Processing of personal data

Our company needs the personal data that e-shop customers fill in to accept orders and ensure the delivery of the ordered goods or services. This is a legal basis for the performance of a contract in accordance with Article 6.1. b) of the GDPR and applies to the period of order fulfillment.

After delivery of the goods or services, we are obliged to retain this data on the basis of a legal obligation for the duration of the warranty period for the settlement of any complaints in accordance with Section 620 of Act No. 89/2012 Coll.

We are required by law to retain issued tax documents for 10 years in accordance with Act No. 235/2004 Coll., on value added tax, Sections 35 and 35a. After this period, they will be deleted.

We will use your email address to send you commercial communications relating to similar goods or services that you have purchased. You can unsubscribe from these communications at any time by clicking on the link provided in the email. This is based on legitimate interest, which is fully in accordance with Act No. 480/2004 Coll. and Article 6.1 f) of the GDPR.

You have the right to access, rectify, erase, transfer in a portable format, restrict, withdraw consent, object, and lodge a complaint with a supervisory authority.

Detailed information on the processing of personal data can be found at
https://www.acrasport.cz/zasady-zpracovani-osobnich-udaju

Based on EU Regulation 2016/679 (hereinafter referred to as GDPR), we provide you with information on the processing of customers’ personal data that occurs in connection with our business activities.

1. Contact details

The personal data controller is Acra s.r.o. , Brodská 161, 51301, Semily, ID No. 64254330, registered in the Commercial Register maintained by the Regional Court in Hradec Králové, Section C, File 8257

The contact details of the person responsible for personal data protection are: obchod@acra.cz, tel.: +420-481 622 000

2. Personal data processing table

Name of processing

Order processing, Invoicing, Sending commercial communications, Telephone communication for order processing and satisfaction verification,
Customer competitions and surveys, Heureka – Verified by customers, Discount coupon

Purpose of processing

Ensuring delivery of goods from orders and handling any complaints, Invoice records, Informing customers about news, Additional information for order processing and customer satisfaction verification, Market research, Customer satisfaction surveys, Sales support

Categories of personal data

Contact and billing information, Billing information, Email address, Phone number, According to the questionnaire, Questionnaire on Heureka, Email address

Legal basis

Performance of a contract, Legal obligation under the VAT Act, Legitimate interest, Legitimate interest, Consent, Legitimate interest, Consent

Retention period

Until the end of the complaint period, 10 years, Until an objection is filed – click on “Unsubscribe”, Until the end of the complaint period, Until consent is revoked, According to the terms and conditions of the Heureka portal, Until consent is revoked

Other recipients

Transport services – Geis, Toptrans, GLS, DHL, DPD – none, none, none, Heureka, none

3. Explanation of the table and processing

Legal titles – these are the legal grounds for processing and are defined in Articles 6 and 9 of the GDPR.

Storage period – means the period during which we are authorized or obliged to process and store your data.

Other recipients – here we list the other recipients to whom we transfer data. If “None” is listed, it means that we do not transfer data to anyone.

We only obtain data directly from customers; we have no other source of data.

We do not intend to transfer your personal data outside the EU or to any international organization.

In cases where processing is based on the legal basis of “Conclusion or performance of a contract,” we need your personal data to conclude the contract and subsequently perform it; without it, it is not possible to conclude the contract.

In cases where processing is based on the legal title “Legal obligation,” we need to process your personal data on the basis of legal requirements for the period specified by law, and during this period we may not restrict or delete this processing.

We will only process your personal data for the purposes listed in the table.

4. Description of the rights of data subjects

As a data subject (a natural person whose data is being processed), you have the following rights to your personal data:

Request an extract:

This is an extract of the data we hold about you, known as the right of access.
We will provide the extract in a format according to our capabilities. You do not have the right to request an extract in a format specified by you.
The only exception where we are not allowed to provide a statement is in cases involving documents whose disclosure would jeopardize the rights and freedoms of other persons. This includes the personal data of other persons, the protection of trade secrets, intellectual property, etc.

Request a correction

If you find that we hold inaccurate, outdated, or incomplete data about you, please request that it be corrected or supplemented.
This is an extract of the data we hold about you, known as the right of access.

Request deletion

We must delete data in cases where we have stored personal data beyond the specified storage period or do not have a valid legal title.
We are not allowed by law to delete data in cases where processing is carried out on the basis of contract performance or legal obligations.

Request restriction of processing

This applies to processing based on legitimate interest. Since this is direct marketing, processing will be terminated immediately without the need for restriction.

Object to processing

An objection may be lodged in cases where processing is carried out on the basis of legitimate interest.
Objections to the sending of commercial communications will always be accepted.

Withdraw consent to processing

This is possible in cases where processing is carried out on the basis of consent. If you have given your consent to processing and withdraw it, processing will be terminated.

Request a statement in a portable format

You can only request a statement in a portable format in cases of processing based on legal grounds – performance of a contract and consent.
You can only request a statement of the data you have provided to us and which we keep in electronic form, and you do not have the right to request the format. We will provide it to you in XLS format with named columns.

Object to automated decision-making

We do not perform any processing based on automated decision-making.

Lodge a complaint with the supervisory authority

If we do not respond to your request within one month, you can lodge a complaint with the Office for Personal Data Protection.

5. How to exercise your rights

If you wish to exercise any of these rights, you can do so by logging into the customer section of the website under My Data and My Orders.

Here you will find your personal data, including your order history. You can view, correct, and export it to a portable format. You can also submit other requests regarding your personal data here.

You will then be sent a notification of the outcome of your request and related materials.

Actions related to the exercise of data subjects’ rights are performed free of charge. We are entitled to charge a fee corresponding to administrative costs for requests for more than one copy.

However, if requests are found to be manifestly unfounded or excessive, in particular because they are repetitive, we may:

a) charge a reasonable fee taking into account the administrative costs
b) refuse to comply with the request.

If there are doubts about your identity, we are entitled to ask you to provide additional information to confirm your identity.