Privacy Policy

Personal Data Processing Policy of Najodecor s.r.o. and its E-SHOP (Website: www.wertiline.com)

Najodecor s.r.o.
Registered office: Zámostní 1155/27, Slezská Ostrava, 710 00 Ostrava
Company ID: 21864764
Bank account: 268954956/0600
Phone: +420 603 980 237, +420 734 590 771
Data mailbox: h6w3i8w
Managing Directors: David Hagater and Marek Michalus

This document aims to inform you about the principles under which we process your personal data and analyze certain aspects of visitor behavior on our website. We also wish to inform you of your rights in relation to the processing of your personal data.

The protection of our customers’ personal data is of great importance to us, and therefore we handle such data with due care and in accordance with applicable legal regulations. Only authorized personnel handle the protection of personal data.

These policies are freely accessible on our website. Whenever we collect your personal data, we refer to this policy and allow you to read it and inform us about our data processing practices. Our company aims to inform our customers in the clearest possible way, including via our website.

For any questions, please feel free to contact us; we are open to constructive communication with our customers.

Contact Information:
Registered office: Zámostní 1155/27, Slezská Ostrava, 710 00 Ostrava
Email: info@wertiline.com
Data mailbox: 5yyi9k
Phone: +420 603 980 237

1. Legal Basis

Processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Act No. 110/2019 Coll., on the processing of personal data, and Act No. 480/2004 Coll., on certain information society services, as amended.

2. Definitions

2.1 Data Subject: A natural person (consumer or self-employed) to whom personal data relates (hereinafter also “You” or “customer”).

2.2 Personal Data: Any information relating to an identified or identifiable customer; an identifiable customer is a natural person who can be identified directly or indirectly, particularly by reference to an identifier such as name, identification number, location data, network identifier, or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural, or social identity of that person (hereinafter “PD” or “data”).

2.3 Controller: The entity that determines the purposes and means of processing personal data. The data controller is Najodecor s.r.o. (hereinafter “Controller”).

2.4 Processor: The entity that processes personal data on behalf of the Controller under a data processing agreement (hereinafter “Processor” or “Business Partner”).

2.5 Website: The website accessible at www.wertiline.com.

2.6 Purpose of Data Processing: The reason for which personal data is processed, e.g., contract fulfillment, user account management, complaint handling, marketing communications, or advertising targeting.

2.7 Scope of Data Processing: The specific categories of personal data processed for a particular purpose.

2.8 Cookies: Short text files stored in your browser by a website. Most cookies contain a unique identifier (cookie ID) assigned by the website to your browser, allowing websites to distinguish and identify browsers. Cookies improve website functionality, measure traffic, and enhance targeted marketing. By browsing our website, you consent to the use of cookies.

3. Scope of Personal Data Processing

3.1 The Controller and its contractual processors process personal data according to the relevant legal basis and purpose, including:

Identification and address data: e.g., name, surname, delivery or other contact address, business address, company ID, VAT ID.
Electronic contact details: e.g., phone number, email.
Other electronic data: IP address processed via cookies.
Data related to the contractual relationship: bank account number, order history.
Additional personal data: data provided by the customer in order forms, communications, or other documents, including later updates.

3.2 Data Source:

Data provided directly by customers: during order placement, newsletter registration, or account registration.
Automatically collected data while browsing the website: IP address, cookies, referring website, visit date and time, search queries, device and browser information, etc.

4. Purposes of Personal Data Processing

4.1 Legal Basis: Under Article 6 GDPR, data processing may occur based on your consent, fulfillment of legal obligations, contract execution, or legitimate interests of the Controller. Key processing purposes include:

a) Contract Fulfillment:

Purpose: To process orders and ensure delivery of purchased goods.
Legal Basis: Performance of a contract.
Retention: 5 years after order completion.

b) Customer Account Management:

Purpose: To manage accounts, simplify ordering.
Legal Basis: Measures taken prior to contract conclusion.
Retention: As long as the account is active.

c) Communication, Feedback, Complaints, and Warranties:

Purpose: Handle inquiries, complaints, and satisfaction surveys; inform about order status.
Legal Basis: Legitimate interest.
Retention: Duration of contractual relationship plus 4 years.

d) Marketing Communications and Promotions:

Purpose: Inform customers about products, promotions, and campaigns.
Legal Basis: Consent or legitimate interest.
Retention: Duration of consent or 5 years without engagement.

e) Personalized Advertising:

Purpose: Display personalized content and ads based on browsing and purchase history.
Legal Basis: Consent or legitimate interest.
Retention: Duration of consent; cookie duration varies.

f) Service Improvement and Analytics:

Purpose: Improve products, services, and website usability.
Legal Basis: Legitimate interest.

g) Protection of Rights, Property, and Safety:

Purpose: Prevent fraud, ensure compliance with law, and protect property and rights.
Legal Basis: Legal obligation or legitimate interest.
Retention: 10 years after contractual relationship; 4 years for certain data.

h) Accounting and Tax Compliance:

Purpose: Fulfill accounting and tax obligations.
Legal Basis: Legal obligation.
Retention: 5–10 years per applicable law.

5. Data Recipients

5.1 Internal Access: Employees needing data for service provision.
5.2 External Access: Processors ensuring website functionality, technical support, logistics, analytics, IT, cloud storage, payment providers, legal, and marketing partners.
5.3 Public Authorities: Only if required by law or for fraud prevention.

6. Data Processing Methods

Personal data is processed manually and automatically, with proper records maintained according to applicable law (Art. 30 GDPR).

7. Rights of Data Subjects

You have the following rights:
a) Access your data
b) Rectification of inaccurate data
c) Erasure
d) Restriction of processing
e) Data portability
f) Object to processing
g) Withdraw consent
h) Information on automated decision-making including profiling
i) File a complaint with the Supervisory Authority (Office for Personal Data Protection, Prague, www.uoou.cz)

8. Cookies

Cookies are short text files sent to your browser to identify users and improve service. You can manage cookie settings in your browser. Cookies are used for functionality, language preference, analytics, and marketing purposes.

9. Children’s Data

Our website is not intended for children under 18. We do not intentionally collect their personal data. If discovered, we will delete such data unless legally required to retain it.

10. Conclusion

This policy was approved by the managing directors on 29 July 2024. Changes to this policy will be posted on our website and social media. Please review this policy regularly.

Managing Directors:
David Hagater & Marek Michalus