Privacy policy

PRINCIPLES OF PERSONAL DATA PROTECTION AND PROCESSING

he purpose of this document is to transparently and comprehensibly inform you about what personal data we collect about you, for what purposes, and for what reason, as well as how we process this data. This document has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR) ("Regulation").

By confirming your familiarity with these principles of personal data protection and processing on our websites, you also confirm that you are at least 15 (fifteen) years old.

1. IDENTITY AND CONTACT INFORMATION OF THE DATA CONTROLLER

The data controller of your personal data is Artmagico Artsupplies s.r.o., with its registered office at Sokolovská 428/130, Karlín, 186 00 Prague, ID: 07428791, VAT: CZ07428791, a company registered in the Commercial Register kept by the Municipal Court in Prague, file no. C 300858 (hereinafter referred to as "Artmagico Artsupplies s.r.o." or "controller"), in all of the following cases:

• In case of providing data in connection with any purchase in the e-shop at the website www.artmagico.com;
• In case of providing data in connection with registration (creating a customer account) on the website www.artmagico.com, the controller is Artmagico Artsupplies s.r.o.;

The contact details of the controller are as follows: 

• Delivery address: Artmagico Artsupplies s.r.o., Lanškrousnká 381/5a, 568 02 Svitavy,
• Email address: info@artmagico.com, phone +420 604 758 089.

The controller has not appointed a Data Protection Officer.

2. PURPOSE AND LEGAL BASIS OF PERSONal DATA PROCESSING

Below, we provide an overview of personal data that we process. The data is categorized based on the operations during which we collect it (to help you understand when and why you provide us with certain data). For each category, we specify the purpose of processing and the legal basis on which the data is processed:

A, Purchase of goods in the e-shop at www.artmagico.com

When purchasing any goods in the e-shop at www.artmagico.com to process the order, you provide:

• Name and surname
• Address
• Phone number
• Email address
• Business name / ID / VAT number (optional)
• Delivery address (optional, if different from the previously provided billing address)

We require all this data from you to process your order and deliver the ordered goods to you. Name, surname (or business name) and address (delivery address) are necessary for us to know where to send the ordered goods. Furthermore, they are required for us to issue an invoice (for this purpose, we may also need your business ID and VAT number if you are ordering on behalf of a business). The phone number and email address are usually required by the goods carrier you select when creating an order in the e-shop, so they can inform you about the delivery. We also contact you at the provided phone number and email address in case of any issues on our side (e.g., insufficient stock), or if we need to clarify any details of your order (e.g., incomplete delivery address). We also send order confirmation, invoice, and information about the handover of the goods to the carrier for delivery to your email address.

As evident from the above description of the purpose of processing, the legal basis for processing your above-mentioned personal data is that the processing is necessary for the performance of a contract between you and the operator of the e-shop (i.e., Artmagico Artsupplies s.r.o.), of which you become a party by placing an order (pursuant to Article 6(1)(b) of the Regulation).

The data related to invoicing requirements is processed for the purpose of issuing a proper tax document as required by law. The requirements for the data to be included in a proper tax document (invoice) are set by law. Therefore, we process this data because processing is necessary for compliance with a legal obligation to which we are subject (pursuant to Article 6(1)(c) of the Regulation).

The email address you provide when making a purchase on the e-shop may be used in the future to send you information and offers (newsletters) about our related courses or products that we offer (direct electronic marketing). We believe that if you have made a purchase in our e-shop, you may be interested in similar related information in the future. We process your email address for this purpose within the scope of our legitimate interest (pursuant to Article 6(1)(f) of the Regulation). However, we want to inform and assure you that if you do not wish to receive our newsletters, you can let us know at any time, and we will stop sending them (or not start sending them at all; you can refuse at any time). You can simply send an email to info@artmagico.com with the subject "DO NOT SEND NEWSLETTER," or reply to any of our newsletters with the same text in the body of the email, and we will no longer send you further newsletters.

B) Registration on the website www.artmagico.com

On the website www.artmagico.com, you can create a personal account (register). Registration is voluntary. When registering, it is usually necessary to provide the following personal data:

• Name and surname
• Contact email
• Username and password

Name and surname are necessary to identify the person registering, as registration may be associated with providing certain customer benefits (e.g., purchasing at discounted prices if this benefit is currently provided). The username and password are necessary to secure access to the created customer account for the specific person (customer).

Every customer of the e-shop www.artmagico.com can also check the box "I want to create an account on this e-shop" when creating an order in the e-shop and, in addition to the data typically filled out during the order (see section A above), provide their login password, thus creating an account on the e-shop. In the account, all the data that the customer has filled out in the order form (see section A above) will be stored, for the purpose of facilitating faster processing of future orders by the customer when logged into the e-shop (when placing subsequent orders, the customer's delivery and billing details will be pre-filled, which were previously entered during previous orders).

By creating an account on our websites, you also consent to the processing of your personal data provided for the specific (described above) purpose (pursuant to Article 6(1)(a) of the Regulation).

You can revoke this consent at any time by canceling your account on our website in accordance with Article 3 of our terms and conditions (available on the website www.artmagico.com).

The email address you provide when creating a customer account may be used in the future to send you information and offers (newsletters) about our related courses or products that we offer in the e-shops where you have registered (direct electronic marketing). We believe that if you have registered on our e-shop, you may be interested in similar related information in the future. We process your email address for this purpose within the scope of our legitimate interest (pursuant to Article 6(1)(f) of the Regulation). However, we want to inform and assure you that if you do not wish to receive our newsletters, you can let us know at any time, and we will stop sending them (or not start sending them at all; you can refuse at any time). You can simply send an email to info@artmagico.com with the subject "DO NOT SEND NEWSLETTER," or reply to any of our newsletters with the same text in the body of the email, and we will no longer send you further newsletters.

The controller does not engage in automated individual decision-making within the meaning of Article 22 of the Regulation.

3. RETENTION PERIOD OF PERSONAL DATA

In cases of processing under sections A) and B) above, the period for which your personal data will be retained is limited to the time necessary for providing the service or selling goods, but no longer than 2 years (unless the law obliges the controller to retain the data for a longer period, e.g., for invoices). In the case of processing under section D), the data is processed until the user or the controller cancels the user's customer account in accordance with the controller's terms and conditions.

For email addresses provided (under sections A), B), and C) above), these are retained and used for marketing purposes for a maximum of 10 years from the customer's last purchase/order or other contact with the customer, or from the date of cancellation of their customer account (unless the customer expresses their objection to the use of the address for this purpose in accordance with these Principles).

4. OTHER RECIPIENTS OF PERSONAL DATA

• The controller does not intend to transfer your personal data to third countries (countries outside the EU) or international organizations.
• Your personal data provided under sections A) to B) above is accessible only to the provider of web hosting services for the website www.artmagico.com and the provider of accounting software into which the data is entered.
• Your personal data provided under sections A) and B) above is further shared only with:
  
  • Credit card companies, payment service providers, but only to the extent necessary to process payments based on your order, fulfill the purchase agreement (if you choose a payment method by bank transfer or credit card).
  • Carriers for the purpose of delivering the products or services you ordered and handling complaints, including withdrawal from the contract.

5. SECURITY OF PERSONAL DATA

• Your personal data is transmitted to us in encrypted form. We secure our websites and other systems with technical and organizational measures against the loss and destruction of your data, unauthorized access to your data, its alteration, or dissemination.

• For other recipients to whom we transfer your personal data (see section 4 above), we require them to demonstrate compliance of their systems with the Regulation.

6. DATA SUBJECT RIGHTS

• Subject to the conditions set out in the Regulation, you have the right to request access to your personal data from the controller, the right to rectify or erase your personal data, or restrict its processing, the right to object to the processing of your personal data, and the right to data portability.

• You have the right to withdraw your consent to the processing of your personal data by the controller at any time. However, this does not affect the lawfulness of the processing of your personal data before such withdrawal of consent.

• If you believe that the processing of your personal data has been or is being violated by the Regulation, you have the right to lodge a complaint with the supervisory authority.

• In the case of processing under section B) above, you are not obliged to provide personal data. Providing your personal data is not a legal or contractual requirement and is not necessary to conclude a contract.

• You have the right at any time to object to the processing of your personal data for direct marketing purposes, including profiling, if profiling relates to such direct marketing. If you object to the processing of your personal data for direct marketing purposes, your personal data will no longer be processed for these purposes.

• You also have the right to lodge a complaint or request with the Office for Personal Data Protection (www.uoou.cz).