Zpracování osobních údajů
Privacy Policy
Business entity: MgA. Tomáš Vacek, Company ID: 87382440, registered office at Na Výsluní 464, 561 64 Jablonné nad Orlicí, Czech Republic, is required under Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation, hereinafter referred to as "GDPR") to inform individuals about the personal data it processes, for what purposes, and in what way this processing is conducted in accordance with applicable legislation. It must also disclose to whom and why this data may be provided and inform individuals about their rights related to the processing of their personal data.
Right to Information (Art. 13 GDPR)
This policy has been effective since May 25, 2018 and is issued in accordance with GDPR to fulfill our duty of information pursuant to Article 13.
Categories of Personal Data
We process the following categories of personal data: academic title, full name, company name, company ID, VAT number, permanent address, business or billing address, bank account details, signature, phone number, email address, and links to individualized profiles on social media or websites.
Purposes, Legal Grounds and Data Retention Period
- Processing based on contract – e.g., purchasing goods
- Processing based on legitimate interest – e.g., protection of legal rights
- Processing based on law – e.g., accounting obligations
- Processing based on consent – e.g., newsletters and marketing communications
Personal data is retained only for the time necessary to fulfill the specific purpose or for the duration required by law (e.g., invoices are kept for 10 years).
Processing Based on Consent
If you give consent for marketing purposes, we will process your data primarily for sending newsletters and commercial offers related to our products. Your data may also be used to create anonymized behavior analytics, including cookies, which are subject to separate consent on our website. This consent is voluntary and can be withdrawn at any time. Data is retained during the use of services and for 4 years thereafter or until consent is withdrawn.
Methods of Processing
Personal data is processed both manually and electronically. It is stored in paper and digital form in secure locations. Employees and external contractors handling the data are bound by confidentiality agreements.
Recipients of Personal Data
We cooperate with various service providers such as IT administrators, accountants, lawyers, and logistics partners. These third parties receive data only to the extent necessary to fulfill the purpose and only under data processing agreements. A list of data processors is available upon written request sent to cappali@cappali.com.
Gift Voucher Policy
Please note that funds paid for gift vouchers cannot be refunded. Gift vouchers can only be redeemed for products on our e-shop and only within the validity period stated on the voucher.
Your Rights Under GDPR
- Right of Access – to obtain information and a copy of your data
- Right to Rectification – to correct inaccurate data
- Right to Erasure – to have data deleted when no longer necessary
- Right to Restrict Processing – until an objection is resolved
- Right to Data Portability – to transfer data to another controller
- Right to Object – to processing based on legitimate interests
- Right to Lodge a Complaint – with the Data Protection Authority (www.uoou.cz)
Automated Decision-Making and Profiling
We do not conduct automated decision-making with legal effects or create automated profiling databases.
Withdrawal of Consent
You may withdraw your consent to data processing at any time by contacting us at cappali@cappali.com or in writing at our business address.