Personal data processing

Personal Data Processing Policy

The company Merabell Technologies s.r.o., with its registered office at Kubánské náměstí 1391/11, 100 00 Prague 10, ID No.: 06560024 (hereinafter referred to as "Merabell Technologies"), as a personal data controller, hereby informs about the manner and scope of processing of personal data by this company, including the scope of the data subject's rights related to the processing of their personal data by Merabell Technologies.

Merabell Technologies processes personal data in accordance with the law of the European Union, in particular in accordance with Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, as well as in accordance with international treaties to which the Czech Republic is bound, in particular in accordance with the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data No. 108, promulgated under No. 115/2001 Coll, 101/2000 Coll., on the Protection of Personal Data and on Amendments to Certain Acts, as amended (hereinafter referred to as the "PDPA").

Purpose and scope of personal data processing:

Merabell Technologies only processes the precise personal data it has obtained in accordance with the ZOOU, and Merabell Technologies collects and processes this personal data only for the stated purpose, within the scope set out below, for a period of 7 years, but no longer than until your consent to the processing of your personal data (for this processing purpose) is withdrawn.

The main purposes of the processing of personal data by Merabell Technologies:

Performance of the purchase contract and provision of services;
accounting and tax purposes;
debt collection;
compliance with legal obligations;
direct marketing (information and product campaigns) of Merabell Technologies;
customer record keeping.

Scope of processing of personal data by Merabell Technologies:

Merabell Technologies processes personal data to the following extent:

Your name;
your company name;
address or registered office of the company;
identification number and tax identification number;
delivery address;
telephone number;
e-mail address;

Sources of personal information:

Merabell Technologies obtains personal data mainly from the data subject in the context of contract negotiations. The provision of personal data will facilitate the communication between the data subject and Merabell Technologies and will also significantly improve the efficiency of the provision of services.

Merabell Technologies automatically collects certain information about the users of its website in the course of standard Merabell Technologies server operations (e.g. the IP address of the user's computer) and also when using cookies (small text files that are stored on the user's computer and which enable the server to recognise a user who has already visited the website once and then record their behaviour and, for example, adapt the design and content or better target advertising campaigns accordingly). Cookies are not programs that can cause damage to the user's computer. Most browsers offer the option not to accept cookies - however, e-commerce will not function properly without cookies enabled (see more in the section "Cookies" below).

Processors and recipients:

In addition to Merabell Technologies and its employees, personal data may also be processed by processors working for Merabell Technologies for the purposes described above, on the basis of data processing agreements concluded in accordance with the Personal Data Protection Act.

Merabell Technologies processes personal data manually and automatically. The protection of personal data is technically and organisationally ensured by Merabell Technologies in accordance with the PDPA. Merabell Technologies requires the same security from the processors of personal data.

Merabell Technologies informs that personal data may be transferred to third parties who have the legal authority to require the transfer of the personal data in question, upon a lawful request. Merabell Technologies does not pass on personal data about its customers to other entities, unless they are contractual carriers who provide transport of goods to customers (to whom the information on name, surname and delivery address is passed on) - e.g. Czech Post, DHL, PPL, etc.

Rights of data subjects:

The data subject is entitled to request information about the processing of his/her personal data, the purpose of the processing of personal data, the scope or categories of personal data subject to processing, the sources of personal data, the nature of automated processing, the processors, the recipients or categories of recipients of personal data.

Merabell Technologies will provide the communication of the requested information without undue delay, for a reasonable fee not exceeding the costs necessary to provide such information.

In the event that the data subject becomes aware or believes that Merabell Technologies or a Merabell Technologies contract processor is carrying out processing of personal data which is contrary to the protection of the data subject's private and personal life or contrary to law, the data subject shall be entitled to:

request an explanation from Merabell Technologies or its contractual processor;
request that Merabell Technologies or its contractual processor remedy the situation; in particular, the data subject is entitled to request the blocking, rectification, completion or destruction of the personal data.

Merabell Technologies shall always inform the data subject without undue delay of the processing of his or her request. The data subject shall have the right to refer the matter to the Data Protection Authority at any time.

The data subject shall always contact Merabell Technologies in writing by e-mail – info@merabell.com

Cookies

In order to improve the service provided to you, our website uses cookies. Cookies are small files that store information in your browser and are commonly used to distinguish individual users. However, the user's person is not identifiable on the basis of this information. Cookies thus help, for example:

the correct functionality of our site, so that the purchase process can be completed with the least possible difficulty
remembering our customers' login details so that they do not have to enter them each time
to find out which pages and features visitors use most often - so we can best tailor our offer to your requirements
help us find out which ads visitors view most often so that they don't see the same ads over and over again as they browse the site, or so that they don't see ads for products they're not interested in

Security of data transmissions

Secure Socket Layer (SSL) is used throughout the supermarket for your security.

GDPR regulation

Merabell Technologies hereby wishes to inform you that on 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as "GDPR") entered into force and is directly effective within the legal system of the Czech Republic. As a consequence of this fact, as of 25 May 2018, it fully reflects the new legal regulation on the protection of personal data of natural persons regulated by the GDPR.

Definition of terms used:

personal data - personal data is any information relating to an identified or identifiable data subject; a data subject is considered to be identified or identifiable if the data subject can be directly or indirectly identified;
data subject - the data subject is the natural person to whom the personal data relate;
controller - a controller is any entity which determines the purpose and means of processing personal data, carries out the processing and is responsible for it;
processor - a processor is any entity which, on the basis of a specific law or a mandate from the controller, processes personal data pursuant to this Act;
recipient - a recipient is any entity to which personal data are disclosed;
customer - a customer is a legal or natural person with whom Merabell Technologies has a contractual relationship;
processing of personal data - processing of personal data means any operation or set of operations which the controller or processor systematically performs on personal data, whether by automated means or by other means; processing of personal data means, in particular, collection, storage on a medium, disclosure, adaptation or alteration, retrieval, use, transmission, dissemination, disclosure, storage, exchange, classification or combination, blocking and destruction