Personal data protection
If you are one of our customers, a subscriber to our newsletter, or a visitor to our website, you entrust us with your personal data. We are responsible for its protection and security. Please familiarise yourself with the personal data protection, the principles and rights that you have in connection with the GDPR (General Data Protection Regulation) and Act No. 110/2019 on personal data processing.
Who is the controller?
We are Front Line s.r.o., IČO 25115308, with our registered office at Kovářská 939/4, Prague 9 – Libeň, registered in CR of the Municipal Court in Prague, Section C, file 50982 , operating e-shops www.hot-shop.cz , www.front-line.cz , www.sabordemexico.eu and www.mexicali-mercado.eu. We process your personal data as a Controller, i.e., we determine how your personal data will be processed, for what purpose and for how long, and we select potential further processors who will assist us with the processing of the data.
We declare that as the administrator of your personal data we comply with all legal obligations required by the relevant legislation, especially the Data Protection Act and GDPR, and therefore that:
we will process your personal data only based on justified legal reason, especially justified reasons, agreement performance, legal obligations or consent granted,
pursuant to Article 13 of the GDPR, we will fulfil the obligation to provide information before commencing personal data processing,
we will allow and support you in executing and enforcing your rights pursuant to the Personal Data Protection Act and the GDPR.
Scope of personal data and purposes of processing
We process data which you provide us with yourself, and we do so for the following reasons (to fulfil the following purposes):
● provision of services, performance of a contract
your personal data in the scope: name, surname, address, phone number, e-mail, we necessarily need to perform the agreement (supply of goods, sending information on order).
If you are a customer, we will require your personal data (billing data) in order to meet the statutory obligation to issue and record tax documents.
● marketing- sending newsletters
We will make use of your personal data (e-mail address and name), what you click on in an e-mail and when you most often open it, for the purpose of direct marketing – sending commercial communications. If you are a customer, we will do so on the grounds of a legitimate interest, since we can reasonably assume that our news will interest you. We will send communications for a period of 7 years from your last order.
If you are not a customer, we will only send you newsletters if you grant your consent, and will do so for a period of 7 years thereafter. In both cases, you can withdraw your consent any time by using the unsubscribe link in any sent e-mail.
● We determine your shopping satisfaction through e-mail questionnaires
Within our Verified by customers programme, in which our e-shop participates. We send those to you when you shop with us, if, in the meaning of the Section 7 paragraph 3 of Act No. 480/2004 Coll, on certain services of information society, you do not decline the reception of our business communications or you don’t withdraw your previous consent. For the purposes of distribution of questionnaires and the assessment of our market position we use a processor, who is the operator of the Heureka.cz portal; for these purposes we send it information on the purchased goods and your e-mail address.
Cookies for advertisement targeting are processed on the basis of your consent and your internet browser settings. We use it to be able to address you with a precisely targeted product or service. For cookies processing for targeted advertising we use platforms with which we have a binding agreement or contract regarding the protection of personal data.
Camera system in our store:
In our fixed store atKovářská 939/4 we process the footage of cameras with on-line transmission and recording. Camera(s) are only located in the store for security reasons of to clarify eventual criminal activities. The operator is our company – MEXICALI s.r.o. ID No. 27886425
Personal data security and protection
We protect your personal data as best as possible using state-of-the-art technologies.
We protect it with the utmost care. We introduced and maintain all possible (currently known) technical and organisational measures, which prevent misuse, damage or destruction of your personal data.
If you access our website from a mobile phone, tablet or similar device, your personal data is protected as if you accessed it from a computer.
Handover of personal data to third parties
Our appointed employees and collaborators have access to your personal data, bound by confidentiality and using it in the meaning specified herein to perform our obligations to you and to satisfy our needs and wishes.
It means primarily shippers in the context of delivery of goods.
Our company doesn’t have or record data of your payment cards.
In order to ensure specific processing operations that we are unable to provide from our own resources, we use the services and applications of processors who are capable of protecting data better than we are and who specialise in the particular kind of processing as professionals.
They are providers of the following industries:
It is possible that, in the future, we will decide to make use of other applications or processors in order to facilitate and enhance processing. However, when choosing such a processor we promise you that we will at least place the same demands on the processor for the security and quality of processing as we place on ourselves.
Transferring data outside the European Union
All processing of personal data will take place within EU.
Your rights in connection with personal data protection
You have a number of rights in relation to the protection of your personal data. If you wish to enforce any of these rights, please contact us at the e-mail address firstname.lastname@example.org or email@example.com.
You have the right to information that has already been provided in this information page containing personal data processing principles.
Thanks to the right of access, you can call upon us at any time and, within 30 days, we will provide you with evidence as to what personal data we are processing and why.
If any of your details change, or if you find your personal data to be outdated or incomplete, you have the right to supplement and alter your personal data.
You can enforce your right to restrict processing if you suspect that any data we are processing is incorrect, if you believe we are carrying out said processing illegally, but do not wish to erase all of the data, or if you raise an objection against processing. You can restrict the scope of personal data or the purpose of processing. (For example, by unsubscribing from the newsletter, you restrict the purpose of processing for the intention of sending business communications).
Right to portability
If you wish to take your personal data and to transfer it to another person, we will proceed in the same manner as in the case of enforcement of the right of access – the sole difference being that we will supply you with the information in a machine-readable format. In such a case we will need at least 60 days.
Right to erasure (right to be forgotten)
Another of your rights is the right to erasure (right to be forgotten). We do not want to forget about you, but should you so wish, it is your right. In such a case we will erase all of your personal data from our system, as well as from the systems of all partial processors, and all back-ups. We will need 90 days to fulfil the right to erasure.
In some cases, we are bound by statutory obligations. For example, we have to keep records of issued tax documents for the established statutory period. In such case we will erase all such personal data which is not bound by another law. We will inform you by e-mail once the erasure has been completed.
Complaints to the Office for Personal Data Protection
If you believe that we are not handling your data in compliance with the law, you are entitled to contact the Office for Personal Data Protection with a complaint at any time. We will be glad if you first inform us of such suspicion, so that we can do something about it and potentially correct any errors.
Unsubscribing from the newsletter and commercial communications
If you are a customer, we will send you e-mails containing inspirations, articles or products and services based on a legitimate interest.
If you are not yet a customer, we will only send you such e-mails with your consent. In both cases, you can unsubscribe from our e-mails by clicking on the unsubscribe link in every sent e-mail.
We would like to assure you that our employees and collaborators, who will process your personal data, are obligated to maintain confidentiality regarding your personal data and relevant security measures, the revelation of which would jeopardise the security of your personal data. This confidentiality survives any obligation relationship with you. Without your consent your personal data will not be provided to any third person.
The personal data processing guidelines are in effect from 25 May 2018 and replace the previous Personal Data Protection.