Protection of personal data

Company: PETRA ZAK s.r.o.
Address: Nad Lalůvkou 2018, 594 01 Velké Meziříčí
ID number: 05903459
Tax ID: CZ05903459
the company is listed in the business register located at the Regional court in Brno, division C, insert 108651
(further on only as a"Provider")

For services offered on-line based on an internet address: www.beauty-beast.cz/

Provider´s contact information:
Contact address: Pod Strání 2279, 594 01 Velké Meziříčí
Contact telephone: (+420) 565 555 980

1. Provider (also „Data Protection Officer or Controller"), manages personal date of the User which is a physical person (further also, „Subject data"), Subject may address his or her questions to the Controller at the email address This email address is being protected from spambots. You need JavaScript enabled to view it. .

2. Controller will process identification and contact information of the Subject and further information collected by the Provider while fulfilling the Contract.

3. Provider processes personal date of the subject for purpose of:

a) providing services per agreement or agreements entered into with the Subject and based on Article 6, paragraph 1 letter b) Directive of the European Parliament and Commission No. 2016/679 dated 27. 4. 2016 about protection of individual persons in connection with the processing operations of their personal data and about a free movement of this data and supersedes the directive 94/46/ES (General Data Protection Regulation, further only as "GDPR");
b) following legal requirements of the Data Protection Officer given by the directive and based on the Article 6 paragraph 1 letter c) GDPR (for example Controller must maintain accounting and tax documents);
c) a direction, processing or defense of legal needs of the Controller based on Article 6 paragraph 1 letter f) GDPR
d) a transfer of business information and based on Article 6 paragraph 1 letter f) GDPR for reasons existing from legitimate needs of the Provider / Controller for direct marketing purposes.

4. Personal Data will be processed for the duration necessary to perform the processing operation. Keeping in mind above mentioned:

a) for purpose under paragraph a) above, Personal information will be processed till the end of an agreement. This does not preclude the Controller to work with the data (as necessary) for purpose under paragraph b, c), and d) above;
b) for purposes under the paragraph b) above, Personal data will be processed for the period of Controller´s legal responsibility;
c) for purposes under the paragraph c) above, Personal data will be processed to the end of the 5th calendar year following the end of the termination of responsibilities from the agreement. In case of a commencement of a court action, legal or other challenges which question the rights or responsibilities, the Controller in relationship to the Subject data, the processing operations period is not terminated before the end of such procedures under Article 3.3 above ;
d) for purposes of commercial information mailing under paragraph b) above Personal data will be processed till the Subject will express his or her desire to terminate such data processing.

5. Under the paragraph d) above, all Personal data without a need or purpose of processing must be made anonymous or liquidated by shredding or other method which will ensure that the Personal data cannot be misused by unauthorized persons) at the latest by the end of calendar quarter following the end of the processing period.

6. Controller is authorized to transfer the Personal data to a person who will act under an agreement with the Controller as the Data Processor.

7. In connection with the Personal Data Processing, the Subject has a number of rights including the right to request an access to his or her personal information (under the conditions of paragraph 15 GDPR), or demand a correction or a data removal (under the paragraph 16 or 17 GDPR) or possibly limiting the Data Processing (under conditions of the paragraph 18 GDPR). Subject has the right to raise a complaint against the Data Processing (under the conditions of the paragraph 21 GDPR) and right to Data transfer (under the conditions of the paragraph 20 GDPR).

8. If the Subject is under the impression that his or her Personal Data are processed in a conflict with the legal directives, he or she has the right to request the Controller to provide immediate correction. If the Subject´s request is deemed correct, the Controller will make the corrections immediately and without further delay. This, however, does not preclude the Subject from submitting a complaint to the Office for Personal Data Protection.
9. Submission of the Personal Data is a contractual obligation from the Subject´s side. Subject is not legally required to submit his Personal Data, but the Provider / Controller needs such information in order to enter into an agreement and fulfill the obligation under the agreement with the Subject.