PRIVACY POLICY

Alchymist, s.r.o., operator of the e-shop on the website www.alchymist-shop.cz, ID No. (IČO): 25149148, with its registered office at Vlašská 24, 118 00 Prague 1, processes personal data provided by the Buyer for the purpose of performance and additional confirmation of the Terms and Conditions, for the purpose of processing the electronic order, executing delivery, settling payments, and necessary communication between the contracting parties for the period required under specific legal regulations.

Basic Provisions

1. The controller of personal data pursuant to Section 5, Letter o) of Act No. 18/2018 Coll., on Personal Data Protection, as amended (hereinafter referred to as the "Act"), is Alchymist, s.r.o., ID No. (IČO): 25149148, with its registered office at Vlašská 24, 118 00 Prague 1 (hereinafter referred to as the "Controller");

2. The contact details of the Controller are: email: info@alchymist-shop.cz, tel.: 257 286 011;

3. Personal data means any information identifying a natural or legal person.

Sources of Processed Personal Data

1. The Controller processes personal data provided by the Buyer with their consent and which the Controller obtained on the basis of the performance of the Purchase Contract and the processing of the electronic order in the online shop alchymist-shop.cz;

2. The Controller processes only the identification and contact details of the Buyer that are necessary for the performance of the Purchase Contract;

3. The Controller processes personal data for the purpose of delivery, settlement of payments, and necessary communication between the contracting parties for the period required under specific legal regulations. Personal data will not be made public and will not be transferred to other countries.

Purpose of Personal Data Processing

The Controller processes the Buyer's personal data for the following reasons:

1. For the purpose of registration on the website www.alchymist-shop.cz pursuant to Section 13, Paragraph 1, Letter a) of Act No. 18/2018 Coll., on Personal Data Protection;

2. For the purpose of processing the Buyer's electronic order (name, address, email, telephone number);

3. For the purpose of fulfilling the rights and obligations arising from the contractual relationship between the Buyer and the Controller;

4. The provision of personal data is a necessary requirement for the performance of the purchase contract. Without providing personal data, the contract cannot be concluded.

Retention Period of Personal Data

1. The Controller stores personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between the Buyer and the Controller and for a period of 3 years from the termination of the contractual relationship;

2. After the retention period of personal data expires, the Controller is obliged to erase the data.

Recipients and Processors of Personal Data

The third parties that receive the Buyer's personal data are the subcontractors of the Controller. The services of these subcontractors are unconditionally related to the successful performance of the purchase contract and the electronic order between the Controller and the Buyer.

The subcontractors of the Controller are:

• Webnode AG (e-shop platform);

• Česká pošta, s.p. (delivery service);

• Google Analytics (website analysis);

Rights of the Buyer

Under the conditions set forth in the Act, the Buyer has the right:

1. To access their personal data;

2. To rectify their personal data;

3. To erase their personal data;

4. To object to the processing;

5. To data portability;

6. To withdraw consent to the processing of personal data in writing or electronically at the email address: info@alchymist-shop.cz;

7. To file a complaint with the Office for Personal Data Protection if they believe that their right to personal data protection has been violated.

Security of Personal Data

1. The Controller declares that they have taken all appropriate technical and organizational measures necessary to secure the Buyer's personal data;

2. The Controller has adopted technical measures to secure data storage locations for personal data, in particular securing computer access with a password, using an antivirus program, and performing regular computer maintenance.

Final Provisions

1. By sending an electronic order on the website www.alchymist-shop.cz, the Buyer confirms that they have been acquainted with the terms of personal data protection and that they accept them in their entirety;

2. The Buyer agrees to these rules by checking the box in the order form;

3. The Controller is entitled to change this Policy at any time. The Controller is obliged to publish the new version of the Policy on its website.

This Policy comes into effect on December 1, 2020.