PRIVACY POLICY

1. INTRODUCTORY PROVISIONS

1.1 The controller of personal data pursuant to Art. 4 para. 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27. April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as ,,GDPR“) is the intermediary, i.e. the aforementioned company Centrum Integrity s.r.o. (hereinafter referred to as ,,the administrator of“).

1.2 The contact details of the administrator are:

• Žitná 1667/41, 110 00 Nové Město , Prague 1
• Email: info@shop.massageerotic.cz
• phone: +420 723 323 278

1.3 The controller has not appointed a data protection officer.

1.4 The personal data processed are the name and surname, home address, identification number, tax identification number, e-mail address and telephone number (hereinafter collectively referred to as “personal data”).

1.5 The Customer is not obliged to provide personal data. The provision of personal data is, however, a necessary requirement for the conclusion and performance of the contract and without the provision of the client’s personal data, the contract cannot be concluded or performed by the controller.

THE LAWFULNESS OF THE PROCESSING OF PERSONAL DATA AND THE PURPOSE OF THE PROCESSING OF PERSONAL DATA

1.6 The processing of the Client’s personal data is necessary for (i) the execution of a contract between the Client and the Administrator or for the performance of measures by the Administrator prior to the conclusion of such contract within the meaning of Art. 6 para. 1 lit. b) GDPR, for (ii) compliance with the legal obligations to which the controller is subject within the meaning of Art. 6 para. 1 lit. c) GDPR, and in particular the fulfilment of obligations imposed on the administrator by generally binding legal regulations (e.g. Act No. 235/2004 Coll., on value added tax, as amended, Act No. 586/1992 Coll., on income taxes, as amended, Act No. 563/1991 Coll., on accounting, as amended).

STORAGE PERIOD OF PERSONAL DATA

1.7 The Client’s personal data will be processed for the duration of the contractual relationship between the Controller and the Client and for the time necessary to assert a claim arising from this contractual relationship, and for the time necessary for the purposes of their retention pursuant to the relevant generally binding legal regulations, but no longer than the time required by generally binding legal regulations.

OTHER RECIPIENTS OF PERSONAL DATA

1.8 The other recipients of the Customer’s personal data are persons involved in the delivery of goods or the execution of payments under the contract and persons providing technical services related to the operation of the e-shop (PPL CZ s.r.o.) for the Administrator; for the purpose of fulfilling obligations arising from legal regulations, other recipients of personal data may be financial administration authorities or other competent authorities in cases provided for by generally binding legal regulations.

1.9 The Controller does not intend to transfer the Client’s personal data to a third country or an international organisation.

THE RIGHTS OF THE CIRCUMVENTOR AS A DATA SUBJECT

1.10 The Customer has the right to request access to his/her personal data from the controller (Article 15 GDPR), the right to rectification (Article 16 GDPR) or deletion of his/her personal data (Article 17 GDPR), or restriction of processing (Article 18 GDPR), the right to object to the processing of his/her personal data (Article 21 GDPR), the right to portability of his/her personal data (Article 20 GDPR), as well as the right to lodge a complaint with the supervisory authority – the Office for Personal Data Protection.

SECURITY OF PERSONAL DATA

1.11 The Controller declares that it has taken all appropriate technical and organisational measures to secure the Client’s personal data and that only persons authorised by it have access to the personal data.

OTHER PROVISIONS

1.12 By submitting an order from the web interface www.massagevouchers.cz, the customer confirms that he/she is aware of the terms and conditions of the protection of personal data and that he/she accepts them in their entirety.

1.13 The Administrator is entitled to change these terms and conditions. It will publish the new version of the Privacy Policy on its website.

CONSENT TO THE PROCESSING OF PERSONAL DATA FOR DIRECT MARKETING PURPOSES PURSUANT TO ART. 6 ODST. 1 LETTER. A) GDPR

1.14 Personal data for the purpose of direct marketing means the email address of the Customer. Unless otherwise specified below, these terms and conditions apply mutatis mutandis to the processing of this personal data.

1.15 The Customer agrees to the sending of information related to the goods, services or company of the Administrator (Seller) to the Customer’s electronic address and further agrees to the sending of commercial communications by the Agent to the Customer’s electronic address by ticking the consent box via the web interface

www.massagevouchers.cz

1.16 The Controller shall retain the Customer’s electronic address until the Customer’s consent to the processing of this personal data for marketing purposes is withdrawn.

1.17 In addition to the rights specified in par. 1.10 of these terms and conditions, and the right to withdraw consent to the processing of personal data for direct marketing purposes in writing to the contact address or email of the controller specified above.

1.18 By checking the above consent, the client confirms that he/she is aware of the terms and conditions of the personal data protection and that he/she accepts them to this extent.

In Prague on 1. 2. 2024

DAMI INVESTMENTS s.r.o.