Privacy Policy

Privacy Policy

I. Basic Provisions

The controller of personal data under Article 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”) is Mamido Toys s.r.o., ID No. 08367639, having its registered office at Hlavní třída 2020/28, 737 01 Český Těšín (hereinafter: “controller”).
The controller’s contact details are:
Address: Hlavní třída 2020/28, 737 01 Český Těšín
Email: info@mamido.cz
Phone: +420 558 080 002

Personal data means all information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as name, identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The controller has not appointed a Data Protection Officer. Contact details for the Data Protection Officer are:

II. Sources and Categories of Processed Personal Data

The controller processes personal data which you have provided or personal data that the controller has obtained in the course of fulfilling your order.
The controller processes your identification and contact details and data necessary for performance of the contract.

III. Legal Basis and Purpose of Processing Personal Data

The legal basis for processing personal data is:

• the performance of a contract between you and the controller in accordance with Article 6(1)(b) GDPR,

• the legitimate interest of the controller to provide direct marketing (in particular to send commercial communications and newsletters) under Article 6(1)(f) GDPR,

• your consent to the processing for the purposes of direct marketing (especially sending commercial communications and newsletters) pursuant to Article 6(1)(a) GDPR in conjunction with § 7(2) of Act No. 480/2004 Coll., on certain information society services, if no goods or services have been ordered.

The purposes of the data processing are:

• to process your order and to enable rights and obligations arising from the contractual relationship between you and the controller; for the order, personal data required to properly fulfil the order are asked (name and address, contact); provision of personal data is a necessary requirement for concluding and performing a contract; without providing personal data it is impossible to enter into or perform the contract,

• to send commercial messages and carry out other marketing activities.

The controller performs automated individual decision-making within the meaning of Article 22 GDPR. You have given your explicit consent to such processing.

IV. Duration of Data Storage

The controller stores personal data:

• for the period necessary for the exercise of rights and obligations arising from the contractual relationship between you and the controller and for asserting claims arising from those contractual relations (for up to 15 years after termination of the contractual relationship),

• until withdrawn, your consent to the processing of personal data for marketing purposes; in case personal data are processed on the basis of consent, up to 20 years.

After the expiration of the storage period, the controller will delete the personal data.

V. Recipients of Personal Data (Subcontractors)

Recipients of personal data are persons:

• involved in the delivery of goods/services/performance of payments under the contract,

• providing services for operating the e‑shop (Shoptet) and other services related to running the e‑shop,

• providing marketing services.

The controller intends to transfer personal data to a third country (outside the EU) or to an international organization. Recipients in third countries are providers of mailing services and cloud services.

VI. Your Rights

Under the conditions set by GDPR, you have:

• the right of access to your personal data under Article 15 GDPR,

• the right to rectification of personal data under Article 16 GDPR, or restriction of processing under Article 18 GDPR,

• the right to erasure of personal data under Article 17 GDPR,

• the right to object to processing under Article 21 GDPR,

• the right to data portability under Article 20 GDPR,

• the right to withdraw consent to processing in writing or electronically at the address or email of the controller given in Section III of these conditions.

Further, you have the right to lodge a complaint with the Office for Personal Data Protection if you believe your rights under data protection law have been violated.

VII. Data Security Conditions

The controller declares that they have adopted all appropriate technical and organizational measures to secure personal data. The controller has taken technical steps to secure data storages and storage of personal data in paper form, especially by means of passwords, antivirus software and secure encryption. The controller declares that only persons authorized by the controller have access to personal data.

VIII. Final Provisions

By submitting an order via the online order form, you confirm that you have read the privacy policy and that you accept it in full.
You agree to these conditions by checking the consent box via the online form. By checking this box you confirm that you have been informed about the privacy policy and accept it in full.

The controller is entitled to change these privacy conditions. The new version of the privacy policy will be published on its website and at the same time sent to you by email address which you provided to the controller.

These privacy conditions become effective on 14 August 2019.