Privacy Policy
The company Jiří Semota, which operates a web hosting portal available at www.drivehosting.net, ID number: 72267208, Provaznická 480/1, Cheb 35002 with registered office: Kostelní 505/2, 35002 Cheb, registered with the Trade Office in Cheb, for the sale of goods via the Internet gallery located at https://www.drivehosting.net. The administrator of personal data is the company Jiří Semota, ID number: 72267208, Provaznická 480/1, Cheb 35002 with registered office: Kostelní 505/2, 35002 Cheb, registered with the Trade Office in Cheb, (hereinafter referred to as "administrator" or "we"). For better clarity and orientation, terms that are frequently repeated in these policies are listed below.
Web hosting portal
A web hosting portal operated by the administrator, available at https://www.drivehosting.net.
GDPR
Regulation (EU) 2016/679 of the European Parliament and of the Council;
Business communication
As a rule, an e-mail message or SMS sent for the purpose of promoting similar products and services,
Order
Completed transaction by the customer with the intention of entering into a purchase contract for the goods, by pressing the appropriate "ORDER" button
Order form
Form intended for filling in the personal data of the buyer, including a list of selected goods, which is used to conclude a purchase contract
Personal data
Any information about the user from which the user can be directly or indirectly identified;
Data subject
The natural person to whom the Personal Data relates will most often be a customer or a potential customer, a user, also referred to as "you";
Processor
Performs Personal Data Processing activities based on a contract or other authorization for the administrator;
Processing of personal data
Is any operation or set of operations with Personal Data or sets of Personal Data that is carried out with or without the aid of automated procedures, such as collection, recording, arrangement, structuring, storage, adaptation or alteration, retrieval, inspection, use, disclosure by transmission, dissemination or any other disclosure, collation or combination, restriction of erasure or destruction;
Special categories of personal data
Such personal data that indicate the racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health status or the sex life or sexual orientation of the natural person. Genetic and biometric data are also considered a special category of data if they are processed for the unique identification of a natural person;
I. Categories of personal data
We process the Personal Data of customers and determine the purposes and means of processing. We do not process special categories of personal data. Categories of personal data: name, surname, e-mail, mobile phone, invoicing data, bank connection, login to the user account, behavior in the user account, IP address, cookies. Voluntarily provided personal data. Users voluntarily provide personal data to the administrator through the web hosting portal, i.e., at the time of registration or by placing an Order on the web hosting portal, or in any other way (e.g. by e-mail, by phone), communicating with the support of the web hosting portal, or in another similar way. Publicly available personal data. The Administrator may process Personal Data from publicly available sources and combine them with Personal Data that are voluntarily provided. Website. We also process information about when you visit and browse our website. This information may include, for example, the IP address, date and time of access to our website, information about your internet browser, operating system or your language settings. We can also look into the history of your behavior on the website or on the web hosting portal, for example, which links on our website you visit and which goods and services are shown to you. However, information about your behavior on the website is anonymized for your maximum privacy. If you access our website from a mobile phone or similar device, or through an application, we may also process information about your mobile device (data about your mobile phone, any records of application failures, etc.). We may collect this data as part of a protocol or using cookies or other tracking technologies. Social networks. The manager has a Facebook profile. Any information, communication or material that is provided through a social media platform is also provided in accordance with the privacy policies of those platforms. The protection of personal data is handled separately within each of the mentioned platforms.
II. Processing purposes
All mentioned categories of personal data are processed by the administrator, as they are necessary to fulfill the purposes listed below:
A. Contract fulfillment and customer care
The legal reason for the processing of personal data is the fulfillment of the contract, or proper processing of the Order, including communication with customer support.
B. User Account
If you have created a user account, then we process your Personal Data that you provide us in your user profile. Thanks to this, we can, for example, easily inform you about when the Order will be delivered to you.
C. Newsletter (business communication)
Sending promotional e-mails or sms to registered users and/or customers to promote similar products and services. We may send commercial messages to the contacts of our users or customers, when, based on legitimate interest, we promote similar products and services through direct marketing, but only until the recipient expresses his disagreement. Apart from the case of legitimate interest, we can also send commercial communications to those who have given their consent to the processing of personal data for marketing and business purposes in advance. For mailing, we use a third party with whom we have a proper processing contract.
D. Marketing Contests
In the event of a win in a marketing competition, it may record the likeness of the winner (photo, video) in order to ensure transparency. We carry out this processing of personal data on the basis of our legitimate interest, which consists in increasing the credibility of marketing competitions in the eyes of other competitors and in increasing the attractiveness of these competitions. You can object to this processing.
E. Cookies
Cookies are small files that temporarily store information in your browser and are normally used to distinguish user behavior on the website, or they can be used to better target advertising (so-called marketing cookies). Some cookie processing may be considered Personal Data Processing. You can find more about the cookies we process here.
F. Payment cards:
We do not have data about your payment cards, only the secure payment gateway and the relevant banking institution have them.
G. Customer Satisfaction Rating
We determine your satisfaction with the purchase through an e-mail questionnaire as part of the evaluation services in which our E-shop is involved. This will be sent to you shortly after you purchase from us, unless you object to this. For sending questionnaires, evaluating your feedback and analyzing our market position, we use a Processor who operates the evaluation service; for these purposes, we may pass on information about the purchased goods and your e-mail address. This procedure is enabled on the basis of our legitimate interest in promoting similar products and services (according to Article 6(1)(f) of the Regulation).
III. Estimated processing time
We process your Personal Data to the extent necessary for the entire duration of the contract. For the purposes of registering and maintaining a user account, all categories of personal data may be processed for a maximum of 2 years from the last active viewing of the user account/ from the cancellation of the user account, if the Data Subject does not request the cancellation of the account earlier. Please note that we process a range of Personal Data for reasons for which we are legally required to do so. The exception is tax documents issued by the administrator. The administrator, in accordance with § 35 of Act No. 235/2004 Coll., Tax documents are kept for 10 years from the end of the tax period in which the transaction took place.
IV. Technical, security and organizational measures
Technical and safety measures. With regard to the probability of risks and with regard to the ratio between the price of possible measures as well as the technical possibility, we have introduced technical security and organizational measures - in all areas where Personal Data Processing takes place (especially website operation, web hosting portal operation, employee agenda, communication with customers). We meet the strict requirements of GDPR parties. We use a secure information system that provides Personal Data with security appropriate to the state of the art, costs, nature, scope and purposes of processing. Organizational measures. All employees who have access to Personal Data are bound by confidentiality and must respect the security principles. Access to all systems, including the information system, is personalized and covered by passwords that are created in different ways. The information system records logs so that we can control the access of individual employees to individual databases. Employees are regularly trained.
V. Transfer of personal data to third parties
The administrator only transfers personal data to the following entities: Processors. We only use verified Processors with whom we have a written contract and who provide us with at least the same guarantees as we provide you. These are only Processors who are from the EU or from countries that are safe according to the decision of the European Commission. All these partners are bound by confidentiality obligations and may not use the provided data for any purposes other than those for which the administrator has made it available to them. Our Processors are accounting firms, transporters, e-mailing services, developers or marketing specialists, software and cloud solutions providers We provide details of our Processors on request. Legal obligations. We may transfer personal data to third parties other than the Processor, if required by law or in response to legal requirements of public authorities or at the request of a court in legal disputes.
VI. Rights of data subjects
It is possible to ask us for access to Personal Data and request correction, amendment, erasure or restriction of Processing of Personal Data where it is inaccurate or has been processed in violation of applicable laws on the protection of personal data. The data subject has the right to the portability of personal data, the right to object to the processing of personal data, the right to withdraw consent to the processing of personal data and the right not to be subject to automated individual decision-making, including profiling (which the controller does not do). Your rights of parties Processing of personal data can be exercised by emailing info@drivehosting.net. We strive to be able to comply with your requests without delay. However, there may be circumstances in which we cannot provide access (for example, if the requested information threatens the privacy of others or other legitimate rights, or where the cost of providing access would be disproportionate to the risks to the privacy of the individual in the given case). We may take reasonable steps to verify the identity of the User before taking any action on the rights of the Data Subjects.
A. Right of Access to Personal Information
According to Article 15 of the GDPR, you will have the right of access to Personal Data, which includes the right to obtain from the controller:
• confirmation of whether it processes personal data,
• information on the purposes of processing, categories of personal data concerned, recipients to whom the Personal Data have been or will be made available, the planned time of processing, the existence of the right to request from the administrator the correction or deletion of Personal Data relating to the Data Subject or the restriction of their processing or to raise an objection to this processing , the right to file a complaint with the supervisory authority, about all available information about the source of Personal Data, if not obtained from the Data Subject, the fact that automated decision-making takes place, including profiling, about appropriate safeguards when transferring data outside the EU,
• if the rights and freedoms of other persons are not adversely affected, a copy of the Personal Data.
In the event of a repeated request, the administrator will be entitled to charge a reasonable fee for a copy of the Personal Data.
B. Right to Correct Inaccurate Data
According to Article 16 GDPR, you have the right to correct inaccurate Personal Data. You are also obliged to notify changes to your Personal Data (e.g. user profile registration). At the same time, you are obliged to cooperate if it is found that the Personal Data we process is not accurate. We will carry out the repair without unnecessary delay, but always taking into account the given technical possibilities.
C. Right to erasure
Pursuant to Article 17 of the GDPR, you have the right to the deletion of Personal Data concerning you, unless we demonstrate legitimate reasons for the Processing of this Personal Data. We have set up mechanisms to ensure the automatic anonymization or deletion of Personal Data in the event that they are no longer needed for the purpose for which they were processed.
D. Right to restriction of processing
According to Article 18 GDPR, you have the right to limit processing until the resolution of the complaint, if you deny the accuracy of the Personal Data, the reasons for their processing or if you file an objection against their processing.
E. Right to Notice of Correction, Erasure or Restriction of Processing
According to Article 19 of the GDPR, you have the right to be notified in the event of correction, deletion or limitation of Personal Data Processing. We will notify individual recipients if Personal Data is rectified or deleted, except where this proves impossible or requires a disproportionate effort.
F. Right to Portability of Personal Data
Pursuant to Article 20 of the GDPR, you have the right to the portability of data concerning you that you have provided to the administrator in a structured, commonly used and machine-readable format, and the right to request the transfer of this data to another administrator. If you provide Personal Data in connection with our contractual obligations or on the basis of consent and their processing is automated, you have the right to receive such data in a structured, commonly used and machine-readable format. If it is technically feasible, the data can also be transferred to the administrator designated by you, if the person acting on behalf of the relevant administrator is properly designated and it is possible to authorize him. If the exercise of this right could adversely affect the rights and freedoms of third parties, your request cannot be granted.
G. The right to object to the processing of personal data
Pursuant to Article 21 of the GDPR, you have the right to object to the processing of your personal data on grounds of legitimate interest. In the event that we do not prove that there is a serious legitimate reason for the processing that outweighs your interests or rights and freedoms, we will terminate the processing based on the objection without undue delay. If the objection is made in the case of processing related to direct marketing, then we will terminate the processing without undue delay.
H. The right to withdraw consent to the processing of personal data
Consent to the Processing of personal data for marketing and business purposes can be revoked at any time. It is necessary to make the appeal explicit, understandable and a certain manifestation of the will. The processing of data from cookies can be prevented by setting the web browser.
I. Automated individual decision-making including profiling
You have the right not to be the subject of any decision based solely on automated processing, including profiling, which would have legal effects for it or similarly significantly affect it. However, it states that we do not make automated decisions without the influence of human judgment with legal effects for Data Subjects.
VII. Conclusion
This policy may only be changed in writing. Users will be informed about this through the administrator's website. If you have any questions about our Privacy Policy, please feel free to contact us via email: info@drivehosting.net.
This Privacy Policy takes effect on September 1, 2022.
Czech Republic (CS)
Worldwide (English)