Personal data processing and protection principles

This Personal Data Processing and Protection Policy ("Policy") represents the basic principles that TART, s.r.o., Vinohradská 366/91, 618 00 Brno, ID No.: 46901876 ("Company") follows when collecting and processing personal data. This Policy implements the Company's rights and obligations arising in particular from the following generally binding legal regulations:

1. Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR");
2. Act No. 480/2004 Coll., on Certain Information Society Services and on Amendments to Certain Acts (Act on Certain Information Society Services), as amended (the "Act on Certain Information Society Services");
3. Act No. 127/2005 Coll., on Electronic Communications and on Amendments to Certain Related Acts (Act on Electronic Communications), as amended (the "Electronic Communications Act").

This Policy applies to all persons visiting the Company's website https://www.tart.cz (the "Website"), regardless of whether they are in a contractual relationship with the Company or not.

What is personal data

Personal data means, in accordance with the GDPR, any information about an identified or identifiable natural person (i.e. not a legal entity). In principle, it is therefore any information which, either alone or in combination with other information, can be used to identify a specific natural person ("Personal Data").

What Personal Data does the Company process

The Company may collect the following Personal Data about you:

Personal Data that you provide to the Company.

Such Personal Data includes, but is not limited to, information that you provide on a completed registration, order or other form or that you provide to the Company by email, telephone, fax or other similar device. You may also provide Personal Data to the Company [for competitions], [by entering a product or service review], [by booking a place on a training course] or [by sending a general enquiry]. This includes, but is not limited to, your name, surname, mailing address, email address, telephone number, bank account details, details of your chosen payment method, etc.

The Company will process the aforementioned Personal Data for the following purposes:

a. providing the service, product or information you have expressed interest in;
b. if you are an existing customer, also to provide you with information about other services or products similar to those that were the subject of your previous purchase;
c. if you are a new customer, the Company will only send you commercial communications and offers of products and services if you have given the Company your express consent to do so;
d. reviewing and evaluating your application for employment.

Personal data collected about you by the Company itself

When you visit our Website, the Company may collect certain information necessary to ensure the proper and convenient operation of the Website. Such information includes the Internet Protocol (IP) data used to connect your computer to the Internet, your registration details, browser type and version, time zone settings, browser plug-ins, details of your visit, including the applicable Uniform Resource Locator (URL), the path to and from the Websites (including date and time), the products you viewed or searched for, response times, errors during downloads, the length of visits to certain pages, information about your interaction while visiting the site (such as scrolling, clicks, and mouse placement), or how you leave the site.

The Company uses this personal information to administer and improve the Website and for purposes of providing internal operations, including troubleshooting, data analysis, testing, research, statistical purposes, and to record the frequency of views. This Personal Information may also be used to measure the effectiveness of advertising and to provide relevant advertising.

Disclosure of Personal Information

The Personal Data that the Company obtains about you may be transferred [within the [●] group, i.e., related parties of the Company;] and to third parties ("Processors") who assist the Company in fulfilling its contractual obligations by arranging certain services (e.g., service delivery). The Company only transfers Personal Data to Processors that provide guarantees of a sufficient level of security for your Personal Data and process such Personal Data solely on the basis of a data processing agreement. Accordingly, the Company may transfer Personal Data to these Processors:

External collaborators and suppliers for the purpose of fulfilling the Company's contractual obligation;
payment service providers and payment processors for the purpose of securing the transfer of funds and the execution of payments;
postal and delivery service providers for the purpose of delivering products or services offered by the Company;
Website administrators.

In certain circumstances, the Company may be required to disclose your Personal Data to third parties (e.g. law enforcement authorities) in accordance with generally applicable law.

Means of protection of personal data

In order to protect and minimize the risk of unauthorized access to Personal Data, the Company has taken organizational and technical measures.

These measures include:

Organizational restrictions narrowing the range of persons authorized to come into contact with Personal Data;
technical security of the Company's servers and Websites against unauthorized manipulation.

Persons coming into contact with Personal Data are instructed on the principles of personal data protection and are bound by confidentiality when processing Personal Data.

Duration of retention of Personal Data

The Company retains Personal Data only for the period necessary for the performance of its contractual obligations and for the performance of the Company's obligations under applicable law. Personal Data that is processed on the basis of your consent is retained by the Company only for the duration of the purpose for which consent was given. Once the lawful basis on which your Personal Data is processed has ceased to exist, the Company will destroy the Personal Data and any existing copies of it.

Cookies

TART's Cookie Policy describes what cookies are, how they work and how we use them on this website.

1. General information

Cookies are small files consisting of numbers and letters that are stored on a user's computer when they load a website. They are often used to make a website work or to improve the way it works and provide information to the website owner.

Some website features (such as sharing content on social media, playing videos, etc.) use services provided by third-party websites. These features store cookies that allow the website to track the User's movements. These cookies are only stored if the User gives his/her consent.

The user can familiarize himself with the nature of the cookies used on the website, accept them or refuse them.

If the User chooses not to download cookies, some features or services of the Website may not be available to the User.

2. Cookies used on this website and their purpose

The following cookies are used on this website for the following purposes: these are "session" cookies and "persistent" cookies.

Session cookies will track you as you move around the website. They will be deleted from your computer when you close your browser.

We also use persistent cookies which will be stored on your computer until you delete them or until the date on which they are due to expire.

We also use third party cookies, such as Google Analytics, to analyse how our website is used. Google Analytics generates statistical and other data about website usage through cookies that are stored on the user's computer. The data generated about our website is used to create reports about the use of the website. Google stores this data. Google's privacy policy is available at: http://www.google.com/privacypolicy.html.

3. How do I change the cookie settings on my browser?

Users have the option in their browser settings to block the storage of cookies, delete existing cookies and change the period for which cookies are stored on their computer (usually by selecting "Tools" or "Options" / "Privacy" or "Confidentiality"). However, this step will affect the user experience of the website. The systematic disabling of cookies in the User's browser will prevent the User from being able to use some of the services or functions provided by ANTALIS, but does not constitute a loss for the User and the User is not entitled to any compensation in this respect.

3. Legal notice

The User is hereby notified that systematically disabling cookies in the browser or deleting stored cookies from the browser will affect the user's experience of using the Website and will prevent or limit the User's use of certain services or functions provided by the Website. As a result, the User is not entitled to any compensation from TART.

Most browsers allow Users to refuse cookies, but some browsers only allow Users to refuse third party cookies.

For example, in Internet Explorer you can refuse all cookies by clicking on "Tools", "Internet Options", "Privacy" and setting the slider button next to "Block all cookies". However, blocking all cookies will have negative consequences when using many websites.

Rights of data subjects

In connection with the processing of your Personal Data by the Company, you are entitled to the following rights guaranteed by the Personal Data Protection Regulations:

The right to withdraw consent to the processing of Personal Data if the processing is based on such consent;
the right to request access to Personal Data and to information about which of your Personal Data is processed by the Company;
the right to rectification of inaccurate Personal Data and, where applicable, to completion of incomplete Personal Data;
the right to erasure of Personal Data processed;
the right to restrict the processing of Personal Data;
the right to obtain the Personal Data you have provided to the Company in a structured, commonly used and machine-readable format and the right to transmit that data to another person;
the right to be informed of a Personal Data breach;
the right to object to the processing of Personal Data;
the right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection, at Pplk. Sochora 27, 170 00 Prague 7, or by mail to qkbaa2n.

The aforementioned rights and any complaints may be exercised with the Company, as the data controller, in writing at the address below or by e-mail to info.cz@tart.eu.

TART, s.r.o.

Vinohradská 366/91, 618 00 Brno

This Policy is valid and effective as of 25 May 2018.