Privacy Policy and Data Processing

1. PERSONAL DATA CONTROLLER

1.1. The controller of all personal data provided by customers or visitors of the website www.navitel.cz is NAVITEL s.r.o., with its registered office at Na Strži 1702/65, Krč, 140 00 Prague 4, ID: 246 59 991, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Entry 164118 (hereinafter referred to as "Controller" or "NAVITEL").

1.2. The term Controller means that we process all your personal data, i.e., we determine how and for what purpose the personal data will be used, how long it will be stored, and how it will be secured.

1.3. Should you have any questions or requests regarding your personal data, do not hesitate to contact the Controller at any time, either at the contact address Na Strži 1702/65, Krč, 140 00 Prague 4, by email at gdpr@navitel.cz, or by phone at +420 604 300 669.

1.4. The Controller hereby declares that it has not appointed any representative or data protection officer. This means, among other things, that NAVITEL handles all matters related to personal data protection itself, without the involvement of other persons.

2. SCOPE AND PURPOSES OF PERSONAL DATA PROCESSING

2.1. Firstly, for better understanding and completeness of the information provided herein, it is necessary to clarify the meaning of the term "processing". This term means any operation with personal data, i.e., for example, their recording, storage, retrieval, use, dissemination, arrangement, deletion, etc.

2.2. In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR"), NAVITEL s.r.o. informs that in the operation of the e-shop at www.navitel.cz, it manages and processes the following general and organizational personal data of natural persons:
- first name and surname
- billing address
- delivery address
- phone number
- email address
- for the purpose of concluding a contractual relationship and actions arising therefrom in accordance with the valid legal order of the Czech Republic.
- first name and surname
- phone number
- email address
- gender (optional)
- location data (optional)
- data from your device (optional)
- for the purpose of communication and correspondence related to actions arising from the nature of the inquiry form on www.navitel.cz. The reception of personal data takes place via email. After the requests are processed, the personal data is deleted by removing the email correspondence.
- first name and surname
- email address
- phone number
- billing address
- delivery address
- login name
- password
- order history
- invoice history
- for the purpose of setting up and administering a user account.

The acquired, managed and processed personal data is kept by NAVITEL s.r.o. for the period strictly necessary according to the valid legal order of the Czech Republic, especially according to the VAT Act (Act of 1 April 2004 No. 235/2004 Coll. on Value Added Tax) and Act No. 563/1991 Coll. on Accounting, but for no longer than 10 years.

2.3. To avoid any doubts, NAVITEL states that in the event of a binding order, the customer is redirected to the website of the business partner – Verifone Payments B.V. for software products or to the website of the business partner – Československá obchodní banka, a. s. (abbreviated as ČSOB) for e-shop devices, even before entering other personal data necessary for concluding the contract (name, surname, country of residence, and email). ČSOB is subsequently the controller of the personal data provided to it, and NAVITEL is not responsible for its privacy policy or compliance with it.

2.4. The purpose of personal data processing by the Controller is exclusively:
(i) establishment and administration of the customer's user account on NAVITEL's website and e-shop;
(ii) communication with the customer, in case of a customer's request for customer support;
(iii) sending important non-commercial communications (e.g., notifications about new terms and conditions or privacy policy);
(iv) sending NAVITEL's regular newsletter;
(v) in case of access to data on your device (contacts, calendar), then for their further use within the NAVITEL navigation network;
(vi) in case of location data, then for their use within the NAVITEL navigation network.

2.5. NAVITEL provides personal data of natural persons to the carrier for the purpose of delivering ordered goods and to its contractual partner who stores the goods for NAVITEL and fulfills the order for goods ordered by the buyer. The data thus transferred primarily includes the buyer's name and surname, delivery address, email address, and possibly the amount to be paid upon receipt of the goods, if the goods have not been paid for in advance. In relation to these transferred personal data, NAVITEL acts as their controller. Both the carrier and the contractual partner who stores goods for NAVITEL are obliged, in relation to the personal data transferred to them by NAVITEL, to use these personal data only for the purposes of delivery and storage of goods and then to delete them without undue delay.

3. STORAGE PERIOD, PERSONAL DATA SECURITY, AND OTHER RECIPIENTS OF PERSONAL DATA

3.1. The Controller stores your personal data for the duration of the respective user account. The Controller will delete personal data immediately after being requested to do so by you (regardless of the form of such request), and no later than three (3) business days from the date of receipt of such request.

3.2. All personal data managed by the Controller is secured on a server located in the Czech Republic. The physical security of the server is ensured by security guards, a camera system, and a security system, while electronic security is ensured, among other things, by a Firewall, antivirus system, and regular password changes.

3.3. The Controller hereby declares that, with the exception of cases explicitly stated in this document, it will under no circumstances provide your personal data to any third party without your prior explicit consent.

3.4. NAVITEL s.r.o. further informs that natural persons have:
The right to be informed about what personal data the company keeps
The right to access their personal data
The right to rectify their personal data
The right to erase their personal data
The right to restrict the processing of their personal data to only necessary information
The right to data portability of their personal data in electronic format
The right to object to the processing of their personal data
The above-mentioned rights may be exercised by the data subject, a natural person, by means of a written request sent to the contact email address established for this purpose by NAVITEL s.r.o.: gdpr@navitel.cz.
The Controller does not have a so-called data protection officer. The Controller can be contacted at the email address gdpr@navitel.cz

3.5. The protection of the personal data of the buyer, who is a natural person, is provided by Act No. 101/2000 Coll., on the Protection of Personal Data, as amended.

3.6. The buyer agrees to the processing of their personal data: first name and surname, date of birth, home address, identification number, tax identification number, email address, telephone number (hereinafter collectively referred to as "personal data"). The buyer grants this consent to the seller by filling out the registration form, order form, when ordering goods, or related communication by phone, email, via www.navitel.cz. Furthermore, they agree to the processing of personal data by the seller for the purposes of exercising rights and obligations arising from the purchase agreement and for the purpose of maintaining the user account. Unless the buyer chooses otherwise, they also agree to the processing of personal data by the seller for the seller's marketing purposes, i.e., offering goods and services, including sending commercial communications and information relating to orders, via electronic means to the buyer. Consent to the processing of personal data in its entirety according to this article is not a condition that would by itself prevent the conclusion of a purchase agreement.

3.7. The buyer acknowledges that they are obliged to provide their personal data (during registration, in their user account, when ordering from the e-shop's web interface) correctly and truthfully and that they are obliged to inform the seller without undue delay of any change in their personal data.

3.8. The seller may authorize a third party, as a processor, to process the buyer's personal data. With the exception of cases explicitly stated in this document, personal data will not be disclosed by the seller to third parties without the prior consent of the buyer.

3.9. Personal data will be processed for the duration of the respective user account. Personal data will be processed in electronic form by automated means or in printed form by non-automated means.

3.10. The buyer confirms that the personal data provided is accurate and that they have been informed that the provision of personal data is voluntary.

3.11. In the event that the buyer believes that the seller or processor (Art. 3.6) is processing their personal data in a manner that is inconsistent with the protection of the buyer's private and personal life or inconsistent with the law, especially if the personal data is inaccurate with regard to the purpose of their processing, they may:
a) ask the seller or processor for an explanation,
b) request that the seller or processor remedy the situation.

3.12. If the buyer requests information about the processing of their personal data, the seller is obliged to provide this information. The seller has the right to demand a reasonable fee for providing the information according to the previous sentence, not exceeding the costs necessary for providing the information.

3.13 The buyer has the right to withdraw their consent to the processing of personal data at any time in writing to the address: NAVITEL s.r.o., Na Strži 1702/65, Prague 4, 140 00 or by email to gdpr@navitel.cz.

4. COOKIES

When you visit and use our website, we record your IP address, the time you spent browsing, and information about the website from which you came. The use of cookies can be disabled at any time in your internet browser, which will not affect your browsing of our website, see https://navitel.cz/cz/cookies-policy.

5. RIGHTS OF PERSONAL DATA SUBJECTS

5.1. Any personal data subject (whether a customer or a potential customer who has provided any personal data to the Controller) is entitled to withdraw their consent to the provision of personal data in whole or in part at any time. You are not obliged to provide personal data, however, its provision is a prerequisite for the proper establishment and functioning of the NAVITEL user account, or individual functions of the NAVITEL navigation network.

5.2. In the event of withdrawal of your consent to the provision of personal data concerning gender, such withdrawal of consent will not result in the inaccessibility or cancellation of your user account or other negative consequences. The same applies if you decide to withdraw your consent to receive the NAVITEL newsletter or consent to the collection of location data or data from your device.

5.3. You have the right to request access to, rectification or erasure of your personal data from the Controller at any time, and you may also object to the processing of your personal data at any time. Furthermore, you have the right to data portability of your personal data, which means that you can request their transfer to another controller.

5.4. If you feel that your personal data is not being handled in accordance with applicable legislation, you have the right to contact the Office for Personal Data Protection (www.uoou.cz). In such a case, however, we would appreciate it if you would contact us first and give us the opportunity to resolve the situation.

6. FINAL PROVISIONS

6.1. These personal data protection and processing policies are valid and effective from 25 January 2024.