Consent to personal data processing (GDPR)

Consent to the Processing of Personal Data (GDPR)

Basic Provisions

You hereby grant consent to J.S.J. Autocentrum s.r.o., Company ID No.: 28939891, with its registered office at Na Harfe 935/5c, Prague 9, 19000 (hereinafter referred to as the “Controller”), to process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR Regulation”), as specified below.

Categories and Types of Personal Data Processed

The following personal data may be processed on the basis of consent and must be processed where necessary for the performance of a contract: first name and surname, email address, company name, postal address, and telephone number.

The legal grounds and purposes for processing personal data are as follows:

• Processing is necessary for the performance of a contract to which the data subject is a party, pursuant to Article 6(1)(b) of the GDPR Regulation;

• Processing is necessary for compliance with a legal obligation to which the Controller is subject, pursuant to Article 6(1)(c) of the GDPR Regulation;

• The data subject has given consent to the processing of their personal data for one or more specific purposes, pursuant to Article 6(1)(a) of the GDPR Regulation;

• Processing is necessary for the purposes of the legitimate interests pursued by the Controller or a third party, for example, the provision of marketing services through newsletters or commercial communications, pursuant to Article 6(1)(f) of the GDPR Regulation and Section 7(2) of Act No. 480/2004 Coll.

3.1 Purposes of Personal Data Processing

The purposes of personal data processing are as follows:

• Processing orders arising from the contractual relationship between the data subject and the Controller pursuant to Act No. 89/2012 Coll., or under another contractual relationship;

• Storing your purchasing preferences and subsequently tailoring offers on the Controller’s websites;

• Running marketing and remarketing campaigns on advertising platforms such as Google, Seznam.cz, Microsoft, and Facebook, as well as through RTB systems such as Adform, Criteo, PubMatic, and other systems that use advertising purchased through DSP (Demand-Side Platforms) and SSP (Supply-Side Platforms);

• Sending commercial communications, including newsletters, push notifications, and other messages, as part of marketing and remarketing campaigns, using the Controller’s own resources or third-party services, such as email distribution platforms and user notification software.

3.2 Automated Individual Decision-Making

The Controller carries out automated individual decision-making within the meaning of Article 22 of the GDPR Regulation. You expressly consent to this processing.

You may withdraw your consent at any time, for example, by sending an email or letter to the company’s contact details at info@almix.eu.

Retention Period for Your Personal Data

The retention period for your personal data depends on the purpose for which the data is used, as follows:

• For the performance of the contractual relationship between the data subject and the Controller: for the duration of the provision of the contractual performance;

• For marketing purposes: 8 years;

• For record-keeping purposes: 15 years.

4.1 Deletion of Personal Data

Once the specified retention period has expired, the Controller will delete your personal data.

Processing of Personal Data

The following processors may process the data subject’s personal data on behalf of the Controller:

• Providers of software solutions referred to in Article III, Section 3.1, points (a), (b), (c), and (d) of this Consent to the Processing of Personal Data;

• Providers of software solutions, applications, services, and other processors that the Controller may not currently use;

• J.S.J. Autocentrum s.r.o., Na Harfe 935/5c, Prague 9, 19000.

5.2 Measures to Protect Personal Data

The Controller and the processor shall take measures to ensure that any natural person acting under the authority of the Controller or the processor who has access to personal data processes such data only on the Controller’s instructions, unless required to do so by Union or Member State law.

Recipients of Personal Data

Recipients of personal data include companies or individuals that:

• Ensure the fulfilment of the contract between the Controller and the data subject, e.g. shipping companies, payment service providers, and providers of additional services;

• Provide marketing services as referred to in Article III, Section 3.1, points (a), (b), (c), and (d) of this Consent to the Processing of Personal Data;

• Ensure the operation of the website www.almix.eu, e.g. partners, marketplace operators, and external suppliers;

• Ensure the proper administration of J.S.J. Autocentrum s.r.o., Company ID No.: 28939891, with its registered office at Na Harfe 935/5c, Prague 9, 19000, which operates the website www.almix.eu, in accordance with applicable legal requirements, e.g. legal advisers and accounting service providers.