I. Basic provision

1. You hereby grant consent to the company: Luděk Mikeska, IN: 19063806, VATIN: 8504295470, registered office: Kunčice pod Ondřejníkem 0113, 739 13 Kunčice pod Ondřejníkem(hereinafter: "administrator"),for processing personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and Council on the protection of physical persons with regard to the processing of personal data and the free movement of such data(hereinafter: "GDPR Regulation")to process the following personal data.

II. Category and type of processed data

2. First and last name, email address, company name, postal address, telephone number are possible to be processed on the basis of this Terms, and necessary to process for the necessary fulfillment of the contract.

III. Legal reason and purpose of personal data processing

3. The legal reason and purpose of personal data processing is:

   a) Processing necessary for the fulfillment of the contract to which the data subject is a contracting party pursuant to Article 6, para. 1 section b) of GDPR Regulation;

   b) Processing necessary for the fulfillment of a legal obligation that applies to  the administrator pursuant to Article 6, para. 1 section c) of GDPR Regulation;

   c) The data subject has given consent to the processing of his personal data for one or more  specific purposes pursuant to Article 6 para. 1 section a) of GDPR Regulation;

   d) Processing necessary for the purposes of the legitimate interests of the relevant controller or a third party,  for example, the provision of marketing in the form of a newsletter or commercial communications pursuant to  Article 6, para. 1 section f) of GDPR Regulation, and pursuant to Article 7 para. 2 of Act No. 480/2004  Coll.

3.1 The purpose of personal data processing is:

   a) Fulfillment of the order resulting from the contractual relationship between you and the administrator  pursuant to Act No. 89/2012 Coll., or pursuant to another contractual relationship;

   b) Saving your shopping preferences and subsequent adaptation of the online offer  administrator's website;

   c) Launching marketing and remarketing campaigns on advertising platforms  Google, Seznam.cz, Microsoft, Facebook, but also with RTB systems Adform, Criteo,  Pubmatic and others using DSP (Demand Side  Platforms) and SSP (Supply Side Platforms);

   d) Sending commercial messages (newsletters, push notifications and others) within  marketing and remarketing campaigns using own funds or  third-party resources (platform for sending e-mails, software for notifying users).

3.2 The administrator makes automated individual decisions pursuant to Article 22 of GDPR Regulation. You give your explicit consent to this processing. Consent can be withdrawn at any time, for example by sending an email or a letter to the company's contact address: info@mikeska.tools.

IV. Data retention period

4. The retention period of your personal data depends on the purpose for which these personal data will be used, namely:

   a) For the purpose of fulfilling the contractual relationship between the subject and the Administrator: for the period of provision  fulfillment

   b) For marketing purposes: 8 years

   c) For performance records: 15 years

4.1 After the period defined for the retention of your personal data, these personal data are deleted by the administrator.

V. Processing of personal data

5. Personal data of the subject may be processed by the following processors:

   a) Software solution providers listed in Article III, para. 3.1, sections a), b), c) and d) of this Terms;

   b) Provider of software solutions, applications, services and other processors that do not have to be currently used by the administrator;

   c) Company Luděk Mikeska

5.1 The administrator and processor shall take measures to ensure that any natural person authorized by the administrator or processor with access to personal data, processes this personal data only when instructed by the administrator, if their processing is not already required by the European Union’s or a member state’s law.

VI. Recipients of the administrator's personal data

6. Recipients of personal data are companies or persons who:

   a) Ensure the implementation of the contract between the administrator and the subject concerned (e.g. delivery  companies, payment processing, premium services, etc.);

   b) Provide marketing services, see Article III. para. 3.1, sections a), b), c) and d) of  this Terms;

   c) Ensure the operation of the website www.mikeska.tools (e.g. partner, marketplace entity, external suppliers, etc.);

   d) Ensure the correct agenda of the company Luděk Mikeska, operating the Internet  website www.mikeska.tools, pursuant to the Act on (e.g. legal advice, accounting  etc.).

6.1 The administrator intends to use services that are not part of the EU and thus intends to transfer personal data to third world countries. Recipients of personal data in third world countries are providers of the platforms listed in Article III, para. 3.1, sections a), b), c) and d) of this Terms.

VII. Your rights

7. Pursuant to the provisions of the GDPR Regulation, you have the right to:

   a) Access personal data pursuant to Article 15 of the GDPR Regulation and Article 22  and Article 46 of the GDPR Regulation;

   b) Immediate correction of personal data pursuant to Article 16 of the GDPR Regulation;

   c) Personal data erasure ("the right to be forgotten") pursuant to Article 17 of the GDPR Regulation;

   d) Limit the processing of personal data pursuant to Article 18 of the GDPR Regulation;

   e) Portability of personal data pursuant to Article 20 of the GDPR Regulation;

   f) Object to the processing of personal data concerning you, pursuant to  Art. 6 para. 1 section e) or f), including profiling based on these provisions, pursuant  to Article 20 of the GDPR Regulation;

   g) Revoke the granted consent to the processing of personal data;

   h) Complain to the supervising authority.

7.1 The administrator does not process personal data further, unless he proves serious legitimate reasons for processing that overrides the interests or rights and freedoms of the data subject, or for the purpose of exercise or defense of legal claims.

7.2 Only you or your authorized representative can obtain information about your personal data. If the administrator is not sure of your identity, they may ask you for additional information to verify your identity.

7.3 The administrator shall notify individual recipients to whom personal data has been made available, of any corrections or deletion of personal data or restriction of processing carried out in accordance with Article 16, Article 17 para. 1, and Article 18 of the GDPR Regulation, except where this proves to be impossible or that it requires disproportionate effort. The administrator informs the data subject of these recipients if the subject data requires so.

VIII. Personal data security

8. Taking into account the state of the technology, costs of implementation, nature, scope, context and purposes of the processing, and also variously probable and variously serious risks for the rights and freedoms of natural persons, which the processing entails, appropriate technical and organizational measures will be introduced by the administrator both at the time of determining the means for processing and at the time the processing itself, such as pseudonymization, which purpose is to implement data protection principles, such as data minimization, in an effective manner, and to incorporate the necessary guarantees into the processing in order to meet the requirements of this regulation and to protect the rights of subjects’ data.

8.1 The administrator shall implement appropriate technical and organizational measures to ensure that by default only personal data that are necessary for each specific purpose of the given processing are processed.

This obligation refers to the amount of personal data collected, the scope of their processing, the length of their storage and their availability. In particular, these measures will ensure that personal data are not typically made available to an unlimited number of natural persons without human intervention.

This consent to data processing takes effect on 09. 08. 2022