Personal Data Administrator
Lumisafe s.r.o., is registered at the office at Prague 7, Jankovcova 1037/49, postcode 170 00, company identification No. 05686610, incorporated in the Companies Register kept by the Municipal Court in Prague, Section C, Insert 268174, as a data administrator shall process your personal data.
TYPE OF DATA PROCESSED
Personal Data Provided By You
We process personal data provided by you.
If you order goods or services from us, we need the information which is referred to as mandatory in the ordering process (in particular your first name and surname, and delivery address). If we did not have this information we would not be able to deliver the goods. For the purposes of sale of goods or services, we also need your e-mail address, to which we shall send the order confirmation which serves as a confirmation of entering into the purchase agreement, as well as a copy of Terms and Conditions and Complaints Policy.
You can also fill in optional information when ordering goods or services. Such information helps us fulfill the concluded purchase agreement more efficiently. For instance, if you fill in your telephone number, we can send you a notice of the goods delivery, etc. Providing optional information is voluntary.
After the goods are delivered, you may get an e-mail message with the request to evaluate the goods purchased.
If you contact us via the customer line or you send us a message, we shall also process your personal data stated in such communication.
By filling in the optional information in your user profile, you may also provide us with other personal data, such as frequently used delivery addresses.
Personal Data Obtained Other Than Directly from You
As part of joint marketing campaigns organized together with our business partners, we are entitled to process your personal data and we may combine them for the purposes of campaigns or of due performance of the agreement, as the case may be.
Personal Data of Third Persons Provided by You
In the event that your personal data is disclosed to a third party, we shall inform you in advance including informing you of the identity of such third party. If anyone discloses your personal data to us, you will have to be informed as well.
It may happen that you purchase goods from us, but you do not wish to collect them or make a complaint regarding such goods. You can define authorized persons in your user profile, who shall be entitled to collect or claim your goods. Thereby, you provide us their personal data.
Personal Data Processed Automatically
When you visit our website, we may collect certain information such the IP address, date and time of the visit to our website, information about your Internet browser, operation system or language settings. We may also process information about your conduct on our website, such as links opened or goods displayed. The details of your conduct on the web are anonymised for the maximum protection of your privacy and therefore we cannot match them with a particular person.
If you access our website from your mobile phone or a similar device or through one of our mobile applications, we can process information about your mobile device as well (mobile phone details, records of any application crash etc.).
Cookies
We process cookies automatically.
Cookies serve several purposes. We use the following cookies on our e-shop website and in our mobile applications:
Technical cookies: We use technical cookies to ensure our e-shop works properly (e.g. for you to create a user profile, log in, and buy goods and services). The e-shop would not work without these cookies.
Functional cookies: These help so that you do not have to log in and set your preferences repeatedly (e.g. setting the language in which our e-shop will be displayed). In these cases, your password is always encrypted. The use of these cookies is not absolutely necessary, but they make your visit to our online store more comfortable and user-friendly.
Analytical cookies: Analytical cookies help us improve our online store, which ultimately benefits you. Analytical cookies on our website are collected by the Google Inc. script, which subsequently anonymises the data. The data ceases to be personal data after anonymisation: anonymised cookies cannot be matched with a particular user or person. We only work with anonymised cookies. Even if we wanted to, we would be unable to find out the way in which any particular user behaved on our website (sites visited, goods displayed etc.).
We also use the findings obtained from these cookies for advertising purposes; we may also display an ad that we consider relevant to you on other websites. If you want to have control over what analytical cookies we process, you can use this add-on program from Google (can only be run on a computer).
How You Can Control Which Cookies We Will Process
You can use one of the common browsers (e.g. Internet Explorer, Safari, Firefox, Chrome) with anonymous browsing switched on. This shall prevent storage of data concerning the sites visited. You can also block the storage of cookies in the browser. However, if you block the processing of technical and functional cookies, you will disable certain useful website functions.
You can easily control the processing of analytical cookies by us if you use this add-on program from Google (can only be run on a computer). However, switching off analytical cookies makes it difficult for us to improve our online store experience.
MOBILE VERSION
If you access our website from a phone, tablet or similar device, you access the version optimized for such devices. Your personal data is processed similarly to the computer access.
WHY WE COLLECT AND PROCESS YOUR PERSONAL DATA?
Your personal data is processed for the following reasons:
- Purchase of goods and services: the primary purpose of processing your data is due dispatch and delivery of your order. If a problem occurs, we know who to contact from the data you provided.
- Customer care: if you address us with a question/issue, we have to process your personal data in order to answer/resolve it. The data may be transferred to third parties in certain cases (e.g. delivery company).
- User account: thanks to the personal data entered in your user profile, you will be able to use a number of functions (e.g. if you enter your telephone number, we can easily inform you about the time of the order delivery). You can change the entered details at any time, except for the e-mail address that serves for signing into your user account.
- Marketing:
- Improvement of services: we are able to offer relevant goods thanks to the history of your orders and conduct on the website (e.g. accessories to the product purchased). Therefore we display such products that are intended just for you and correspond to your needs and interests. In order to optimise web features, we can also use tools testing different variants (A/B testing), such as Google Analytics, Facebook Analytics etc.
- Customer reviews of goods and services: after you purchase products or services from us, your may be asked to evaluate them. You may also post a review on your own initiative.
- Call center: if you contact us via our call center (hotline), your call shall be recorded upon prior notice. Such records serve for the inspection of quality of services provided by our staff.
- Assertion of rights and legal claims and inspection by public authorities: we can also process your personal data in order to assert our rights and legal claims (e.g. in the event that we have an overdue invoice in your name). We may also process your data for inspections by public authorities and other serious reasons.
LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA
Your personal data is processed for the following reasons:
- Purchase of goods and services: the primary purpose of processing your data is due dispatch and delivery of your order. If a problem occurs, we know who to contact from the data you provided.
- Customer care: if you address us with a question/issue, we have to process your personal data in order to answer/resolve it. The data may be transferred to third parties in certain cases (e.g. delivery company).
- User account: thanks to the personal data entered in your user profile, you will be able to use a number of functions (e.g. if you enter your telephone number, we can easily inform you about the time of the order delivery). You can change the entered details at any time, except for the e-mail address that serves for signing into your user account.
- Marketing:
- Improvement of services: we are able to offer relevant goods thanks to the history of your orders and conduct on the website (e.g. accessories to the product purchased). Therefore we display such products that are intended just for you and correspond to your needs and interests. In order to optimise web features, we can also use tools testing different variants (A/B testing), such as Google Analytics, Facebook Analytics etc.
- Customer reviews of goods and services: after you purchase products or services from us, your may be asked to evaluate them. You may also post a review on your own initiative.
- Call center: if you contact us via our call center (hotline), your call shall be recorded upon prior notice. Such records serve for the inspection of quality of services provided by our staff.
- Assertion of rights and legal claims and inspection by public authorities: we can also process your personal data in order to assert our rights and legal claims (e.g. in the event that we have an overdue invoice in your name). We may also process your data for inspections by public authorities and other serious reasons.
Conclusion and Performance of Agreement
A large part of your personal data are needed by us in order to conclude the purchase agreement or another contract for goods and services you intend to purchase. After the agreement is concluded, we process your personal data in order to duly deliver the purchased goods, or to render the purchased services. We have to process billing and delivery details in particular due to the above-mentioned legal grounds.
Legitimate Interest
We also use your personal data to provide you the relevant content, which may be of interest to you. On the grounds of legitimate interest, we process particular personal data, which is processed automatically, and cookies.
We may also send you e-mails and text messages on the same legal grounds.
If you are listed as a so-called authorised person of our entrepreneur customer, your orders and other actions will be attributed to this entrepreneur customer. If you do not consent, please fill in an e-mail address other than the one listed with the authorised person of this company customer when making your order. Alternatively, you can request to be deleted as an authorised person of this entrepreneur customer.
In case we process your personal data on these legal grounds, you are entitled to raise an objection to such processing.
Consent
For the purposes of e-mail marketing and telemarketing, we process your personal data upon your consent. If you do not grant your consent and you are our customer, we can send you commercial newsletter (or give you telemarketing calls) even without your consent. In any case, you are entitled to reject such marketing communication simply by (a) using our contact form, or b) sending us email on info@equiray.com.
If you grant your consent to the personal data processing, you are entitled to withdraw it at any time through our contact form.
TRANSFER OF PERSONAL DATA TO THIRD PARTIES
Your personal data is transferred to third parties in the following cases:
- Delivery of goods: the carrier chosen by you would not be able to deliver the goods ordered unless we transfer the information on where and to whom the goods should be delivered. This data is transferred to the carrier as entered in the order. Such data includes in particular your first name and surname, delivery address, telephone number where the carrier may contact you, and the amount to be paid on delivery, as the case may be. The carrier is only entitled to process the personal data we transfer for the purposes of delivery; the carrier must delete the personal data promptly afterwards.
- Delivery of goods stored for us by a contractual partner: if you order goods which are stored by our contractual partner, we have to transfer your personal data to this contractual partner who shall complete the order. Such data include sin particular your first name and surname, delivery address, telephone number where the carrier may contact you, and the amount to be paid on delivery, as the case may be. The contractual partner has to transfer the data to the carrier that shall deliver the goods; otherwise the carrier would not be able to make the delivery. The contractual partner that stores the goods for us and the carrier are only entitled to process the personal data we transfer to them for the purposes of the goods storage/delivery; they must delete the personal data promptly afterwards.
- Payment Cards: Our company does not possess the details of payment cards used by you. The details of your payment cards are only available to the secure payment gateway and the relevant bank.
- Commercial Communication: in case we send you commercial communication (e.g. via e-mail or text message) or if we use telemarketing, we may use a third party to distribute the messages or make phone calls. Such third party is bound by the obligation of confidentiality and is not allowed to use your personal data for any other purpose.
- Public Authorities: in the event that we enforce our rights, your personal data may be transferred to a third party (e.g. an Attorney-at-Law). If we are obliged to transfer your personal data by virtue of law or upon a request by a public authority (e.g. Czech Police), we have to comply.
WHAT IS THE PERIOD FOR PROCESSING YOUR PERSONAL DATA?
We shall process your personal data for the entire duration of the contractual relationship between you and us.
In case your personal data processing is based on consent, your personal data shall be, in general, processed for 7 years or until such consent is withdrawn.
In case you subscribe to commercial communication, your personal data shall be processed for 7 years or until you express your disapproval of such communication. You can easily express your disapproval by using our contact form.
The data obtained through the user account or in a similar way are processed for the period of using our services and then usually for 5 years after cancellation. Basic identification data and the information why the user account was cancelled or information which is a part of operational advance deposits are usually stored for the relevant period.
The recordings of phone calls from and to the call center are archived for a short period, not exceeding 1 year, unless it is necessary for us to store them for a longer period due to a legitimate interest (e.g. suspicion of data misuse, fraud etc.).
PERSONAL DATA SECURITY
Your personal data is safe with us. We have adopted adequate technical and organisational measures in order to prevent unauthorised access and misuse of your personal data.
At Lumisafe we are concerned about the protection of your personal data. Therefore we regularly check and improve our security. All communication between your device and our web servers is encrypted. Logins are hashed and your data is only stored on servers in secure data centers with limited, carefully controlled and audited access.
We try to use such safety measures that provide sufficient security based on state-of-the-art technology. The safety measures adopted are regularly updated.
PERSONAL DATA OF CHILDREN YOUNGER THAN 16 YEARS OF AGE
Our on-line store is not intended for children under 16. A person under 16 is allowed to use our on-line store only upon consent of his or her parent or guardian.
WHAT ARE YOUR RIGHTS RELATED TO PERSONAL DATA PROTECTION?
In relation to your personal data, you have in particular the right to withdraw your consent to the processing of your personal data at any time, the right to correct or supplement your personal data, the right to request restriction of processing, the right to raise an objection to or a complaint of the processing of your personal data, the right to access your personal data, the right to request the transfer of your personal data, the right to be informed of a breach of security of your personal data and, under certain conditions, the right to the deletion of certain personal data we process about you ("the right to be forgotten").
Changes and Amendments
You can contact us through the our contact form.
Correction
In case you believe that your personal data has been processed incorrectly, you can contact us through the contact form.
Pursuant to the amendment to Act No. 235/2004 Coll., On Value Added Tax, it is not possible to change data in an already issued invoice as of 1 January 2013. The invoice details can only be changed if you have not yet received and paid for the goods.
Access (Portability)
You can ask us to send you an overview of your personal data. In that case, please contact us using this contact form.
You also have the right to access the following information concerning your personal data:
- What are the purposes of processing your personal information
- What are the categories of the affected personal data
- Who is the recipient of your personal data, besides you
- What is the planned period of storage of your personal data
- Whether you have the right to claim the correction or deletion, restriction of personal data processing or to raise an objection to such processing
- Information on the source of the personal data in case we did not obtain them from you.
Deletion
You may also claim the deletion of your personal data (this shall not apply to data in documents that are subject to the obligation of archiving under the law (e.g. invoices or credit notes). In case we need your personal data to determine, execute or defend our legal claims, your request may be rejected (e.g. if we have an overdue invoice in your name or if the complaint procedure is in progress).
Please note that the essential details of your payment card are not stored by our company; they are stored at the payment gateway. Therefore, we are not able to delete such data; you have to address the payment gateway which mediated the payment (see section Transfer of personal data to third parties > Payment Cards).
You are entitled to the deletion of data in the following cases:
- The personal data is not needed for the purposes for which it was being processed
- You have withdrawn your consent under which the data was processed and there is no further legal grounds for being processed
- You have objected to the processing of personal data and you believe that after assessing your objection, it will become clear that your interest in the particular situation prevails over ours
- The personal data has been processed unlawfully
- The deletion obligation is stipulated by a special legal regulation
- The personal data concerns a person under 16
How to exercise your right to deletion? Please contact us using contact form.
Raising an Objection
Certain personal data is processed on the grounds of our legitimate interest (see section “Legal grounds for processing of personal data”). In case you have concrete reasons, you are entitled to raise an objection to the processing of this personal data. The objection can be raised through the contact form.
Restriction of Processing
In case (a) you deny the accuracy of your personal data, (b) your personal data is processed unlawfully, (c) we do not need your personal data for processing purposes, but it is needed to determine, execute or defend your legal claims, or (d) you raised an objection under the preceding paragraph, you shall be entitled to us restricting the processing of your personal data.
In such cases, we may process your personal data only upon your consent (except for the storage or backup of the personal data concerned).
Lodging a Complaint
If you believe that your personal data has been processed unlawfully, you are entitled to lodge a complaint at the Office for Personal Data Protection. However, we will appreciate if you address us first and we can try to resolve your concerns. You can always easily contact us through our contact form.
This Privacy Policy including its parts is valid and effective from 21st May 2021 and it is available in electronic form at www.equiray.com.