Consent to the Processing of Personal Data

Who are we?

HRAČKOLKA s.r.o., with its registered office at Prakšice 331, 687 56 Prakšice, Company ID No.: 08738297, registered in the Commercial Register maintained by the Regional Court in Brno, Section C, Insert 120447, operating the online store at www.momkii.com (hereinafter referred to as "HRAČKOLKA s.r.o." or the "Controller").

In connection with the handling of your Personal Data, we also act as the processor of your Personal Data (hereinafter referred to as the "Processor").

By ticking the checkbox before submitting an order in our online store at www.momkii.com, you hereby grant us the following Consent to the Processing of Personal Data (hereinafter referred to as the "Consent"), so that, within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "GDPR"), we may process the Personal Data specified below.

What are you consenting to?

By granting this Consent, you agree to the collection, storage and processing of your Personal Data that you have provided to us as the Controller.

What Personal Data will be processed?

For the purposes of personal data protection under the applicable legislation, Personal Data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (hereinafter referred to as "Personal Data").

By this Consent, you confirm that we may process the following Personal Data:

first name and surname, or company name,
residential address (street, building number, city, postal code, country) or registered office,
telephone number,
bank account number,
IP address.

For what purposes will your Personal Data be processed and retained?

As the Controller, we will collect, retain and process the above Personal Data exclusively for the following purposes:

sending commercial and marketing offers and notifications,
storing your purchasing preferences,
targeted advertising,
storing cookies. If you visit our website, we consider it our legitimate interest to use cookies to monitor which pages you visit and subsequently use this information for remarketing and better advertising targeting (for example, on social media). Our website uses both first-party and third-party cookies for the above purpose,
providing Personal Data to third parties, such as providers or processors of software, services and applications necessary for the proper operation of the Controller's business activities,
exercising and enforcing the Controller's legitimate rights and interests.

The expected recipients of the Personal Data under this section are, in particular:

public authorities,
providers of postal and electronic communication services,
insurance companies, government authorities and courts.

How long will the Personal Data be retained?

Your Personal Data will be retained only for as long as necessary.

The Personal Data will be retained for a maximum of 7 years for the purposes specified above in Article 4, letters (a) to (c).

For the purpose of storing cookies, Personal Data will be retained for a maximum of 1 year.

How will the Personal Data be processed and stored?

The Personal Data will be processed by automated means using computers and computer software and/or in written form.

Rights of the Data Subject, Information and Access to Personal Data

As a data subject, you have the right to access your Personal Data, the right to have them rectified or erased, or to restrict their processing. You have the right to request information about what Personal Data are being processed and to request an explanation regarding the processing of your Personal Data. You also have the right to object to the processing, as well as the right to data portability (i.e. the right to obtain the Personal Data concerning you, which you have provided to the Controller, in a structured, commonly used and machine-readable format; for more details, see Article 20 GDPR). Details and conditions relating to the above rights are described in the Privacy Policy.

You have the right to withdraw your Consent at any time, without affecting the lawfulness of processing based on the Consent before its withdrawal, where the processing is based on Article 6(1)(a) or Article 9(2)(a) of the GDPR. This means that you do not have this right where the processing is necessary for compliance with a legal obligation to which the Controller is subject. You acknowledge that, following the withdrawal of your Consent, your processed Personal Data may not always be deleted and that it is at the Controller's discretion whether other legal grounds for processing exist and whether deletion would result in disproportionate harm to the Controller. If the Controller continues processing your Personal Data after the withdrawal of your Consent, the Controller will duly inform you as the data subject.

As a data subject, you are informed that you may withdraw your Consent by sending an e-mail to: info@momkii.com.

As a data subject, you have the right to request information about the processing of your Personal Data, and the Controller is obliged to provide such information without undue delay. The content of the information is determined by Article 15 of the GDPR. The Controller is entitled to request a reasonable fee for providing such information, not exceeding the costs necessary to provide it.

As a data subject, if you have doubts regarding compliance with the obligations related to the processing of your Personal Data, you have the right to contact the Controller or the Office for Personal Data Protection.

The Controller declares that no automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR, takes place.

The Controller declares that Personal Data are not processed for scientific or historical research purposes or for statistical purposes.

Final Provisions

As a data subject, you declare that you are aware of your rights under Chapter III of the GDPR.

You declare that all Personal Data provided are accurate and truthful and are provided voluntarily.

The Controller declares that it will collect Personal Data only to the extent necessary to fulfil the stated purpose and will process them solely in accordance with the purpose for which they were collected.

This Consent constitutes the freely given and informed expression of the data subject's will, the content of which is the data subject's consent to the processing of Personal Data.