Privacy policy

Who processes your personal data?

The controller of personal data under Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: “GDPR”) is Ing. Dominik Richter, permanently residing at Chlumy 7, 644 00 Brno (hereinafter: the “Controller”), who will process your personal data as controller under the terms set out below. The Controller has not appointed a data protection officer.


What personal data do we process?

Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. We only process personal data that you provide to us in connection with using our services when ordering a subscription to one of our titles.

Most often, this is the data you give us when filling in the contact form:

  • first name and surname,

  • email,

  • phone number,

  • other data you choose to provide voluntarily.

And also data we obtain when you use our services:

  • IP address,

  • cookies (for online services) – you can find more about cookies here,

  • or another online identifier.

Our website uses JavaScript, which is part of the website's source code and is needed for the website to work.


Why do we process personal data and on what basis?

The legal basis for processing personal data is:

  • performance of a contract between you and the Controller under Article 6(1)(b) GDPR,

  • processing your personal data to fulfil our legal obligations (for example, archiving accounting records), even without your consent,

  • the Controller's legitimate interest in direct marketing (in particular sending commercial communications and newsletters) under Article 6(1)(f) GDPR.

The purpose of processing personal data is:

  • handling your inquiry,

  • carrying out analyses and measurements to display content that matches your individual needs,

  • sending commercial communications and carrying out other marketing activities.

The Controller does not carry out automated individual decision-making within the meaning of Article 22 GDPR.


Who will have access to your data and for how long?

The Controller declares that it has taken all appropriate technical and organisational measures to secure your personal data. Only authorised persons have access to personal data. The partners we entrust your data to are also able to provide technical and organisational security that prevents unauthorised or accidental access to your data or any other misuse of it.

Third parties that may have access to your personal data to the extent necessary are:

  • persons involved in delivering goods/services and processing payments,

  • persons to whom we provide data for analysing traffic on our websites,

  • persons who ensure the security and integrity of our services and the technical operation of a given service, technology providers and other services we use in connection with running the e-shop and web services,

  • operators of advertising systems in connection with targeted advertising,

  • when a recurring payment is set up, the customer's payment details will also be stored by the relevant payment gateway or bank,

  • under certain, precisely defined conditions, we are required to pass some of your personal data to public authorities.

The Controller does not intend to transfer personal data to a third country. All data is stored within EU countries or countries designated by the EU as safe.

The Controller keeps personal data for as long as necessary to exercise the rights and obligations arising from the contractual relationship between you and the Controller and to assert claims arising from these contractual relationships, and then for 10 years after the contractual relationship ends. You can exercise any of your rights described below at any time. Once the retention period has passed, the Controller will erase the personal data.


Is my personal data safe?

We take the utmost care in protecting personal data. All personal data is secured using standard technologies and procedures, which we regularly review and update. To better protect your personal data, access to it is password-protected, and sensitive data is encrypted when transferred between your browser and our website.

Please keep in mind that even maximum security does not guarantee 100% protection of personal data against access, copying, disclosure, alteration or destruction by a third party. Without your help and responsible behaviour, we cannot fully guarantee the security of your data. So keep your passwords to our services secret and choose a password that is not easy to guess. Follow basic security practices.


Can we process your personal data without your consent?

We can process your personal data even without your consent. The lawfulness of such processing follows directly from applicable legislation. This is the case where your personal data is necessary:

  • to fulfil all obligations arising from the contract between us and to provide a service or product,

  • to comply with all generally binding legal regulations – we must process some personal data regardless of your consent for the period set by the relevant legislation, or in accordance with it even after you withdraw your consent,

  • for processing necessary for the purposes of our legitimate interests (e.g. to keep our websites secure).


What rights do you have regarding personal data protection?

Please note that you are not obliged to provide us with any data and providing it is voluntary. However, without the data marked as mandatory, we will not be able to provide our service to you.

Under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, you have the right, with respect to us as the controller of your personal data, to:

  • request access to the personal data we process about you and exercise the right of access to this personal data and to the other information listed in Article 15 of the Regulation,

  • request correction of personal data we process about you if it is inaccurate, and request erasure of personal data (the right to be “forgotten”) in certain cases,

  • request restriction of processing,

  • receive the personal data concerning you in a structured, commonly used and machine-readable format, and transmit this data to another controller,

  • object to or file a complaint against processing in certain cases,

  • be informed of a personal data breach in certain cases,

  • other rights set out in the Personal Data Protection Act and in the General Data Protection Regulation No. 2016/679 once it takes effect.

You can exercise any of these rights using the contact details below. When we receive your request, we will inform you of the measures taken without undue delay and in any case within one month of receiving the request. If necessary, and taking into account the complexity and number of requests, this period may be extended by a further two months. Every user of our services can get an overview of all the personal data we hold about them.

If we do not act on your request, we must inform you without delay, and no later than one month after receiving it, of the reasons for not taking action. In certain cases where your request is manifestly unfounded or excessive (in particular where requests are unreasonably repeated), we are not obliged under the Regulation to comply with your request in full or in part. In such cases, we may charge you a reasonable fee that reflects the administrative costs of providing the requested information or communication or of taking the requested action. As a data subject, you always have the right to contact the supervisory authority directly, which is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

If we receive your request but have reasonable doubts about your identity, we may ask you to provide additional information needed to confirm your identity.

If you believe that we are processing your personal data unlawfully or otherwise infringing your rights, you have the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection, or to seek judicial protection.


How can you contact us?

If you have any questions, want to exercise your legal rights, or want to object to receiving further commercial communications from us, you can contact us by email at ahoj@webiri.cz. Requests can also be sent by post to Chlumy 7, 644 00 Brno.

So that we can verify your identity, we may ask you to prove your identity in an appropriate way. This is a preventive security measure to stop unauthorised persons from accessing your personal data.