I am Elena Ivanova, with registered office at Uralská 689/7, 160 00, Prague 6, ID: 03126838, registered in the Company Register.
Our contact details are:
support@elenka.studio
+420 255 712 672
We process some personal data for the purpose of providing our services, selling goods and operating the website www.elenka.studio.
The processing of personal data is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).
I. Personal Data Processing
- Processing of personal data when using the contact form
If you request our products or services, we will process the personal data you share with us, mainly through the inquiry form. These include name, surname, email, phone number, your requests concerning our products and services, or other data you enter on the request or provide us during our further arrangements.
For what reason?
We use the data to contact you to arrange further steps regarding goods and services.
On what legal basis?
This is processing based on Article 6(1)(b) GDPR – contract negotiation and contract performance.
How long will we process personal data?
If we do not agree on further cooperation, we will process your data for a maximum of 6 months from our last communication.
- Processing of personal data in case of purchase
If you purchase goods or services from us, we will work with the data you provide us with in the course of the purchase. These are mainly billing data: name, surname, email, phone number, address and details about your purchase.
For what reason?
We need to process personal data to fulfil our contract – i.e. to provide you with the goods and services you have purchased. We will also communicate with you via your contact details about the status of your order, complaints or questions.
We will also process personal data to fulfil our statutory obligations (mainly for accounting and tax purposes, or to handle your complaints, etc.).
On what legal basis do we process personal data?
This is processing based on Article 6(1)(b) GDPR – performance of a contract and Article 6(1)(c) GDPR –performance of our obligations.
How long will we process personal data?
During the period of performance of our service and thereafter for 10 years from the last time such service or goods were provided – this period is based on tax and accounting legislation.
- Review verification
If you have purchased anything from us and left a review, we can verify in the system (if possible) that you actually are our customer and the review refers to the actual products and services purchased.
For what reason?
Consumer protection regulations (in particular, the Consumer Protection Act) require that if we communicate a review as authentic (from our customer), we must verify such review in a reasonable manner.
On what legal basis do we process personal data?
This is processing based on Article 6(1)(c) GDPR –performance of our obligations.
How long will we process personal data?
As long as we have the review in our marketing materials/on our website.
- Newsletters (commercial communications)
If you sign up for our newsletter or you are an active purchasing customer and did not opt out when you ordered, we will use your email address to send you our newsletter.
On what legal basis?
In the case of newsletter subscriptions, this is processing based on your consent; i.e., based on Article 6(1)(a) GDPR.
If you are our customer, the processing is allowed under Section 7(3) of Act No. 480/2004 Coll., on certain services of information company, unless you have prohibited us from doing so when ordering.
Consent is voluntary and revocable at any time.
How long will we process personal data?
Two years after the consent is granted or after the last purchase. You can unsubscribe at any time via email or by contacting us at the addresses above. We will take care of it.
- Analytics
We also use data about your purchase (what you bought, when, under what conditions) for analytical purposes. On the basis of the data, we know what goods need to be replenished, where to improve our services, where to “cut back”, what to expect economically in future periods so that we can optimise our products accordingly.
For what reason?
We need data to properly manage and develop our business.
On what legal basis?
The processing complies with Article 6(1)(c) GDPR – processing on the basis of so-called legitimate interest.
How long will we process personal data?
For a period of 6 months, after which we will anonymize or will not process the data for these purposes.
You can lodge an objection to such processing. Please contact us at the above mentioned addresses.
- Analytics and advertisement targeting using the contact data
If you have granted us consent on our acknowledgement bar, we will also work with your phone and email for analytics, tracking and advertisement targeting purposes, including the use (and linking tools) of the Google company.
On what legal basis?
This is processing based on your consent, i.e. in compliance with Article 6(1)(a) GDPR. Consent is voluntary and revocable at any time.
How long will we process personal data?
For a maximum of 1 year unless you extend or withdraw your consent.
- Sending your CV
If you are responding to our job position offer and sending us a CV for the selection procedure, we will process the personal data from this CV and your contact details for the purposes of the selection procedure.
On what legal basis?
This is processing based on Article 6(1)(b) GDPR – contract and cooperation negotiations.
How long will we process personal data?
Until the completion of the selection procedure. We will only continue to process your personal data after the completion of the selection procedure if we agree with you on further cooperation or if you grant us your consent to do so.
II. Who can access the data?
Your data remains with us. Nevertheless, we work with certain companies and freelancers who gain access to the data because they help us run our company. These include:
- companies involved in the processing of payments (GOPAY s.r.o., ……………)
- companies involved in the shipping of goods (Zásilkovna)
- e-mail service providers (Mailchimp)
- analytical tool provider (Google Analytics)
- hosting provider (Contabo)
III. User account
If you have registered for our user account, we will process your personal data on the basis of your consent, i.e. pursuant to Article 6(1)(a). Consent is entirely up to you, it is voluntary.
To set up your account, we process the personal data you fill in the registration form – name, e-mail address.
As part of the account management, we store the data about your orders and services provided by us and the personal data you fill in to your profile, i.e. name, surname and addresses.
We will use your personal data to maintain your account and provide services to you for as long as you use the account. We will deactivate your account and delete your data if you do not use your account for more than 5 years since your last purchase. You can also deactivate your account (i.e. withdraw your consent to the processing of personal data) at any time. In that case, your personal data will be deleted.
IV. Your rights with regard to the processing of personal data
If you have any questions about your personal data, please contact us at the above addresses.
Our company does not have an appointed data protection officer.
There is no profiling or automated decision-making in our company.
We process personal data in the territory of the EU and/or in US facilities if their providers have joined the Data Privacy Framework.
GDPR gives you, among other rights, the right to contact us and request information about what personal data we process about you, to request access to this data and have it updated or corrected, or to request a restriction on processing, to request a copy of the personal data we process, to request that we delete your personal data in certain situations, and in certain cases you have the right to data portability. Granted consent may be withdrawn at any time, and you have the right to object to the processing based on legitimate interests. If you believe that we are not handling your data correctly, you have the right to file a complaint with the Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Praha 7, Phone: 234 665 111, ID DS: qkbaa2n, posta@uoou.gov.cz, uoou.gov.cz), or pursue your claims in front of law court.