Information regarding processing of personal data

ENTO SPHINX s.r.o. carries out processing of your personal data as it is necessary to fulfil the contract with you regarding the sale of goods (or to implement the measures taken before the conclusion of such a contract) and further carries out processing your personal data that is necessary for the fulfilment of the public duties of this company.

1. IDENTITY AND CONTACT INFORMATION OF THE ADMINISTRATOR

   1. The administrator of your personal data is the company ENTO SPHINX s.r.o., with registered office at Hostovická 201, Černá za Bory, 533 01 Pardubice, identification number: 63220784, registered in the Commercial Register kept by the Regional Court in Krajský soud v Hradci Králové, Section C, insert no. 8105 (hereinafter referred to only as the „Administrator“).

   2. AdministratorThe contact details of the Administrator are as follows: delivery address ENTO SPHINX s.r.o., Hostovická 201, Černá za Bory, 533 01 Pardubice, email address entosphinx@entosphinx.cz, phone +20 466 670 519.

   3. The Administrator did not designate a Data Protection Officer.

2. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

   1. The legal basis for the processing of your personal data is the fact that such processing is necessary for:

      1. the fulfilment of the contract between you and the Administrator or for the execution of a measure by the Administrator before the conclusion of such a contract within the meaning of Article 6 (1) (b) Regulation (EC) No 2016/679 of the European Parliament and of the Council on the protection of natural persons relating the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Regulation on the protection of personal data) (hereinafter referred to only as the „Regulation“);

      2. the fulfilment of the legal obligations applicable to the Administrator, within the meaning of Article 6 (1) c) of the Regulation, in particular the fulfilment of the obligations imposed on the Administrator by generally binding legal regulations, in particular Act No. 235/2004 Coll., on Value Added Tax, as amended, Act No. 586/1992 Coll., on Income Taxes, as amended, and Act No. 563/1991 Coll., on Accounting, as amended.

3. THE PURPOSE OF THE PROCESSING OF PERSONAL DATA

   1. The purpose of processing your personal data is to perform the contract between you and the Administrator, including the delivery of goods and the resolution of liability for defects, or the execution of a measure by the Administrator before the conclusion of such a contract and the fulfilment of the related public duties by the Administrator.

   2. There is no automatic decision-making within the meaning of Article 22 of the Regulation on the part of the Administrator.

4. TIME OF STORAGE OF PERSONAL DATA

   1. Your personal data will be processed for the duration of the effects of the rights and obligations of the contract and for the period necessary for the purposes of archiving under the relevant generally binding legal regulations, but at the longest for the period stipulated by generally binding legal regulations.

5. OTHER RECIPIENTS OF PERSONAL DATA

   1. Other recipients of your personal data will be shipping companies and other persons involved in the delivery of goods or payments under a purchase contract and persons providing technical services related to the operation of the e-shop, including the operation of software and data storage. Other recipients of your personal data will be:

      1. VOATT s.r.o. - Website development and hosting provider

   2. The recipients of your personal data processed for the purpose of fulfilling legal obligations may also be the financial authorities or other competent authorities in cases where generally binding legal regulations are imposed on the Administrator.

   3. The administrator does not intend to pass your personal data to a third country (to a non-EU country) or an international organization.

6. RIGHTS OF THE DATA SUBJECT

   1. Under the terms and conditions stipulated in the Regulation, you have the right to request from the Administrator access to your personal data, the right to rectification or erasure of your personal data, or to limit their processing, the right to object to the processing of your personal data, and the right to the portability of your personal data.

   2. If you think that by processing of your personal data the regulation was violated or is being violated, you have the right to file a complaint with the Supervisory Authority.

   3. You are not obliged to provide personal information. The provision of your personal data is a necessary requirement for the conclusion and performance of the contract and without providing your personal data, it is not possible to conclude the contract or to fulfil it by the Administrator.