PERSONAL DATA PROTECTION

I. Basic Provisions

The administrator of personal data under Article 4 (7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) is Jan Kuběnka, ID 73846091, registered office: Obětí nacismu 82, Cheb 350 02 (hereinafter "administrator").

Contact details of the administrator: Address: Obětí nacismu 82, Cheb 350 02
Email: info@paintballarenacheb.cz
Phone: +420 774 450 130

Personal data refers to all information about an identified or identifiable individual.

The administrator has not appointed a Data Protection Officer.

II. Sources and Categories of Personal Data Processed

The administrator processes personal data provided by you or obtained based on the fulfillment of your order.

The administrator processes your identification and contact data and data necessary for fulfilling the contract.

III. Legal Reason and Purpose for Processing Personal Data

The legal reason for processing personal data is:

• Fulfillment of the contract between you and the administrator under Article 6 (1)(b) GDPR.

The purpose of data processing is:

• Processing your order and fulfilling rights and obligations from the contractual relationship. Providing personal data is necessary to conclude and fulfill the contract. Without this data, the contract cannot be concluded or fulfilled.

The administrator does not engage in automated individual decision-making under Article 22 GDPR.

IV. Retention Period of Personal Data

The administrator retains personal data:

• For the period necessary to exercise rights and obligations from the contractual relationship (15 years from its end).

After this period, the administrator will delete the personal data.

V. Recipients of Personal Data (Administrator’s Subcontractors)

The administrator does not transfer personal data to any recipient.

VI. Your Rights

Under GDPR, you have:

• The right to access your data (Art. 15 GDPR)

• The right to rectification (Art. 16 GDPR) or restriction of processing (Art. 18 GDPR)

• The right to erasure (Art. 17 GDPR)

• The right to object (Art. 21 GDPR)

• The right to data portability (Art. 20 GDPR)

• The right to withdraw consent in writing or electronically to the administrator’s address or email specified in Article III.

You also have the right to lodge a complaint with the Data Protection Authority if you believe your data protection rights have been violated.

VII. Conditions for Securing Personal Data

The administrator declares having taken all appropriate technical and organizational measures to secure personal data.

The administrator has secured data storage both electronic and physical.

Access to personal data is restricted to authorized persons only.

VIII. Final Provisions

By submitting your order via the online form, you confirm being informed of these data protection terms and accept them fully.

You agree to these terms by checking the consent box via the online form.

The administrator may change these terms. A new version will be published on the website and sent to your provided email.

These terms are effective as of 25.5.2018.