Principles of Personal Data Protection

1. Definitions
   1. The terms “Operator”, “User”, “Agreement” and “User Account” have the same meanings as defined in the Terms & Conditions.
   2. The Operator and the User concluded the Agreement, and the User consented to the Terms and Conditions published at Terms & Conditions when they established their User Account.
2. Personal Data Administrator
   1. The personal data Administrator, Numbro s.r.o., with its registered office at Jičínská 226/17, Prague 3, 130 00, entered in the Commercial Register at the Municipal Court in Prague, section C, inset 315766, Company ID No.: 08257124, Tax ID No.: CZ08257124 (the “Administrator”), declares that all the personal data processed by the Administrator are strictly confidential. The Administrator will handle them in accordance with national legislation and European Union regulations governing personal data protection.
   2. The Administrator collects, retains and uses your personal data in accordance with Section 6 of Act No. 101/2000, on the protection of personal data and on amendments to some Acts, as amended (the “Personal Data Protection Act”), and Art. 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”). The individual purposes for processing personal data by the Administrator are defined below.
   3. The Administrator also collects these personal data through its website at numbro.com (the “Website”).
   4. The Administrator has issued these Principles to ensure that you are sufficiently informed about which personal data the Administrator processes about you, for what purpose, for how long, who will have access to your personal data, and your rights. These Principles apply to all the personal data collected by the Administrator, even if already collected, for the purpose of the performance of a contractual relationship, a legal obligation, a legitimate interest, or through the granting of consent.
3. Processed data
   1. We will process your personal data for the period of time necessary to secure all the rights and obligations arising from the mutual legal action, and for at least the period the order is handled, the performance of the transaction, the service, etc., and also for the period of time for which the Administrator is obliged to retain the personal data in accordance with generally binding legislation, or for the period of time for which you have granted consent to the Administrator. Otherwise, the period of time of processing depends on the purpose for which the personal data are being processed, or on legislation.
   2. The personal data will be processed both manually and automatically by the Administrator. The Administrator may process some information automatically, for example, in order to create statistics about traffic to their Website.
4. Rights of data subjects
   1. As a data subject, you have the indicated rights under legislation that you can exercise at any time. These include:
      1. the right to access your personal information, which gives you the right to obtain information from the Administrator about whether the Administrator is processing your personal information. The Administrator is obliged to forward this information to you without undue delay. The content of this information is given by Section 12(2) of Act No. 101/2000, on personal data protection, as amended. The Administrator may request reasonable reimbursement for providing the information not exceeding the costs necessary to provide the information;
      2. the right to correct or delete personal data, or to limit their processing, according to which you have the right to have inaccurate or incorrect personal data corrected. If your personal information is no longer needed for the purposes for which it was collected, or if it is being processed illegally, you have the right to request its deletion. If you do not want to request the deletion of your personal data but only temporarily limit their processing, you may request a restriction of processing;
      3. the right to data portability, which is the right to obtain personal data about you that you have provided to the Administrator in a structured, commonly used and machine-readable format (for more details, see Art. 20 of the GDPR);
      4. the right to object to the processing of personal dataprocessed for the purpose of performing a task performed in the public interest or when exercising public power, or for the purpose of protecting the Administrator’s legitimate interests. The Administrator must terminate such processing without undue delay unless it proves that a legitimate interest/reason exists for processing that outweighs your interest, rights or freedoms.
5. Cookies
   1. Cookies are short text files that a website sends to your browser. They enable the website to record information about your visit, such as your selected language and so on, in order for the next visit to the site to be easier and more pleasant. Cookies are important because browsing the internet without them would be much more complicated. Cookies enable us to make better use of our Website and adapt its content to your needs; almost every website in the world uses them. Cookies are useful because they increase the user-friendliness of a revisited website.
   2. The following types of cookies may be used on the Website of the Administrator:
      1. Session (i.e. temporary) cookies enable us to link your individual activities for the duration of your browsing on the Website. These files are activated when you open a browser window and then deactivated when you close the browser window. Session cookies are temporary, and all files are deleted when your browser is closed.
      2. Persistent cookies help us identify your computer if you visit our Website again. Another advantage of persistent cookies is that they enable us to tailor our Website to your needs.
   3. In accordance with Section 89(3) of Act No. 127/2005, on electronic communications, as amended, we hereby inform you that our Website uses cookies for its operation, meaning that we process your cookies, including persistent cookies.
   4. Generally, internet browsers manage cookies. You may manually delete, block or completely prevent the use of individual cookies through your browser settings. For more information, use the help function of your web browser. If you do not allow the use of cookies, some functions and pages may not work as intended.
   5. We use cookies to personalize content and ads, provide social media functions and analyse our traffic. We share how you use the Website with our social media, advertising and analytics partners. By using the Website, you consent to connection with the following services:
      1. Google
      2. Microsoft
   6. For the purpose of displaying targeted ads as a part of advertising and social networks on other websites, we also forward data to these advertising and social networks about your behaviour on the Website; however, we do not forward any data that may personally identify you.