Processing of Personal Data and Notification to the Subject
Privacy Policy
I. Basic provisions
The controller of personal data pursuant to § 5 letter o) of Act No. 18/2018 Coll. on the Protection of Personal Data as amended (hereinafter referred to as the "Act") is
MuscleBodyHome LTD , Souvenir 27, Seychely
email: hola@musclebody.es
Personal data means all information about an identified or identifiable natural person; an identifiable natural person is a person who can be directly or indirectly identified, in particular by reference to a specific identifier such as a name, identification number, location data, online identifier, or by one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
The controller has not appointed a responsible person for the protection of personal data.
II. Sources and categories of processed personal data
The controller processes personal data that you have provided to it or personal data that the controller has obtained based on the fulfillment of your order.
The controller processes your identification and contact details and data necessary for the performance of the contract.
III. Legal basis and purpose of processing personal data
The legal basis for processing personal data is
the performance of a contract between you and the controller pursuant to § 13 para. 1 letter b) of the Act,
the legitimate interest of the controller in providing direct marketing (especially for sending commercial notices and newsletters) pursuant to § 13 para. 1 letter f) of the Act,
your consent to processing for the purposes of direct marketing (especially for sending commercial notices and newsletters) pursuant to § 13 para. 1 letter a) of the Act in the event that there has been no order for goods or services.
The purpose of processing personal data is
to process your order and to perform the rights and obligations arising from the contractual relationship between you and the controller; when ordering, personal data necessary for the successful processing of the order is required (name and address, contact), providing personal data is a necessary requirement for concluding and performing the contract, without providing personal data it is not possible to conclude the contract or fulfill it on the part of the controller,
sending commercial notices and performing other marketing activities.
The controller engages in automatic individual decision-making within the meaning of § 28 of the Act. You have provided your explicit consent to such processing.
IV. Storage period of personal data
The controller stores personal data
for the time necessary to perform the rights and obligations arising from the contractual relationship between you and the controller and to assert claims arising from these contractual relationships (for a period of 15 years after the termination of the contractual relationship).
until consent to the processing of personal data for marketing purposes is revoked, for a maximum of 3 years if personal data is processed based on consent.
After the expiration of the retention period of personal data, the controller will erase the personal data.
V. Recipients of personal data (subcontractors of the controller)
Recipients of personal data are persons
participating in the delivery of goods / services / payment processing under a contract,
providing services for the operation of the online store and other services related to the operation of the online store,
providing marketing services,
for the purpose of accounting for tax documents in accordance with the contract and with generally binding legal regulations to the extent:
- name and surname, title,
- postal address,
- billing address,
- email address,
- telephone contact,
- bank account data,
- data on the subject of the administrator's performance.
The controller does not intend to transfer personal data to a third country (outside the EU) or to an international organization.
VI. Your rights
Under the conditions set forth in the Act, you have
the right to access your personal data pursuant to § 21 of the Act,
the right to rectify your personal data pursuant to § 22 of the Act, or to restrict processing pursuant to § 24 of the Act,
the right to erase personal data pursuant to § 23 of the Act,
the right to object to processing pursuant to § 27 of the Act,
the right to data portability pursuant to § 26 of the Act,
the right to withdraw consent to processing in writing or electronically to the address or email of the controller specified in article III of these terms.
Furthermore, you have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to the protection of personal data has been violated.
VII. Conditions of personal data security
The controller declares that it has taken all appropriate technical and organizational measures to secure personal data.
The controller has taken technical measures to secure data repositories (username, password, antivirus program, and firewall) and repositories of personal data in paper form (locked room).
The controller declares that only persons authorized by it have access to personal data.
VIII. Final provisions
By submitting an order via the online order form, you confirm that you are familiar with the terms of protection of personal data and accept them in their entirety.
By agreeing to these terms through the online form, you agree that you are familiar with the terms of protection of personal data and accept them in their entirety.
The controller is entitled to change these terms. It will publish the new version of the terms of protection of personal data on its website and will also send you the new version of these terms to your email address provided to the controller.
These terms take effect on May 25, 2018.