Data Protection Policy - GDPR

By submitting a valid order, the Client grants the Seller, as a personal data controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27. April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "Regulation" or "GDPR"), consent to the processing of personal data that the Buyer has provided or will provide to the Seller in the future in connection with purchase contracts concluded on the basis of these GTC, in particular the data contained in orders for goods and services of the Seller. The consent applies to processing for marketing purposes, including profiling and transfer of personal data within Nano2Health s.r.o. In other cases, processing is carried out on other legal bases, in particular for the purpose of contract performance and on the basis of the legitimate interest of the Seller.

The Buyer's personal data will be processed for the purpose of negotiating the conclusion of purchase contracts between the Buyer and the Seller and the subsequent performance of already concluded purchase contracts (especially the delivery of goods to the Buyer) on the basis of the GDPR, as well as for the purpose of creating databases of the Seller's customers, profiling and subsequent offering of business and services to the Buyer (including the dissemination of commercial communications of the Seller and its business partners within the meaning of Section 7 (2) of Act No. 480/2004 Coll., on certain information society services, as amended). The Buyer's personal data will be processed automatically and, if provided by the Buyer in a form other than electronic, will first be manually converted into electronic form and then processed automatically. Details of the individual processing purposes are as follows:

  1. The Seller processes personal data of Buyers and potential Buyers for the purpose of performance of the contract concluded with the Buyer for the purchase of goods and the necessary operations required to conclude this contract (contract performance). In this context, when concluding a contract (ordering goods), the Seller requires from (potential) Buyers the data that are necessary for the delivery of the ordered goods (contract performance) and failure to provide them results in the Seller being unable to process the order and the contract not being concluded. The Seller keeps personal data for this purpose during the contractual relationship with the Buyer and until the end of the limitation period for any claims arising from it.

  2. The Seller also processes personal data for the purpose of direct marketing of its goods - nanofibre products, i.e. sending targeted offers to Buyers or potential Buyers in the following ways:

    • By means of paper shipments and electronic communication based on the legitimate interest of the Seller to offer its goods;

    • By telephone communication based on the Buyer's consent, if the Buyer or another person has given his/her voluntary consent, for a period of 10 years. The Buyer or any other person may withdraw his/her consent at any time, either by telephone, in writing, by e-mail or via the Seller's website, without affecting the lawfulness of the processing of data prior to the withdrawal of consent.

  3. In order for the Seller to be able to send (potential) Buyers offers of its products that may be of interest to them, the Seller profiles the persons concerned on the basis of the personal data obtained by monitoring their purchasing behaviour, based on the consent of the Buyer. No decision is made on the basis of profiling that would have legal effects on the data subjects or affect them in a similar way.

  4. The purchaser or other data subject has the right to object to the processing of his/her personal data for the purposes of direct marketing carried out by any of the above methods (postal / email / telephone marketing) or also separately to the profiling of his/her purchasing behaviour. In the event of an objection, the Seller will stop further sending of offers or profiling (depending on the content of the objection). In this case, the Seller is entitled to process the Buyer's personal data to the extent necessary to comply with the legal obligation not to send marketing communications to the Buyer and not to carry out profiling.

  5. The Seller makes recordings from its telephone customer service line for the purpose of recording actions performed orally during a telephone call, e.g. ordering goods (conclusion of a contract), changing it, giving consent to the processing of personal data, withdrawing it, exercising the rights of the persons concerned under the contract or GDPR, etc., based on the consent of the person concerned. The caller/caller (potential) Buyer is notified of this fact at the beginning of the call and by continuing the call agrees to the recording. The (potential) Buyer may withdraw his/her consent at any time by telephone / email / in writing, whereby the lawfulness of the data processing prior to the withdrawal of consent will not be affected. In the event of withdrawal of consent to the recording, during which an order for goods or other legal transaction takes place, the person concerned may be asked to take the legal transaction in another way (in writing / electronically). The Seller shall keep the recordings for the time necessary to achieve the specific purpose (according to the content of the recording), in the case of Buyers for the duration of the contract and the related limitation period or until the consent is withdrawn.

  6. The Seller processes personal data in connection with the recovery of claims and the defence against claims of third parties on the basis of legitimate interest to prove, assert and defend legal claims. The processing is necessary for the performance of the contract, for the time necessary to recover the claim and during the statutory limitation/prescription periods.

  7. The Seller also processes personal data where this is necessary to fulfil its legal obligations, in particular in the area of accounting and tax regulations, on the basis of fulfilling a legal obligation (Accounting Act, Income Tax Act, VAT Act, Tax Code, Civil Code, etc.). The data is retained for the period stipulated by the individual laws.
     

Consent to the processing of personal data in cases where consent is required is given voluntarily by the Buyer to the Seller for a period of 10 years and may be revoked at any time free of charge by notice sent to the Seller at. Consent may be renewed repeatedly. The Buyer shall have the right to withdraw consent to the processing of personal data at any time by written notice delivered to the Seller, without prejudice to the lawfulness of the processing based on the consent given prior to its withdrawal. The Buyer also has the right to access personal data, the right to rectification or erasure, or restriction of the processing of personal data, the right to object to processing, the right to data portability. The Buyer may contact the Data Protection Officer appointed by the Seller (see contact details below) with a complaint, objection or request for information regarding the processing of personal data. In addition, the Buyer may also contact directly the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7.​

When withdrawing consent to the processing of personal data, the Buyer shall indicate the customer number or all customer numbers or other identification data under which he is listed in the Seller's customer database. If he/she is unable to provide all customer numbers, he/she shall add the data for which he/she no longer wishes to be processed. The Buyer acknowledges that if he does not provide all the customer numbers under which he is listed in the customer database, the Seller shall be obliged to delete from its customer database only the personal data associated with the customer numbers provided by the Buyer and the personal data which the Buyer expressly requests to be deleted.

The Buyer agrees that if, when withdrawing consent to the processing of his/her personal data, he/she does not indicate a customer number under which he/she is listed in the Seller's customer database and personal data is associated with such customer number which he/she does not expressly request to be deleted, the Seller shall continue to regard the Buyer as a customer, who has not withdrawn consent to the processing of his/her personal data associated with such customer number until the Buyer withdraws consent to the processing in the manner set out above or until the Seller succeeds in identifying the personal data in its customer database with the Buyer.

The Seller is entitled to transfer personal data to data processors who process personal data on the basis of a contractual relationship with the Seller, as well as to other data controllers for the purpose of offering trade and services to the Buyer. Personal data may be provided to third parties if there is a legal basis for this, for example, to a postal service provider or courier company in connection with the delivery of parcels, to an electronic communications service provider in connection with electronic communications, to banks in connection with payment operations, to government authorities in the exercise of their powers, to the Seller's tax, legal and other advisors, to the court and bailiff in connection with the recovery of debts, etc.

 

Contact details of the Seller
The Seller may be contacted at the contact address, email address or telephone number as set out below:
Nano2Health Ltd.
Washingtonova 1599/17
110 00 Prague 1
E-mail: kasicky@nano2health.com
Phone: +420 777 714 446