GDPR

I. Introductory Provisions

1. These Principles are drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR). The aim of these Principles is to provide Participants with basic information regarding the processing of personal data.

2. For the purposes of these Principles, the following shall apply:
a) Operator: XAVIAN ELECTRONICS s.r.o., identification number 25618415, with its registered office at Milady Horákové 413, 272 01 Kladno - Kročehlavy, e-mail: info@xavian.cz
b) Participant: a natural or legal person who fills in and sends the registration and/or order and/or contact form from the website to the Operator; a
c) Personal data: name and surname, or company name, residential address, or registered office, delivery address, email address, telephone number, business identification number of the natural person or legal entity and tax identification number of the natural person or legal entity.
The Operator, as the administrator of Personal Data, hereby informs about the method and scope of processing of Personal Data, including the scope of the Participant's rights related to the processing of Personal Data.

3. The Operator, Xavian Electronics s.r.o., is a manufacturer and seller of audiovisual equipment and for this purpose operates the website https://www.xavian.cz/, which also includes the e-shop https://eshop.xavian.cz/. As part of this service, the Operator processes Personal Data:
a) to the extent to which they were provided in connection with a possible order for the Operator's products and/or services, or in the context of negotiations to conclude a contract with the Operator, as well as in connection with the concluded contract; and
b) for the purpose(s) specified below.
The Operator further processes the Personal Data of the Subscribers also in connection with the Operator's marketing, as well as for the purpose of implementing and controlling the loyalty program for the purpose of providing discounts to customers ("Loyalty Program").

4. The Operator is the controller of Personal Data. Personal Data is further processed by the controller's accounting firm and by providers of parcel delivery services.

II. Purpose of processing Personal Data

1. The Operator processes Personal Data for the following purposes:

a) ensuring the conclusion and subsequent performance of the contractual obligation between the Operator and the Subscriber (Article 6(1)(b) GDPR). Such a relationship gives rise to additional legal obligations and the Operator must therefore process Personal Data for this purpose as well (Article 6(1)(c) GDPR);

b) for marketing purposes, so that the Operator can best adapt the offer of its products and services and commercial communications regarding them to the Subscriber's needs, for this purpose the controller obtains the Subscriber's explicit consent (Article 6(1)(a) GDPR);

c) to protect its legitimate interests (Article 6(1)(f) GDPR), which are the proper and timely fulfillment of the agreed contractual obligation between the Operator and the Subscriber, the fulfillment of the legal obligations that the Operator derives from the contractual relationship between it and the Subscriber, the protection of the Operator's reputation as the website administrator and the protection of the Operator's property interests for potential legal disputes.

III. Protection of Personal Data and Information on Processing.

1. Act No. 101/2000 Coll., on the Protection of Personal Data, as amended, and other relevant legal regulations apply to the Subscribers.

2. The Participant acknowledges that by sending the completed registration and/or order form, the processing of Personal Data by the Operator will begin.

3. If the Participant does not provide his/her Personal Data, it is not possible to conclude a contract with the Operator and/or provide him/her with the services resulting from it. Personal data are necessary in this context for the provision of a specific service or product of the Operator.

4. Providing Personal Data to the Operator is generally a contractual and legal requirement. Regarding the provision of Personal Data for marketing purposes, which does not constitute the fulfillment of the contractual and legal obligation of the controller, the Participant’s consent is required. If the Participant does not grant the Operator consent to the processing of Personal Data for marketing purposes, this does not mean that the Operator would refuse to provide its services as a result.

5. Personal data will be processed during the negotiation of the contract between the Operator and the Participant, for the purpose of concluding the contract, as well as for the duration of the contractual relationship or for the period specified in the consent.

6. In the event of a contract being concluded in accordance with the Operator's Terms and Conditions, Personal Data will be processed and stored for the following 36 months in the event of a dispute arising regarding the relationship between the Operator and the Subscriber, in order to protect the Operator's legitimate interests.

7. In order to fulfill the legal obligation to archive accounting documents pursuant to Act No. 563/1991 Coll., on Accounting, as amended, Personal Data (except for the e-mail address and telephone number) will be further processed and stored for a period of 5 years starting from the year following the year in which the contract was concluded between the Operator and the Subscriber.

8. After the expiry of the period specified in Article III. paragraph 5, paragraph 6 and paragraph 7, the Operator shall destroy the Personal Data.

9. The Participant is obliged to provide the Operator with only true and accurate Personal Data.

10. The Operator shall make every effort to prevent unauthorized processing of Personal Data.

11. The Participants' personal data are transferred to third parties, namely the Administrator's accountant and, if applicable, to shipping companies. The Participants' personal data are not transferred to any third country or international organization.

12. The Personal Data are and will be processed in electronic form in a non-automated manner.

13. The Participant acknowledges that cookies from [Google LLC] may be stored on his/her device.

IV. Rights of the Participant related to processing

1. The Participant has the right to withdraw his/her consent (in cases where the processing of Personal Data is based on consent) to the processing of the provided Personal Data at any time. However, withdrawal of consent to the processing of Personal Data is not possible to the extent and for the purposes of fulfilling a legal obligation by the Operator. Withdrawal of consent does not affect the lawfulness of processing based on consent granted before its withdrawal. Withdrawal of consent also does not affect the processing of Personal Data that the Administrator processes on a legal basis other than consent (i.e. in particular if the processing is necessary for the fulfillment of a contract, legal obligation or for other reasons specified in applicable legal regulations). Consent can be withdrawn by completing and sending an appeal to the address of the Operator's registered office or using a link in e-mail communication.

2. The Participant also has the right to:
a. Be informed about the processing of his/her Personal Data
i. The Participant is entitled to request information from the Operator whether Personal Data is being processed or not. If Personal Data is processed, the Subscriber has the right to request information from the Operator, in particular on the identity and contact details of the Operator, its representative and, where applicable, the data protection officer, on the purposes of processing, on the categories of Personal Data concerned, on the recipients or categories of recipients of Personal Data, on the legitimate interests of the Operator, on the list of the Subscriber's rights, on the possibility of contacting the Office for Personal Data Protection, on the source of the processed Personal Data and on automated decision-making and profiling.
ii. If the Operator intends to further process the Subscriber's Personal Data for a purpose other than that for which they were obtained, it shall provide the Subscriber with information on this other purpose and other relevant information prior to such further processing.
b. Request access to his/her Personal Data from the Operator
The Participant is entitled to request information from the Operator as to whether his/her Personal Data is being processed or not and, if so, has access to information on the purposes of the processing, the categories of Personal Data concerned, the recipients or categories of recipients, the period of storage of the Personal Data, information on the Participant's rights (rights to request rectification or erasure from the Operator, restriction of processing, objection to such processing), the right to file a complaint with the Office for Personal Data Protection, information on the source of the Personal Data, information on whether automated decision-making and profiling are taking place and information regarding the procedure used, as well as the significance and anticipated consequences of such processing for the Participant, information and guarantees in the event of the transfer of Personal Data to a third country or an international organization. The Participant has the right to be provided with copies of the processed Personal Data. However, the right to obtain this copy must not adversely affect the rights and freedoms of other persons.
c. To correct the provided Personal Data
i. If, for example, the Participant has changed their address, telephone number or other fact that can be considered Personal Data, the Participant has the right to request the Administrator to correct the processed Personal Data. In addition, the Participant has the right to supplement incomplete Personal Data, including by providing an additional statement.
d. To delete the provided Personal Data
i. In certain specified cases, the Participant has the right to request that the Operator delete the Participant's Personal Data. Such cases include, for example, that the processed data are no longer necessary for the above-mentioned purposes. The Operator automatically deletes the Personal Data after the period of necessity has expired, but the Participant may contact it with his/her request at any time. The Participant's request is then subject to individual assessment (despite the Participant's right to deletion, the Administrator may have an obligation or legitimate interest to retain the Participant's Personal Data) and the Participant will be informed in detail about its processing.
e. To restrict the processing of Personal Data
i. The Operator processes the Personal Data of the Participant only to the extent strictly necessary. However, if the Participant feels that the Operator, for example, exceeds the above-specified purposes for which the Personal Data is processed, the Participant may submit a request for his/her Personal Data to be processed exclusively for the most necessary legal reasons or for the Personal Data to be blocked. The Participant's request is then subject to individual assessment and you will be informed in detail about its processing.
f. to file a complaint with the Office for Personal Data Protection.
i. The Participant may at any time contact the supervisory authority with a suggestion or complaint regarding the processing of Personal Data, namely the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, website https://www.uoou.cz/.

3. If the Participant believes that the Operator is processing his/her Personal Data in a manner that is contrary to the protection of his/her private and personal life or in violation of applicable legal regulations, in particular if the Personal Data are inaccurate with regard to the purpose of their processing, he/she may:
3a. ask the Operator for an explanation by e-mail to info@xavian.cz;
3b. raise an objection to the processing and request by e-mail sent to info@xavian.cz that the Operator ensure the elimination of the situation thus created (e.g. by blocking, correcting, supplementing or destroying Personal Data). The Operator shall immediately decide on the objection and inform the Participant. If the Operator does not comply with the objection, the Participant has the right to contact the Office for Personal Data Protection directly. This provision does not affect the Participant's right to contact the Office for Personal Data Protection directly with his/her complaint.

4. The Subscriber may exercise his/her above-mentioned rights in writing at the following address: Xavian Electronics s.r.o., Za Mlýnem 114, 253 01 Hostivice or electronically at info@xavian.cz

5. If the Subscriber requests information on the scope or method of processing his/her Personal Data, the Operator is obliged to provide this information to him/her immediately, but no later than one month after the Operator receives the request at the address Xavian Electronics s.r.o., Za Mlýnem 114, 253 01 Hostivice.

6. If the Subscriber exercises the right to access Personal Data in electronic form, the Operator shall also provide the requested information in electronic form, unless the Subscriber requests another method of providing information.

7. In the event of a repeated and unjustified request for a physical copy of the processed Personal Data, the Operator is entitled to charge a reasonable fee for the administrative costs associated with this.

8. Personal data is automatically evaluated and may be used for profiling or automated decision-making in the area of ​​the administrator's marketing activities. The operator uses the following methods:
8a. analysis of your activities on the administrator's website.

9. As a result of these activities of the operator, the behavior of the participant on the website will be mapped and evaluated, which represents a certain interference with the right to privacy. At the same time, however, this evaluation contributes to the participant being sent only those advertising offers regarding the administrator's products and services that he/she might be interested in, given the results of the evaluation.

V. Cookies

The processing of personal data is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”)

We process anonymised data about your browsing of this website on the basis of applicable legislation in the form of so-called cookies.

What are cookies
Cookies are small text files stored on your computer. They are stored by the internet browser at the request of the individual websites you are viewing. Websites can request the content of the file again. They use it to recognise which pages you have previously visited, whether you have something in your shopping cart on e-shops, for example, or whether you are logged in. Cookies are necessary for the proper functioning of most larger websites on the internet.

What types of files do we use
We can view the cookies on our website by their validity period or by their purpose.

Validity:
short-term cookies - valid for the duration of your visit and expire a few minutes after you leave the hifi-voice.com website; they help the basic functions of the website.
long-term cookies - valid for several days to months; they facilitate the display of our advertisements within third-party advertising systems, or are used for anonymized collection of statistical data that helps us improve the structure and functionality of the website.

Purpose:
key (functional) cookies - without them, the website will not function properly, for example, some links may not work properly or some content may be hidden
analytical - allow you to monitor website traffic and the use of various functions
tracking and remarketing - help us optimize advertising campaigns and reach readers in advertising spaces on other websites or social networks
conversion - serve to evaluate how advertising works and the different ways users reach hifi-voice.com.

Disabling cookie storage
Common internet browsers allow you to disable cookies in their settings. Look in the help for your browser and follow the instructions provided therein. Please note that with cookies disabled, browsing comfort may be significantly reduced.

VI. Final provisions

1. All legal relationships arising in connection with the processing of Personal Data are governed by the law of the Czech Republic, regardless of where they were accessed from. The Czech courts are competent to resolve any disputes arising in connection with the protection of privacy between the Subscriber and the Operator.

2. Subscribers who provide their Personal Data via the registration form for the purpose of concluding a contract with the Operator or provide consent to the processing of Personal Data do so voluntarily, on their own behalf, and the Operator does not regulate their activities in any way.

3. The Operator may change or supplement the text of the Policy. The Operator shall inform Subscribers of any such change by e-mail at least 30 days before the changes come into effect.

4. These Policies come into effect on 25 May 2018.