Personal data processing

Basic Summary

DUNET s.r.o. processes your personal data because it is necessary to fulfil the contract concluded with you concerning the sale of goods (or to take steps at your request prior to entering into such a contract). Your personal data is also processed as required for the fulfilment of the company’s statutory obligations.

I. Identity and Contact Details of the Controller

The controller of your personal data is DUNET s.r.o., registered office: Pod Lesem 128, 25267 Tuchoměřice, Company ID No.: 25114701, registered in the Commercial Register kept by the Municipal Court in Prague, File No. C 50930 (hereinafter the “controller”).

Controller’s contact details:
Mailing address: Tibetská 806/2, 160 00 Prague
E-mail: dunet@dunet.cz
Phone: +420 737 333 902

The controller has not appointed a Data Protection Officer.

II. Legal Basis for Personal Data Processing

The legal basis for processing your personal data is the fact that such processing is necessary for:

performance of a contract between you and the controller, or for taking steps by the controller prior to entering into such a contract, pursuant to Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) (the “Regulation”);
compliance with legal obligations applicable to the controller under Article 6(1)(c) of the Regulation, in particular obligations arising from generally binding legal regulations, especially:
- Act No. 235/2004 Coll., on Value Added Tax,
- Act No. 586/1992 Coll., on Income Taxes,
- Act No. 563/1991 Coll., on Accounting,
  all as amended.

III. Purpose of Processing Personal Data

The purpose of processing your personal data is the performance of a contract concluded between you and the controller, including delivery of goods, handling of warranty claims, and actions taken prior to entering into such a contract, as well as fulfilling related statutory obligations of the controller.

The controller does not use automated individual decision-making within the meaning of Article 22 of the Regulation.

IV. Retention Period

Your personal data will be processed for the duration of the rights and obligations arising from the contract, and subsequently for the period required for archiving under applicable legal regulations, but no longer than the periods specified by those regulations.

V. Recipients of Personal Data

Recipients of your personal data may include:

shipping and logistics companies,
persons involved in delivering goods or processing payments based on the purchase contract,
providers of technical services for the controller, including e-shop operation, software services and data storage.

Recipients of your personal data processed for fulfilment of statutory obligations may also include financial authorities or other competent public authorities, where required by applicable law.

The controller does not intend to transfer your personal data to any third country (outside the EU) or to an international organisation.

VI. Rights of the Data Subject

Under the conditions set out in the Regulation, you have the right to:

request access to your personal data from the controller,
request rectification or erasure of your personal data,
request restriction of processing,
object to the processing of your personal data,
exercise the right to data portability.

If you believe that your personal data is being processed in violation of the Regulation, you also have the right to lodge a complaint with the supervisory authority.

You are not obliged to provide personal data. However, providing your personal data is a necessary requirement for entering into and performing a contract, and without providing your personal data it is not possible to conclude or fulfil the contract on the part of the controller.