I. Legal basis of processing

Personal data of customers and other individuals (further also as the “data subject”) processed by Forinel Trading SE is processed in accordance with the valid legal regulations, in particular with the Regulation of the European Parliament and of the Council (EU) No. 2016/679, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

 

II. Controller of personal data

Forinel Trading SE, business ID no. 02214181, registered office Na hlídce 22, 130 00 Prague 3 is the controller of the obtained personal data (further also as the “controller”).

 

III. Accuracy of personal data

Data subjects are obliged to provide accurate and truthful personal data (for example during registration, in their user accounts, when ordering via the store web interface) and are required to inform the controller about any change in their personal data without undue delay.

 

IV. Purposes and legal basis of personal data processing

A. Name, surname (including any additional details identifying an individual or a business of an entrepreneur, who is a natural person), title (if provided by the customer), residential or business address, mailing address, business ID no., tax ID no., e-mail address of data subject, telephone number and details of purchases made are processed for the purposes of performance under a contract (such as customer identification, order confirmation, information on the status of an order, order delivery, issue of a tax document); the necessity of such data for performing under a contract involving the data subject as one of the contractual parties or for implementing measures adopted prior to concluding a contract upon request of the data subject is the legal basis for processing this data for the purpose specified above.

The personal data specified above continues to be processed after fulfilling a contract, if this is necessary for fulfilling legal obligations applicable to Forinel Trading SE.

B. The personal data specified under paragraph A and details concerning the history of orders placed by customers, purchases made and submitted warranty claims may be processed for the purposes of keeping customers’ online accounts; the consent provided by customers is the legal basis for processing this data for the specified purpose.

C. Customers’ personal data specified under paragraph A may be processed for the purposes of direct marketing, i.e. in particular for sending commercial messages concerning goods and services provided by Forinel Trading SE; the justified interest of Forinel Trading SE is the legal basis for processing this data in this case. If you are participating in a competition organised by Forinel Trading SE, the specified data may be processed for the purposes of direct marketing based on a consent you have provided.

D. Name, surname, number of the data subject’s ID card or passport or other identification and contact details may be requested and processed by Forinel Trading SE for the purposes of identifying persons when refunding monetary or non-monetary performance due to termination of a contractual relationship (for example cancellation of a contract of purchase by withdrawal), accepting prizes in competitions organised by Forinel Trading SE or collecting goods, and the associated protection of the parties in the case of handover of any performance to an unauthorised person. The controller’s justified interest is the legal basis for processing this data in this case.

E. Identification details of data subjects in the form of camera recording obtained in sales and storage premises of Forinel Trading SE may be processed by Forinel Trading SE for the purposes of protection of the company’s assets or lives and health of persons. In justified cases, this data may be handed over to bodies active in criminal proceedings or to other interested parties for fulfilling the purpose of processing (such as an insurance company). The justified interest of Forinel Trading SE is the legal basis for processing this data in this case.

F. This website uses cookies for proper functioning, statistical and marketing functions. You can find more information about their processing and use on this page.

V.

Providing the personal data specified in article IV, paragraph A and F is a contractual requirement of Forinel Trading SE. The name, surname, residential address and e-mail address of buyers who are natural persons not conducting business, and the name, surname (including any additional details identifying an individual or a business of an entrepreneur, who is a natural person), registered office, business ID no., tax ID no. (in the case of VAT payer), and e-mail address in the case of buyers who are natural persons conducting business are also details that must be stated in a contract; a failure to provide this data may lead to inability to conclude the relevant contract.

 

VI. Duration of storage

Personal data will be stored by Forinel Trading SE for the period of time required by the valid legal regulations, and if this period of time is not specified, for the duration of the legal basis for processing or for the duration necessary for determination, execution or defence of legal claims.

 

VII. Categories of personal data recipients:

Forinel Trading SE may delegate personal data processing to third parties, who act as processors.

• Consignment carriers
  The controller is entitled to provide customers’ name, surname (including any additional details identifying an individual or a business of an entrepreneur, who is a natural person), title (if provided by the customer), delivery address and telephone number to an entity ensuring delivery of the goods ordered for the purposes of delivery of the goods ordered.
• Accounting, taxation and legal service providers
  The controller is also authorised to provide personal data to entities providing accounting, taxation and legal services to the controller for the purposes of fulfilling its legal obligations and when this is necessary for determination, execution or defence of legal claims, whether in judicial, out-of-court or administrative proceedings.
• Entities assessing justification of warranty claims.
  The controller is authorised to provide tax documents concerning the goods purchased, which contain customers’ e-mail addresses and telephone numbers in addition to the particulars required by law, to an entity arranging assessment of justification of warranty claims.
• Entities providing direct marketing services
  The controller is authorised to provide e-mail address and telephone number for the purposes of sending commercial messages to entities carrying out these activities for the controller as processors.
• Entities providing services of an issue/warranty claim point
  The controller is authorised to provide identification and contact details, details of orders placed, purchases made and submitted warranty claims, and bank account to entities providing services of an issue point and a warranty claim point.
• Entities communicating with customers to obtain evaluation.
  The controller is authorised to provide information on orders and e-mail address to entities communicating with customers to obtain evaluation of purchased goods and services provided with consent of the relevant data subject.
  

   

VIII. Right to access personal data

Data subjects are entitled to obtain confirmation from the controller as to whether the personal data concerning the relevant data subject is or is not processed and, if the data is processed, they are entitled to gain access to this personal data.

 

IX. Right to have personal data corrected

Data subjects are entitled to having their inaccurate personal data corrected by the controller without undue delay. In view of the purposes of processing, data subjects are also entitled to have their incomplete personal data completed, including on the basis of an additional declaration provided.

 

X. Right to have personal data erased

Data subjects are entitled to have the personal data of the relevant data subject erased by the controller without undue delay and the controller is obliged to erase personal data without undue delay if any of the reasons for erasure stipulated by the General Data Protection Regulation is fulfilled.

 

XI. Right to limit personal data processing

Data subjects are entitled to have the processing of their personal data limited by the controller in the cases stipulated by the General Data Protection Regulation.

 

XII. Right to transfer personal data

Under the conditions stipulated by the General Data Protection Regulation, data subjects are entitled to obtain their personal data provided to the controller in a structured, commonly used and machine-readable format, and are entitled to hand over this data to a different controller without the controller, to whom the personal data was provided.

 

XIII. Right to object to personal data processing

Data subjects are entitled to object to the processing of their personal data processed on the basis of the controller’s justified interest, including profiling based on the controller’s justified interest, for reasons concerning the data subject’s specific situation. If personal data is processed for the purposes of direct marketing, data subjects are entitled to object to the processing of their personal data for this marketing, including profiling, if involved in this marketing, at any time.

 

XIV. Right to withdraw consent with personal data processing

Data subjects are entitled to withdraw the granted consent with personal data processing at any time. Withdrawal of consent is without prejudice to the legitimacy of processing based on the consent provided prior to its withdrawal. Consent may be withdrawn by e-mail in a message sent to the e-mail address: gdpr@forinel.eu, by a written notice sent to the controller’s registered office or to the controller’s data box (ID:tn94cfz). Consent to sending information about news and discount or marketing specials concerning the controller’s goods and services may also be withdrawn by electronic opt-out system by clicking on the link for opting out from receiving news directly in any sent e-mail message.

 

XV. Exercising rights

Data subjects may exercise the rights specified above via e-mail by sending a message to the e-mail address:  gdpr@forinel.eu, by a written notice sent to the controller’s registered office, or to the controller’s data box (ID:tn94cfz).

 

XVI. Data protection officer

The controller has appointed The Best Network Solution s.r.o., business ID no. 25512170, registered office 28. pluku 18, 101 00 Prague 10 – Vršovice as its data protection officer.

 

XVII. Right to file complaints

Data subjects are entitled to file complaints with the supervisory authority, in particular in an EU member state of their usual place of residence, place of employment or place where the alleged breach occurred, if they believe that the General Data Protection Regulation has been breached as a result of processing of their personal data. “Úřad pro ochranu osobních údajů” (the Office for Personal Data Protection) is the supervisory authority in the Czech Republic.