1. Please find below the name and contact details of the administrator: Miroslav Kárník, www.onlinetovarna.cz, e-mail: mirik@risingdecals.com.
2. Please also find below a list of the personal data that is processed:
   – Billing data, name, surname, date of birth, permanent address, correspondence address, bank account, telephone contact, e-mail
3. The processing of personal data is based on a valid legal ground, namely the performance of the contract concluded with the client and the issuing and recording of tax documents.
4. The personal data is collected directly from the client in connection with the performance of the contract.
   – To the person processing the accounts and to the associates who are bound by confidentiality and trained in the security of personal data processing.
   – To authorities to whom the obligation to provide personal data arises by law (e.g. Police of the Czech Republic, FÚ).
   – Personal data are not disclosed to any persons outside the European Union.
5. What is the deadline for the destruction of personal data?
   – Personal data are retained only for the duration of the processing purpose or the legal obligation to retain documents.
6. How are personal data protected?
   – To ensure the security and confidentiality of personal data, technical and organizational measures are employed, including measures to protect against unauthorized access to and misuse of data, to ensure the security of IT systems, and to recover data in the event of an incident. All measures are regularly evaluated and updated.
7. The photographs published on the website are used by the customer for the selection of the supplier. All photographs are displayed on the website without distinct personal data and with the consent of the customer.

Client Rights:

• The right to clear and comprehensible information about how the controller processes the client’s personal data.
• The right to have access to information on whether the controller processes the client’s personal data and, if so, which data is involved.
• The right to rectification of incorrect and incomplete personal data of the client.
• The right to erasure of personal data:
• If they are no longer needed for further processing.
• If the client has withdrawn consent to their processing.
• If it If the data has been unlawfully processed,
• If it must be erased in accordance with the law,
• If the processing is based on the legitimate interests of the controller, a third party or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority,
• If the data is provided by the client to the controller in a standard and machine-readable format.
• The client has the right to apply to the Data Protection Authority if they are dissatisfied with the processing of their personal data by the controller.