Privacy Policy
On this page you will find an overview of the main principles of the protection of personal data and other processed data.
Who processes your data?
ARTBOARD, s.r.o. (ID 06296530, registered office Švédská 1538/22, Smíchov, 150 00 Prague 5), is the controller of your data within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679 (GDPR) as the operator of the online shop and network of fashion shops on the website www.sacred-gallery.com, i.e. collects, stores and uses (and otherwise processes) your data for the performance of its business activities - the individual purposes for which personal data are processed are further defined below. ARTBOARD, s.r.o. may also delegate the processing of your data to a third party (processor) for a clearly defined purpose and under clearly defined rules (see below, section: Who will have access to the data ?)
What data do we process?
We only process personal data that you provide to us in connection with the use of our services (e.g. in the context of ordering one of our products or subscribing to our content newsletters) or the conclusion of a contract for the use of this service.
This is most often the data you provide to us when you register for one of our services:
- Password in encrypted form
- First and last name (only if necessary for the specific service) or nickname (if registering for an account on email services)
- Contact and/or delivery address (for order delivery)
- Profile information such as age, gender
- Phone number (for order status information)
- Payment information (credit card number), which we will store with your account (only when using paid services such as purchasing on our e-shop, etc.)
- Other data voluntarily filled in by you (e.g. in the contact form)
And also data that we obtain from you by using our services:
- IP address
- ID NUMBER, VAT NUMBER
- cookies (in case of online services)
- or other online identifier
Why do we process your personal data?
The main reason why we process your personal data is so that we can manage your user accounts for our services so that we can provide you with the services and products that you have expressed an interest in (including the administration and payment in case of an order) and so that we can ensure and continuously improve the security of our services and thus your data.
We also process your data for the following purposes:
- the performance of the contractual relationship (name, address, email, telephone number, registration number and VAT number, payment details, password in encrypted form)
- for accounting and tax reasons (purposes) and for the fulfillment of other legal obligations (name and surname, registration number and VAT number, address, payment details, telephone)
- to improve the quality of our services and develop new ones (profile information such as age and gender, name and surname, email)
- carrying out analyses and measurements to determine how our services are used (cookies, IP address)
- analyzing your preferences and displaying content that matches your individual needs (cookies, IP address)
- obtaining benefits in marketing campaigns organized by us (name, email, address)
- participation in consumer competitions organized by us (name and surname, Email, address)
- sending commercial communications (you can opt out of receiving commercial communications in your account settings for which you have registered to receive such communications, or by email to: eshop.sacredgallery@gmail.com) and content newsletters (Email, name and surname, telephone)
- answering your inquiry sent via the contact form (Email, address, telephone)
- protection of health and property (image record)
Your personal data is processed both manually and automatically. Inca Botanica, s.r.o. is entitled to collect, store and use certain information by automated means, such as statistical information whenever you visit our website.
Who will have access to your data?
Protecting your data is our priority. Confidentiality obligations bind all our partners and may not use the data provided for any purpose other than that we have made available to them.
Thus, depending on the nature of the service you are using or have used, the third parties who may have access to your personal data are:
- Persons to whom we provide data to analyze traffic to our websites;
- persons who provide the technical operation of a particular service for us or the operators of the technologies we use for our services;
- persons who ensure the security and integrity of our services and websites and who also regularly test such security;
- payment gateway providers (payment card providers);
- shipping service providers that deliver your orders to you;
- providers of technical solutions to enable easy delivery of your order and notification of delivery;
- technical solution providers that allow us to show you only content and advertising that is relevant to you.
Under certain, precisely defined conditions, we are then obliged to transfer some of your personal data to the Police of the Czech Republic or to other public authorities on the basis of applicable legislation. We do not transfer personal data to third countries.
What are cookies and which ones do we use?
Like just about every website in the world, we use cookies.
Cookies are text files containing small amounts of information that are downloaded to your computer, mobile or other device when you visit a website. Then, each time you visit that website again, the cookies are sent back to the original website or to another website that recognizes the cookie.
The user is not personally identifiable based on this information, even with the use of other information in our possession. For example, information may include the type of device and browser used, language preferences, or the pages visited. They may also ensure that you learn about products that match your interests and preferences from advertisements so that you do not have to look at something that has nothing to do with you. Cookies do not pose a danger, they are not used to collect any sensitive personal information, but they are important for privacy protection. We do not use cookies to identify website users or to misuse login credentials.
We use cookies to recognize repeat visits to our website to help you move around the site. The cookie stores the user's preferred local and language settings and a randomly assigned identifier for your visit.
We collect cookie information on our site to better track the number of new and repeat visitors and for internal analysis of the pages you visit to better understand how they are used. We use this information to improve the navigation of our website and the services we provide.
Another group consists of third-party cookies (e.g. Google Analytics to analyze traffic to a specific website or service or cookies from operators of advertising systems that are run on our website). These cookies are controlled by third parties and we do not have access to read or write this data. Plain and simple, to make it easier and quicker for you to get to what you are interested in.
Many browsers automatically accept cookies by default, but you can usually refuse them or selectively accept only certain cookies using your browser settings. However, if you disable the use of cookies altogether, some features of our site may not be accessible or may not display properly. Another option is to browse the site in "anonymous mode", where cookies are not stored. Detailed information for all browser types can be found at: aboutcookies.org
If your browser is enabled to use cookies, we will assume that you agree to the use of standard cookies by our websites.
You have the right to enable, disable or delete cookies or other site analytics at any time. Please follow the links below:
Google Analytics
We use Google Analytics to improve the overall user experience and to address potential errors on the website. The data we collect using Google Analytics helps us understand which pages of our website you find attractive and which you don't, which products are popular, etc.
Google Analytics is provided by Google, Inc. ("Google"). Google Analytics uses cookies. Information about your use of the site, together with the contents of the cookie, will be transmitted by Google and stored on servers in the United States. Google will use this information to evaluate your use of the website and compile reports on website activity for website operators and the provision of other services relating to website activity and internet usage in general. Google may also disclose this information to third parties if required to do so by law or if such third parties process this information for Google.
Google Analytics is augmented by related advertising features provided by Google, namely: impression reports on the Google ad network, remarketing (serving ads on the content network based on product views), enhanced demographic reports (reporting of anonymous demographic data).
For more information about Google's privacy policy, please visit:
https://policies.google.com/privacy.
If you do not want to provide anonymous web usage data to Google Analytics you can use a plugin provided by Google. Once installed in your browser and activated, no further data will be sent.
For more information on the processing and use of data please refer to Google's terms and conditions.
You can also cancel Google Analytics tracking by using this address https://policies.google.com/privacy.
We have placed a Facebook pixel on our site to offer you tailored advertising based on your activity on the site. The information can also be used to record how many times you have viewed a particular product and advert and prevent you from being shown the same advert repeatedly. For more information regarding Facebook advertising, please see the Facebook Inc. data policy and terms of service.
To control the ads you see based on your activity outside of Facebook, follow this link.
If you have already signed up for our newsletter, you can change your mind at any time in your account on the site or by sending a request by email: eshop.sacredgallery@gmail.com
Legal principles for the processing of personal data
Personal data controller and data subject
The data controller is the company operating this website, the booking service. The data subject is a natural person who has provided the controller with his or her personal data based on a rental agreement, purchase agreement, service contract or other contract concluded with the controller or based on consent to the processing of personal data in the context of subscribing to newsletters sent by the controller. The data subject may also be a natural person whose personal data the controller has obtained from other lawful sources.
Purpose of personal data processing, general consent
The controller processes the personal data of data subjects to fulfill the contract concluded between the data subject and the controller using electronic means of communication at a distance or in writing, for the performance of legal obligations and direct marketing (i.e. offering the controller's products and services), including sending commercial communications within the meaning of Act No. 480/2004 Coll., on certain information society services. The controller sends commercial communications only if the data subject has subscribed to the newsletter and has given a second consent to the processing of personal data for marketing purposes.
Purpose of processing personal data, consent for marketing purposes
The controller processes the personal data of data subjects to fulfill the contract concluded between the data subject and the controller by electronic means of distance communication or in writing, fulfilling legal obligations and for direct marketing, offers, and information about the hotel and its activities. The data subject has the possibility to unsubscribe from the newsletter in a simple and free way.
Assessment of the necessity of processing
The controller takes care to protect the privacy of data subjects and therefore only processes personal data that are strictly necessary for the stated purposes of processing.
Legal basis for processing personal data
The legal basis for processing carried out for direct marketing purposes is the consent of data subjects to the processing of personal data (subscription to newsletters) or the legitimate interest of the controller (obtaining electronic contact in connection with the sale of the controller's product or service according to Act No. 480/2004 Coll.).
In other cases, the legal basis for processing is the performance of a contract, the protection of the legitimate interests of the controller (protection of property, the assertion of rights under a contract in legal proceedings, etc.) and the fulfillment of a legal obligation.
Period of processing of personal data
In the case of personal data processed for the performance of a contract, the controller processes personal data for the duration of the contractual relationship and subsequently for a further 10 years, taking into account the length of the limitation period for compensation for damage or injury. In the case of processing for compliance with a legal obligation, the controller shall process personal data for the period prescribed by law. In the case of personal data processing based on the consent of the data subject, the controller shall process the personal data for 10 years, unless the consent to the processing of the personal data is withdrawn by that time. This is without prejudice to the controller's obligation to process personal data for the period specified or by the relevant legislation.
Withdrawal of consent to the processing of personal data
If the data subject has given the controller consent to the processing of personal data, he or she may withdraw his or her voluntary consent to the processing of personal data at any time free of charge. Withdrawal of consent shall not affect the lawfulness of processing based on consent given before its withdrawal. Withdrawal of consent also does not affect the processing of personal data that the controller processes on a legal basis other than consent (i.e. in particular if the processing is necessary for the performance of a contract, legal obligation, or for other reasons specified in applicable law).