Personal data protection rules for the purchase of goods via the e-shop of the Palacký University Press (Palacký University Olomouc), VAT ID: 61989592, with registered office at Křížkovského 511/8, 779 00 Olomouc, located online at www.vupshop.cz:
1.1. UP processes personal data of the customer in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - hereinafter referred to as the "Regulation"). The administrator of the personal data is Palacký University Olomouc.
1.2 UP processes personal data of the customer in the following scope: name and surname, delivery and billing address, e-mail, telephone number, identification number, tax identification number.
1.3 UP processes personal data on the basis of:
1.3.1. of Article 6(1)(b) of the Regulation, i.e. the processing of the customer's personal data is necessary for the performance of the contract to which the customer is a party, or for the implementation of measures taken before the conclusion of the contract at the customer's request, and for the proper dispatch and delivery of the order (transfer of personal data for the purpose of transport to carriers);
1.3.2. article 6(1)(c) of the Regulation, i.e. for the fulfilment of a legal obligation to which the controller is subject, e.g. in the context of a tax or accounting agenda, a complaints agenda, archiving (fulfilment of archiving obligations set out in the relevant legislation), interaction with public authorities (e.g. provision of mandatory information to public authorities);
1.3.3. article 6(1)(f) of the Regulation, i.e. for the purposes of the legitimate interests of the relevant controller or third party, and always only under the condition set out in the so-called1.3.1. of Article 6(1)(b) of the Regulation, i.e. the processing of the customer's personal data is necessary for the performance of the contract to which the customer is a party, or for the implementation of measures taken before the conclusion of the contract at the customer's request, and for the proper dispatch and delivery of the order (transfer of personal data for the purpose of transport to carriers); balance test, i.e. that the interests of the customer or fundamental rights and freedoms requiring the protection of personal data do not take precedence over these legitimate interests; personal data of the customer are processed by UP on the basis of this legal ground, e.g. For the purposes of marketing, promotion and advertising or the protection of UP's legal interests (e.g. cases where UP asserts claims against the customer or, conversely, cases where UP defends itself against claims asserted by the customer against UP, whether out of court, in court or otherwise); balance test, i.e. that the interests of the customer or fundamental rights and freedoms requiring the protection of personal data do not take precedence over these legitimate interests; personal data of the customer are processed by UP on the basis of this legal ground, e.g. For the purposes of marketing, promotion and advertising or the protection of UP's legal interests (e.g. cases where UP asserts claims against the customer or, conversely, cases where UP defends itself against claims asserted by the customer against UP, whether out of court, in court or otherwise);
1.3.4. article 6, paragraph 1, letter a) of the Regulation, i.e. on the basis of the customer's consent, e.g. for the purpose of marketing communication pursuant to section 7, paragraph 2 of Act No. 480/2004 Coll., on certain information society services and on amendments to certain acts (Act on certain information society services), as amended.
1.4 Customer's personal data will be collected and processed by authorized UP employees.
1.5 UP provides personal data to the following recipients:
1.5.1. carriers:
a) Czech Post, s.p., ID No.: 47114983, with registered office at Politických vězňů 909/4, 225 99 Prague 1,
b) Zásilkovna s.r.o., ID No.: 28408306, with registered office at Českomoravská 2408/1a, Libeň, 190 00 Prague 9,
for the purpose of delivering the goods to the customer.
1.5.2. to Servantes s.r.o., company ID: 09797319, with registered office at Neklanova 150/38, 128 00 Praha 21 - Vyšehrad, for the purpose of ensuring the protection of the e-book by social DRM.
1.6 The provision of personal data is voluntary; in the event that the customer refuses to provide the necessary data, UP will not be able to conclude the contract or properly perform under this contract. UP will store the customer's personal data for the duration of the purpose of processing the personal data.
1.7 UP informs that the position of Data Protection Officer is held by Mgr. Dominika Mot'ková, who can be contacted at Palacký University Olomouc, Křížkovského 511/8, 779 00 Olomouc or via e-mail dpo@upol.cz.
1.8 The customer (personal data subject) has:
1.8.1. pursuant to Article 13(2)(c) of the Regulation, the right to withdraw consent to the processing of personal data at any time if the personal data of the data subject are processed on the basis of consent given pursuant to Article 6(1)(a) of the Regulation. The withdrawal of consent shall not affect the lawfulness of the processing until the moment of withdrawal of consent.
1.8.2. pursuant to Article 15 of the Regulation, the right to obtain confirmation from UP as to whether or not personal data concerning him or her are being processed and, if they are, the right to obtain access to such personal data and to the related information as defined in Article 15(1)(a)-(h) of the Regulation;
1.8.3. under the conditions of Article 15 of the Regulation, the right to be provided, free of charge, with one copy of the personal data processed;
1.8.4. under Article 16 of the Regulation, the right to rectification of inaccurate personal data or, where applicable, the right to have incomplete personal data completed;
1.8.5. under Article 17 of the Regulation, the right to have personal data concerning him or her erased by UP without undue delay, under the conditions set out in Article 17 of the Regulation;
1.8.6. under the conditions set out in Article 18 of the Regulation, the right to request that UP restrict the processing of personal data;
1.8.7. under the conditions set out in Article 20 of the Regulation, the right to the portability of personal data;
1.8.8. under the conditions set out in Article 21 of the Regulation, the right to object to the processing of his/her personal data;
1.8.9. under Article 22 of the Regulation, the right not to be subject to any decision based solely on automated processing, including profiling, which has legal effects on the customer (data subject) or significantly affects him/her in a similar way, unless one of the exceptions provided for by law applies;
1.8.10. under the conditions of Article 34 of the Regulation, the right to be informed of the occurrence of a personal data breach where such personal data breach is likely to result in a high risk to the rights and freedoms of natural persons;
1.8.11. in accordance with Article 77 of the Regulation, the right to lodge a complaint with a supervisory authority, in particular in the Member State of his/her habitual residence, place of employment or place where the alleged breach occurred, if the customer (data subject) considers that the processing of personal data infringes the Regulation.