Privacy Policy

Applies to the Bendox Bookshop online store at www.bendox.cz operated by BENDOX s.r.o. registered in the commercial register under registration number 48116441 with registered office at Mánesova 1373/51, Prague 2.

1. Content and purpose of the document

  • This document contains information regarding the protection of personal data provided by visitors to our website, our clients and those interested in our services and products.

  • The purpose of this document is to familiarize you (data subjects) with your rights and to provide understandable information about how personal data will be handled.

  • We value your trust with which you provide us with your personal data, which is why we process personal data not only in accordance with Act No. 101/2000 Coll., on the protection of personal data, but we adapt the handling of personal data to Regulation (EU) 2016/679, i.e. the general regulation on the protection of personal data, which is commonly known by the abbreviation GDPR.

2. How to contact the data controller

  • The data controller is the company BENDOX s.r.o., which you can contact directly at the Bendox Bookshop (Centre of Contemporary Art DOX, Poupětova 1, Prague 7), or at the correspondence address of the establishment (Centre of Contemporary Art DOX, Osadní 34, Prague 7) or at the electronic address hello @bendox.cz.

3. What personal data we process and how we obtain it

  • We process data that you provide to us yourself. In specific cases, this may in particular be the provision of data by e-mail or by filling in one of the forms on the website, entering data into an established user account on our website, providing data for the conclusion of purchase contracts in our online store
    and related documents and in connection with the implementation of contracts (i.e. in connection with the delivery of goods, provision of services).

  • If we need your consent to process some personal data for specific processing purposes, then we only process such data for that purpose with your consent.

  • You generally provide us with data voluntarily, only in some cases we would not be able to deliver the ordered goods to you without providing the data (e.g. if we are to send it to a specific address and you did not specify it here). We always warn you about this in advance. You must provide us with data only in cases where the law directly requires it.

  • ​We only process common personal data: Name, surname, address, telephone number, e-mail address, IP address, information for cookie files, information about ordered goods and order progress.

  • We do not process special category personal data (sensitive personal data).

4. For what purposes do we process personal data, for how long and what authorizes us to do so?

4.1. Processing of personal data for the purpose of concluding a contract and fulfilling contractual obligations

  • In order to be able to enter into a contract with you and deliver the goods/products you have ordered and to conduct related communication with you, we process the following common personal data: name, surname, address, telephone number, e-mail address.

  • The legal title (authorization) for the processing of this data is the direct fulfillment of contractual obligations from the contract concluded between us. Delivery of goods is primarily such an obligation. At the same time, it does not necessarily have to be a contract concluded in classic printed form, signed by hand - in our case, it is primarily a contract concluded by filling in and sending an order form on the website and our confirmation of such an order (see our terms and conditions).

  • For this purpose, we process personal data for the duration of the contractual relationship between us. After the end of the contractual relationship, some data are kept for the purposes of fulfilling legal obligations or for the purposes of legitimate interest,
    as you will read in the following sections of this document.

4.2. Processing of personal data to fulfill obligations from accounting, tax and other legal regulations

  • In order to meet the obligations arising from applicable legal regulations, especially in the area of ​​accounting, tax law and archiving, we only process data required by law.

  • The period during which the data is processed is determined directly by the relevant legal regulations, which impose the obligation to process them on us.

4.3. Processing of personal data for the purposes of our legitimate interests or those of a third party

  • Legitimate interest can cover a wide range of situations. Therefore, we inform you about the legitimate interests for which we process personal data.

  • The legitimate interest is the protection and proof of our rights and legal claims, especially from concluded contracts or caused damage. For these purposes, we process personal data for a period of 4 years after the termination of contractual cooperation or our last contact, if no contract was concluded. This deadline is set due to the statute of limitations for claims, taking into account the fact that we may not learn about a possible claim asserted in court at the moment of its assertion by the other party. Data from contracts and our mutual communication are kept for these purposes.​

4.4. Processing of personal data based on your consent

  • If you give us your consent, we will process your personal data to send you news or offer our products. We will need your consent for this processing if you are no longer our customer. Before you give us your consent, we will inform you about which data and to which specific processing purpose the consent will apply. You can withdraw your consent at any time. However, if we also process some of your personal data on the basis of another legal title (see paragraphs 4.1. to 4.3. above), we will process personal data for these purposes even after withdrawing your consent, since consent is not necessary for such specific purposes.

5. Disclosure of personal data to other persons

  • Other persons who are in the position of processors help us to ensure some of our contractual or legal obligations. In particular, these are cooperating accountants, law firm(s), providers of data storage and software applications. We have concluded written contracts with processors in which the fulfillment of obligations is agreed upon
    in the field of personal data protection to keep your data safe.

  • Personal data will also be made available to the relevant administrative authorities, if the law imposes such an obligation on us (i.e. especially in the case of an inspection, during which the given authority is entitled to require the submission of personal data).

6. Information about your other rights in the area of ​​personal data protection

6.1. Right of access to personal data

  • This is the right to confirm whether we are processing your personal data and, if so, to access this data and information about its processing.

6.2. The right to correct personal data

  • This is the right for us to correct inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to supplement incomplete personal data, including by providing an additional statement (in which you provide complete data).​

6.3. The right to erasure of personal data (the right to "be forgotten")

  • In the cases established by law or the GDPR, you have the right to request that we delete your personal data without undue delay (in the GDPR, the reasons are listed in Article 17, including the exceptions when the deletion will not be carried out).

6.4. Right to restriction of processing

  • In the cases specified in Art. 18 GDPR, you have the right to request that we limit the processing of your personal data.

6.5. Right to data portability

  • Under the conditions set out in Art. 20 GDPR, you have the right to obtain your personal data and transfer it to another controller. If technically feasible, you have the right to request direct transfer to another controller.

6.6. The right to object

  • In cases where we process personal data for the purposes of legitimate interests, you have the right to object to such processing and then we will no longer process the data unless our legitimate interest outweighs your interests or rights and freedoms.

6.7. The right to lodge a complaint with the supervisory authority

  • If you believe that your rights in the area of ​​personal data protection are being violated, you have the right to file a complaint with the Office for Personal Data Protection. More detailed information about the office and personal data protection can be found directly on the website of the office www.uoou.cz.

7. Other important information for exercising your rights

  • If you have any further questions about the processing of your personal data by us, you can contact us at the administrator's contact email above. By sending a message to this email or sending a written request to our address listed in the opening part of this document, you can also directly exercise your rights, which we write about in Article 6.

  • We would like to point out that for the purpose of verifying that the request is indeed made directly by you, we may then contact you and verify the identity and the request in an appropriate manner. The same applies to any telephone and similar communication.

The wording of this document is effective from March 1, 2022.