)
Personalisation of content displayed on our website and online advertising (including measurement of the effectiveness of such advertisements)
– legitimate interest (so we know how customers use our website, we can improve it further, to develop our business activities and marketing strategy)
Use of analytical software tools in order to improve our website, marketing, and increase customer satisfaction
– legitimate interest (so we can differentiate types of customers according to which of our products they are interested in, we can improve our website and improve our marketing strategy)
Sending information on offers which might be of interest to you (direct marketing), including news and information on promotions (through e-mail)
– legitimate interest (to develop our business activities)
Sending reminders of uncompleted activities on our website (e.g. orders or items left in your cart)
– legitimate interest (to increase the satisfaction of our customers)
6. Processing and storing period of personal data
We only process and store your personal data for as long as necessary for the purposes detailed above, or for as long as to meet legal requirements. Once this period of time is over, we delete the personal data or render it anonymous.
If we process your personal data on the basis of legitimate interest, processing lasts for as long as we still have the legitimate interest. You can object at any time to the processing of your personal data when it is taking place on the legal basis of legitimate interest. If you submit an objection to the processing of your personal data for marketing purposes (which also includes profiling), we will stop processing your personal data for these purposes.
7. How we share personal data?
We share your personal data with our suppliers, mainly delivery companies, IT suppliers, hosting and marketing services providers, provides of statistical and database software tools, and also with other entities which provide services to us.
Under certain circumstances, we may be legally obliged to share your personal data with third persons (e.g. with law enforcement authorities, etc.). This is our legal duty.
9. Personal data security
Personal data processing is undertaken manually and automatically within electronic information systems, in electronic or paper form. Your personal data is processed mainly by our own employees and processors. We have undertaken appropriate security measures (in particular technical and organisational measures) in order to protect your personal data from any kind of accidental loss, destruction, misuse, damage and unauthorized or illegal access. We have entered into appropriate agreements with processors who process your personal data for us as controller such that due protection of your personal data is guaranteed. Employees and processors who are involved in processing your personal data are bound to keep it confidential. Your personal data is processed only within the European Economic Area.
10. Your rights in regards to personal data protection
At any time while your personal data is being processed, you can exercise the following rights:
- Right to access. You have the right to receive confirmation of whether and what personal data about you we process, including the right to receive a copy of the personal data we process.
- Right to rectification and completion. If you ascertain that the personal data we process is inaccurate or incomplete, you have the right to ask for it to be rectified and updated.
- Right to erasure. In some cases, you have the right to contact us and ask for the erasure of your personal data which we process. Please bear in mind that we cannot erase your personal data if its processing is necessary.
- Right to restriction of processing. In some cases, such as when you challenge the accuracy, legality or our need to process your personal data, you have the right to ask us to restrict the processing of your personal data. If we comply with your request, we will restrict the processing of your personal data to the minimum necessary (and in general we will no longer actively process your data). We place a record in our systems that there are restrictions on your data. If these restrictions are cancelled and we intend to continue to process your personal data, we will inform you in advance.
- Right to portability. You have the right to ask us to transmit your personal data which you have provided to us and which we process (in a commonly used and machine readable format) to a third party (another data controller) which you state in your request. Please bear in mind that you can only exercise this right if we process your personal data on the basis of your consent, or in order to fulfil an agreement and the processing is also automated.
- Right to lodge a complaint with the supervisory authority. If you think that there has been a breach of our obligations given by the law on the protection of personal data, you have the right to lodge a complaint with the Czech Office for Personal Data Protection, or another authority within a European Union member state which is entrusted with supervision over obligations in personal data protection being kept.
11. Right to object to personal data processing
Besides the rights detailed above, you also have the right to object to the processing of your personal data. This objection can be lodged when the legal basis for processing your personal data is the legitimate interest pursued by the controller or third party (or when the legal basis for processing is to carry out a task undertaken in the public interest or in the exercise of official authority).
You can also lodge an objection when we process your data for direct marketing purposes (on the legal basis of legitimate interest), including profiling with the objective of finding the most appropriate and attractive offers for you.
If you lodge an objection against processing, we will no longer process your personal data until such time as we can demonstrate compelling reasons for such processing which override your personal interests or rights and freedoms. If you lodge an objection against processing for the purposes of direct marketing, we will not longer process your personal data.
12. How can you exercise your rights?
If you decide to exercise any of the above detailed rights towards us, please inform us by writing to the e-mail or postal address given above. Please bear in mind that if you are exercising your right, we need to be sure of your identity. As such, in some cases we may ask you to prove your identity.
In the event you exercise any of the above detailed rights, we will inform you in writing without undue delay of how we are responding to your request.
13. Changes to information on personal data processing
We may amend or update this information on personal data processing in future. If we make any such changes, one way to ascertain this fact is that the date of the latest revision is given below. If we make changes which may have a significant impact on your privacy, we will also inform you as such in another appropriate manner (e.g. by e-mail or by a message placed within our Services environment). We recommend you read this information on personal data processing regularly to remain informed about how we process your personal data and how you can protect your privacy.
Latest update effective 25. 5. 2018