GDPR

Innentreppen s.r.o., the operator of the e-shops www.innen-treppe.fr, declares that all personal data is treated as strictly confidential and protected in accordance with applicable data protection legislation. As of May 25, 2018, Act No. 101/2000 Coll., on the Protection of Personal Data, has been replaced by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation – GDPR) concerning the protection of natural persons with regard to the processing of personal data.

DATA WE PROCESS

In order to process your order through our e-shops, we require the following personal data in accordance with Article 6(1)(b) of the GDPR:

• First name and surname
• E-mail address
• Telephone number
• Billing address
• Delivery address (if different from the billing address)

When using the “Contact Form”, you are required to provide your e-mail address and telephone number so that we can respond to your inquiry.

HOW WE USE YOUR DATA

The information provided is used for the execution of commercial transactions on our websites, including order processing, contract conclusion, product delivery, and customer communication.

Your personal data may also be processed by third parties (e.g., shipping companies and logistics providers); however, Innentreppen s.r.o. always remains the data controller.

ACCESS TO AND MODIFICATION OF PERSONAL DATA

After placing an order, you may update your personal data either by telephone at +420 774 660 532 or by e-mail at info@innen-treppe.fr.

You have the right to request access to your personal data, the right to rectification, erasure, or restriction of processing, as well as the right to object to processing and the right to data portability.

DATA RETENTION PERIOD

Your personal data will be stored and processed for the period required by applicable legal regulations (particularly civil and tax legislation) and for the time necessary to fulfill the purpose for which the data was collected in connection with your order.

All personal data processed on the basis of your consent is retained for a period of 10 years. After this period, the data is either deleted from our database or, with your renewed consent, retained for an additional 10 years.

You may withdraw your consent to the processing of personal data for a specific purpose at any time. Such withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal of consent.

SUMMARY OF DATA SUBJECT RIGHTS

As a data subject, you have the right to:

• Request access to the personal data we process under the conditions set out in Article 15 of the GDPR.
• Request correction of inaccurate personal data under the conditions set out in Article 16 of the GDPR.
• Request erasure of personal data under the conditions set out in Article 17 of the GDPR.
• Request restriction of processing under the conditions set out in Article 18 of the GDPR.
• Receive the personal data we process in a structured, commonly used, and machine-readable format and transmit it to another controller under the conditions set out in Article 20 of the GDPR.
• Object to the processing of personal data under the conditions set out in Article 21 of the GDPR.
• Lodge a complaint with the relevant Data Protection Authority under the conditions set out in Article 77 of the GDPR.