Carpe Iter Privacy Policy
1.Personal data administrator
1.1. ULW Czech, s.r.o., reg. office V Ráji 34, Hostavice, 198 00 Praha 9, Czech Republic, Europe, company identification 28256212, incorporated in the Companies Register kept by the Municipal Court in Prague, Docket C 135745, shall process your personal data as a data administrator (hereinafter as “we”, “us”).
2. Personal data
2.1. We process personal data provided by you only.
2.2. If you order goods or services from us, we need the information, which is referred to as mandatory in the ordering process to be able to deliver the goods, in particular
a. your first name and surname,
b. your billing and delivery address(es),
c. your e-mail address, to which we shall send the order confirmation which serves as a confirmation of entering into the purchase agreement, as well as a copy of Terms and Conditions,
d. your telephone number, we can send you a notice
of the goods delivery.
2.3. For VAT purposes we may also collect your VAT number and your IP address in order to collect evidence about your location for compliance with the EU VAT MOSS regulations.
2.4. When your order is delivered and fulfilled, you may get an e-mail message with support information and the request to evaluate the goods purchased.
2.5. If you contact us our support system, we shall also process your personal data stated in such communication.
2.6. In the event you provide us personal data of third persons, you are obliged to inform the person concerned and procure his/her consent to this Personal Data Protection Policy.
3. Automatic data processing
3.1. When you visit our website, we may collect certain information such the IP address, date and time of the visit to our website, information about your Internet browser, operation system or language settings. We may also process information about your conduct on our website, such as links opened or goods displayed. The details of your conduct on the web are
anonymised for the maximum protection of your privacy, the therefore we are not able to match them with a particular person.
3.2. If you access our website from your mobile phone or a similar device or through one of our mobile applications, we can process information about your mobile device, too (mobile phone details, records of application failure etc.).
4. Cookies
4.1. If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
4.2. If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
4.3. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
5. Reason of data collection
5.1. Your personal data is processed for the following reasons:
a. Purchase of goods and services: the primary purpose of processing your data is due dispatch and delivery of your order. If a problem occurs, we know who to contact from the data you provided.
b. Customer care: if you address us with a question/issue, we have to process your personal data in order to answer/resolve it. The data may be transferred to third parties in certain cases (e.g. delivery company).
c. User account: thanks to the personal data entered in your user profile, you will be able to use a number of functions (e.g. if you enter your telephone number, we can easily inform you about the time of the order delivery). You can change the entered details at any time, except for the e-mail address that serves for signing into your user account.
d. Marketing: Electronic marketing: e-mail commercial communication is sent to you upon your consent. You can easily unsubscribe from getting commercial communication by adjusting your user profile settings or using our contact form.
e. Customer reviews of goods and services: after you purchase products or services from us, your may be asked to evaluate them. You may also post a review on your own initiative.
f. Assertion of rights and legal claims and inspection by public authorities: we can also process your personal data in order to assert our rights and legal claims (e.g. in the event that we have an overdue invoice in your name). We may also process your data for inspections by public authorities and other serious reasons.
5.2. Your VAT number is collected and stored in order to
a. validate your VAT number,
b. apply the appropriate VAT regime (exemption, reverse charge)
c. obtain evidence for compliance with other tax regulations, which require the data to be stored for a set period of time.
6. Legal reasons for Processing of your Personal Data
6.1. Conclusion and Performance of a contract. Majority of your personal data is required by us in order to conclude the purchase agreement or another contract for goods and services you intend to purchase. After the contract is concluded, we process your personal data in order to duly deliver the purchased goods, or to provide the purchased services. We process in particular billing and delivery details on the above legal grounds.
6.2. Legitimate Interest. We also use your personal data to provide you the relevant content, which may be of interest to you. On the grounds of legitimate interest, we process particular personal data, which is processed automatically, and cookies. We may also send you e-mails and text messages on the same legal grounds.
6.3. In case we process your personal data on the grounds specified above in Articles 6.1. a 6.2. you are entitled to raise an objection to such processing on our website.
6.4. Consent. For the purposes of e-mail marketing, we process your personal data upon your consent. If you do not grant your consent and you are our customer, we may not send you
commercial communication without your consent.
6.5. If you grant your consent to the personal data processing, you are entitled to withdraw it at any time through our contact form.
7. Transfer of Personal Data to Third Parties
7.1. Your personal data is transferred to third parties in the following cases:
a. Delivery of goods: the carrier chosen by you would not be able to deliver the goods ordered unless we transfer the information on where and to whom the goods
should be delivered. This data is transferred to the carrier as entered in the order. Such data includes in particular your first name and surname, delivery address, telephone number where the carrier may contact you. The carrier is only entitled to process the personal data we transfer for the purposes of delivery; the carrier must delete the personal data promptly afterwards.
b. Delivery of goods stored for us by a contractual partner: if you order goods which are stored by our contractual partner, we have to transfer your personal data to this contractual partner who shall complete the order. Such data include in particular your first name and surname, delivery address, telephone number
where the carrier may contact you. The contractual partner has to transfer the data to the carrier that shall deliver the goods; otherwise the carrier would not be able to make the delivery. The contractual partner that stores the goods for us and the carrier are only entitled to process the personal data we transfer to them for the purposes of the goods storage/delivery; they must delete the personal data promptly afterwards.
c. Payment Cards: Our company does not process the details of payment cards used by you. The details of your payment cards are only available to the secure payment gateway and the relevant bank. Our payment provider is either Braintree (a PayPal service) or Stripe, Inc. (stripe.com).
7.2. Your personal data may be transferred to third parties in the following cases:
a. Public Authorities: in the event that we enforce our rights, your personal data may be transferred to a third party (e.g. an Attorney-at-Law). If we are obliged to
transfer your personal data by virtue of law or upon a request by a public authority (e.g. Police), we have to do so.
b. Companies in the Group: your personal data may be shared on the legal grounds of legitimate interest with subsidiaries of our company or companies in our group operating on different markets; in this case you are entitled to raise an objection thereto through our contact form.
8. Period of Processing Your Personal Data
8.1. We shall process your personal data for the entire duration of the contractual relationship between you and us.
8.2. In case your personal data processing is based on consent, your personal data shall be, in general, processed for 7 years or until such consent is withdrawn.
8.3. In case you subscribe to commercial communication, your personal data shall be processed for 7 years or until you express your disapproval of such communication. You can easily express your disapproval by adjusting your user profile settings or using our contact form.
8.4. Please note that the personal data necessary for the due rendering of services or for the fulfillment of all our duties, ensuing either from the contract between us or from generally binding legal regulations have to be processed regardless of whether you granted your consent for the period set out in the relevant legal regulations and in compliance therewith (e.g. tax documents must be processed for at least 10 years).
8.5. The data obtained through the user account or in a similar way are processed for the period of using our services and then usually for 5 years after cancellation. Basic identification data and the information why the user account was canceled or information which is a part of operational advance deposits are usually stored for the relevant period.
9. Personal Data Security
9.1. Your personal data is safe with us. We have adopted adequate technical and organizational measures in order to prevent unauthorized access and misuse of your personal data.
9.2. We try to use such safety measures that provide sufficient security of your personal data. The safety measures adopted are regularly updated.
10. Age limitation
10.1. Our e-shop is not intended for children under 16. Children under 16 are allowed to use our online shop only upon consent of his or her parent or guardian.
11. Your rights
11.1. In relation to your personal data, you have in particular the right to withdraw your consent to the processing of your personal data at any time, the right to correct or supplement your personal data, the right to request restriction of processing, the right to raise an objection to or a complaint of the processing of your personal data, the right to access your personal data, the right to request the transfer of your personal data, the right to be informed of a breach of security of your personal data and, under certain conditions, the right to the deletion of certain personal data we process about you (“the right to be forgotten”).
11.2. Changes and Amendments. You control your personal data mainly through your user account. There you can delete or change the basic information about yourself and change the settings concerning commercial communication etc.
11.3. Correction. In case you believe that your personal data has been processed incorrectly, you can contact us through the support system, however, it is much easier for you to correct the personal data by yourself in your user profile setting.
11.4. Access. You can ask us to send you an overview of your personal data. You can do so by submitting a support request.
11.5. Deletion. You may also claim the deletion of your personal data (this shall not apply to data in documents that are subject to the obligation of archiving under the law (e.g. invoices or credit notes). You can do so by submitting a support request. In case we need your personal data to determine, execute or defend our legal claims, your request may be rejected (e.g. if we have an overdue invoice in your name or if the complaint procedure is in progress). You are entitled to the deletion of data in the following cases:
a. The personal data is not needed for the purposes for which it was being processed
b. You have withdrawn your consent under which the data was processed and there is no further legal grounds for being processed
c. You have objected to the processing of personal data and you believe that after assessing your objection, it will become clear that your interest in the particular situation prevails over ours
d. The personal data has been processed unlawfully
e. The deletion obligation is stipulated by a special legal regulation
f. The personal data concerns a person under 16
12. Raising an Objection.
12.1. Certain personal data is processed on the grounds of our legitimate interest (see section “Legal grounds for processing of personal data”). In case you have specific reasons, you are entitled to raise an objection to the processing of this personal data. You can do so by submitting a support request.
13. Restriction of Processing
13.1. In case
a. you deny the accuracy of your personal data,
b. your personal data is processed unlawfully,
c. we do not need your personal data for processing purposes, but it is needed to determine, execute or defend your legal claims, or
d. you raised an objection under the preceding paragraph,
you shall be entitled to us restricting the processing of your personal data.
13.2. In such cases, we may process your personal data only upon your consent (except for the storage or backup of the personal data concerned).
14. Lodging a Complaint
14.1. If you believe that your personal data has been processed unlawfully, you are entitled to lodge a complaint at the Office for Personal Data Protection (https://www.uoou.cz/en/). However, we will appreciate if you address us first and we can try to resolve your concerns. You can do so by submitting a support request.
14.2. This Privacy Policy is valid and effective from 25 April 2023 and it is available in electronic form at https://carpe-iter.com/privacy-policy/.