Datenschutzerklärung von Bookbot
Principles for the processing of personal data1. General Provisions
1.1 These principles for the processing of personal data (hereinafter referred to as the Principles ) explain how Knihobot sro (German website: Bookbot), tax no.: 054 00 651, with its registered office at Dukelských hrdinů 359/21, Holešovice, 170 00 Prague 7 , entered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 289573 (hereinafter referred to as " Bookbot " or " we ") collects the personal data of users of the portal on the website www.bookbot.de (hereinafter referred to as " e-shop " ) and/or by persons interested in making a purchase through Bookbot via the e-shop.
1.2 This Policy describes what personal data Bookbot processes, how and what it uses it for, and how it keeps your personal data secure. These principles represent information within the meaning of Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of data (hereinafter referred to as "General Data Protection Regulation" ) .
1.3 As part of this policy, personal data will be processed in the form of information that identifies a specific natural person or information that relates directly to such an identified person. Data processed by Bookbot under this Policy may also contain other (e.g. anonymized) information that is not Personal Data.
2. Who is responsible for the processing of your personal data?
2.1 Knihobot sro (Bookbot) is responsible for the processing of your personal data. If you have any comments regarding the processing of your personal data or wish to exercise your rights, you can contact us by email at [email protected].
2.2 Bookbot has not appointed a data protection officer.
3. Why do we process your personal data?
3.1 We process your personal data mainly because the processing of your personal data is necessary for the performance of a contract concluded between you and us (in particular a sales contract or a commission contract under which we broker the sale of your goods). Without the provision of the data to the required extent, the conclusion of the contract and the proper fulfillment of the contract cannot take place.
3.2 In other cases, we only process your personal data for the purposes for which you have given us your consent, typically in a web form or in a communication with us. The provision of personal data is voluntary, but without it we cannot process inquiries and cannot inform you about the measures taken.
4. Which personal data do we process?
4.1 We process personal data that you provide to us by completing order forms or sales inquiries. This is how we process your e-mail, first and last name, telephone number, bank details, information about the condition of books and other goods that you present to us for picking and, if applicable, your company name, registration number, VAT number, Your business address or other information that you provide to us.
4.2 When you visit the e-shop, we also passively process technical information such as IP address, Internet browser type, operating system or other technical metadata such as time zone settings. Information about your behavior in the e-shop can be stored in an anonymous form for analysis in order to improve the functionality of the e-shop.
4.3 We also use information about your activities on the e-shop and the offers you have viewed in order to ensure better operation of the e-shop and marketing. This data is collected automatically through the use of cookie tools. If you have enabled the storage of cookies on your device, this data is also collected via these files. If you do not agree to the processing of cookies, please disable them in your browser settings. Please note that disabling cookies will mean that some basic functions, such as adding items to your shopping cart, will no longer work.
4.4 Aggregated Data and Passively Collected Information may be used to create general statistical summaries. These reports are anonymous and do not contain any personal data within the meaning of the General Data Protection Regulation.
5. For what purposes do we process the data?
5.1 The processing of your personal data is necessary for the execution of a contractual relationship based on a purchase, commission or other contract and the exercise of the resulting rights and obligations; without the provision of this data, the contract cannot be concluded and fulfilled by us.
5.2 We also process your personal data for the purpose of registering e-shop customers and the goods sold, managing the user account of a registered e-shop customer, customer support (handling complaints or complaints, handling questions about the e-shop etc.), customer rating of the e-shop (if you provide them), conducting marketing activities (e.g. placing ads, remarketing, conducting analytics, etc.) and in certain cases direct marketing. We also use information about your activities in the e-shop to ensure better functionality of the e-shop.
5.3 We can also process your personal data for the purpose of control by public authorities.
6. What about automated decision making and profiling?
6.1 Your personal data are not subject to automated decision making, including profiling within the meaning of Article 22 paragraphs 1 and 4 of the General Data Protection Regulation.
7. Who do we share your personal information with?
7.1 We primarily use your personal data for our internal purposes.
7.2 However, since we are not able to provide all the necessary services ourselves, we also use the services of specialized companies (e.g. goods transport, analytics, accounting, etc.). We only provide these companies with the information they need to perform their specific functions, which includes, but in most cases does not include, your personal information. These service providers are authorized to use this information only to the extent necessary to perform their services to us and they do so under a properly executed data processing agreement.
7.3 We currently work with the following companies:
Česká posta, sp, Politických vězňů 909/4, 225 99 Praha 1 Česká republika;
Direct Parcel Distribution CZ sro, Modletice 135, 251 01 Říčany u Prahy;
Zásilkovna sro, Lihovarská 1060/12, 190 00 Praha 9;
General Logistics Systems Czech Republic, sro, Průmyslová 5619/1, CZ-58601 Jihlava;
Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbor Dublin 2, Ireland;
Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Dublin;
Mailgun Technologies, Inc., 535 Mission St., San Francisco, CA 94105;
Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg;
Heureka Shopping sro, Karolinská 650/1, 186 00 Praha 8 Karlín;
vpsFree.cz zs, Nad Dalejským údolím 2699/9, 155 00 Praha-Stodůlky;
Levné knihy as, Do Čertous 2660/16, 193 00 Praha 9.
ECOMAIL.CZ, sro, Na Zderaze 1275/15, 120 00 Praha 2.
Trusted Shops AG Cologne, Subbelrather Strasse 15c, 50823 Cologne, Nemecko
7.4 We do not pass on any personal data to third parties for the purpose of further processing.
8. Where is the data stored?
8.1 The data is stored on our backup servers and in the data center of vpsFree.cz zs. Data center security is fully GDPR compliant. All communication between your device and our web servers is encrypted.
9. How long do we process your personal data?
9.1 We process your personal data subject to your consent until you withdraw your consent, but no longer than for a period of 3 years from the time you gave your consent. Your personal data, which we process on the basis of another legal reason, will be stored by us for the duration of the contractual relationship and thereafter for a period of 3 years.
9.2 After the above periods have expired, we will only retain or otherwise process personal data if this is required by applicable law.
9.3 After the statutory retention periods have expired, we will anonymize your personal data or delete it from our databases and systems.
10. What are your rights?
10.1 We process your data transparently, in good faith, in accordance with the General Data Protection Regulation and the generally binding legal regulations. You have the right to access your data and the right to correct or supplement them. In the case of the processing of your data for which you have given your consent, you are entitled to withdraw this consent at any time. You also have the right to request the transfer of your personal data, the right to be notified of a security breach of your personal data and, under certain conditions, the right to have certain personal data concerning you erased.
10.2 You can exercise your right of access to your data and your other rights by sending a request electronically to [email protected], as well as any other questions. If you think that the processing of your data is not correct, you can lodge a complaint with the data protection authority.
These principles for the processing of personal data entered into force on October 1st, 2021.