This document contains basic information on how we process your personal data. The document was prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (GDPR).

The controller is a person who, either alone or together with other persons, determines the purposes and methods of processing of personal data.

The controller of your personal data is

FLASH STYLE s.r.o., Company ID No. 28367073, registered office Průjezdná 625, 155 31, 110 00, Prague 5, incorporated in the Commercial Register kept by Municipal Court in Prague, file No. C 136501.

You can contact the controller at:

• e-mail: info@gogoprint.cz

We process your personal data for the purpose of:

1. ensuring conclusion and subsequent performance of the contractual relationship between the controller and you (Art. 6(1)(b) of GDPR). This relationship imposes additional legal obligations on the controller, who must process your personal data for these purposes (Art. 6(1)(c) of GDPR);

2. for marketing purposes so that the controller can adapt the offer of its products and services and its commercial communications regarding the products to your needs; for this purpose, the controller obtains your unambiguous consent (Art. 6(1)(a)) of GDPR;

3. protection of our legitimate interests (Art. 6(1)(f) of GDPR), which include protection of the documents you provided us with and protection of our assets.

Provision of personal data to the controller is a general legal and contractual requirement. As regards provision of personal data for marketing purposes, which does not constitute performance of the contractual and legal obligations of the controller, we will ask you for your consent to the processing. Failure to grant the consent to the controller to the processing of personal data for marketing purposes does not mean that the controller will refuse to provide you with its product or services under the purchase contract.

Our legitimate interests are, in particular, proper performance of all our contractual obligations, proper performance of all our legal obligations, protection of our business and assets, and protection of the environment and ensuring sustainable development.

The legality of the processing is based on Art. 6(1) of GDPR, according to which the processing is legal if it is necessary for the performance of the contract, to meet the legal obligations of the controller, for the protection of the legitimate interests of the controller, or for the processing under a consent.

The legality of the processing is further based, for instance, on Act No. 563/1991 Coll., on Accounting, according to which we process and store invoicing data, on Act No. 89/2012 Coll., the Civil Code, according to which the controller protects its legitimate interests, or on Act No. 235/2004 Coll., on VAT.

We process this type of your personal data:

1. basic identification data – first name and surname, or company name and address, including Company ID No. ID or Tax ID No. of self-employed persons,

   2. contact details – telephone number and e-mail address (the e-mail address is your unique identifier for us)

   3. information about the services we provide to you

   4. information about our mutual communication – information from e-mails, telephone call records, or contact forms

   5. invoicing and transaction data – mainly information included in invoices, agreed invoicing terms, and received payments

   6. location data – addresses that you disclose to us for the provision of our services

   8. network identifiers – cookies

We obtain your personal data directly from you, especially from completed forms, or our mutual communication or concluded contracts. Personal data may also come from publicly available sources, registers, and records, such as the Commercial or Trade Register.

We store your personal data that we are required to archive by law according to the mandatory periods (this applies, in particular, to accounting documents).

We store other information about orders for a period of five years from the expiration of the contract or acceptance of the order, and we dispose of the supplied documents for individual orders immediately after the acceptance of the order by the customer.

We will dispose of your identification and contact data and communication records after five years from the last mutual contact.

Personal data processed only for marketing purposes will be processed until the revocation of your consent, but not for more than seven years.

After this period, your personal data will be securely and irreversibly destroyed to prevent its misuse.

We are required to provide personal data to public authorities, such as the tax office, courts, or law enforcement authorities, within the statutory limits.
Furthermore, we will transfer the necessary personal data (address, contact person, and telephone number) in case we use contractual suppliers – transport companies or postal service providers, external graphic designers, or other suppliers.


4. Your rights

In connection with the processing of your personal data, you have the rights described below. You can exercise these rights with the controller using the contact details above either by sending an e-mail to the indicated e-mail address or in writing by a letter sent to the address of the company’s registered office. The controller provides all communications and statements regarding your rights free of charge. However, if your request is demonstrably unfounded or disproportionate, in particular if it is recurring, the controller may charge you a reasonable fee for the administrative costs associated with providing the requested information. In the event of recurring requests for copies of processed personal data, the controller reserves the right to charge a reasonable fee for administrative costs.
The controller will provide statements and information about measures taken as soon as possible, but not later than within one month. This period may be extended by another two months if necessary and in view of the complexity and number of requests. The controller will inform you about any such extension, including the reasons.

You have the right to request information from the controller whether your personal data is processed or not. If your personal data is processed, you have the right to request information from the controller, in particular, about the identity and contact details of the controller, its representatives and, where applicable, its data protection officer, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of personal data, the authorized controllers, your rights, the possibility to file a complaint with the Office for Personal Data Protection, pplk. Sochora 27, 170 00 Prague 7, the source of processed personal data, and automated decision-making and profiling.

If the controller intends to further process your personal data for a purpose other than the one for which it was obtained, the controller will provide you information on this other purpose and other relevant information prior to such further processing.
The information to be provided as part of the exercise of this right is already contained in this document, however, you may always request it again.

4.2. Right to access personal data

You are entitled to request information from the controller about whether or not your personal data is being processed and, if so, you have the right of access to information on the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients, the retention period of personal data, information about your rights (the right to request rectification or erasure, restrict the processing, object to such processing), about the right to file a complaint with the Office for Personal Data Protection, information on the source of personal data, information on whether automated decision-making and profiling are applied, information about the method used, as well as about the meaning and expected consequences of such processing for you, and information and guarantees in case of transfer of your personal data to third countries or international organizations. Right to receive copies of your personal data However, the right to obtain such copies may not adversely affect the rights and freedoms of other persons.

In certain situations, you have the right to rectification of your personal data.

In certain specified cases, you have the right to request erasure of your personal data by the controller. Such cases include, for instance, when the processed data is no longer needed for the above-mentioned purposes. The controller will erase your personal data automatically after the necessary period, however, you may always file a request with the controller at any time. Your request will be assessed individually (despite your right to erasure, the controller may be required or have a legitimate interest to keep your personal data), and the outcome will be notified to you.

The controller processes your personal data only to the necessary extent. However, if you believe the controller, for instance, goes beyond the stated purposes for which it processes the personal data, you may request that your personal data is processed only for the most necessary legal reasons or that personal data be blocked. Your request will then be assessed individually and the outcome will be notified to you.

If you want the controller to provide your personal data to another controller, or another company, the controller will provide your personal data in the appropriate format to that person, unless this is prevented by legal regulations or other major obstacles.
This right cannot be exercised for camera recordings.

If you find out or believe that the controller is processing personal data in violation of the protection of your private and personal life or in violation of legal regulations (if the personal data is processed by the controller on the basis of a public or legitimate interest, for direct marketing purposes, including profiling, for statistical purposes, or for purposes of scientific or historical significance), you may contact the controller and request an explanation or removal of this defective situation.

4.8.Right to file a complaint with the Office for Personal Data Protection

At any time, you may file a complaint with the supervisory authority, which is the Office for Personal Data Protection located at the address Pplk. Sochora 27, 170 00 Prague 7.

You may revoke your consent to the processing of your personal data at any time by sending a notice to the e-mail address or registered office of the controller.

 5. Processor

If you provide us with documents that contain personal data or if we process an order for which we need personal data of other persons (preparation of events, production of personalized materials, etc.), we will have the status of a processor of such personal data.

6. Validity

This document is valid as from 01. 01. 2019. The current version of the document is always published on the website www.gogoprint.cz.