Protection of personal data

I. INTRODUCTION
We, the company YES Business s.r.o. - Stafan EICHLER, with registered office at Plynární 1617 / 10, Prague 7, 17000, ID: 242 51 119, greatly appreciate your trust.

In these principles, you will find out how we process your personal data, which we obtain in connection with the purchase of our goods, in connection with visiting websites operated by - YES Business s.r.o. (https://www.yesdental.cz/), as well as in some other cases of personal data processing. These principles concern the processing of your personal data, as our clients, those interested in our goods and visitors to the websites operated by us, always to the extent of personal data corresponding to your position in relation to us. We process all personal data in accordance with legal regulations and place great emphasis on their safe storage.
II. ADMINISTRATOR OF YOUR PERSONAL DATA
The administrator of your personal data is YES Business s.r.o. Our identification data is as follows:
YES Business s.r.o
ID number:242 51 119
Residence:Plynární 1617 / 10, Prague 7, 17000
You can contact us at any time by letter sent to the address of the company's headquarters, at the phone number +420 720 522 722or by email at yes@yesdental.cz.
III. SPECIFIC CASES OF PROCESSING YOUR PERSONAL DATA
Processing of personal data of unregistered users
1) If you purchase any goods in our e-shop, we process your personal data in the scope of name, surname, residential address, address for delivery of goods, e-mail address, telephone contact, information about the purchased goods and their price. If you are a legal entity or a natural person running a business, we will also process data about your business company, ID number, VAT number, address of headquarters or place of business, billing address, identification data of your representative or other contact person, and data about the bank account number and bank code.
2) The processing of this personal data is a necessary prerequisite for the fulfillment of the contract and is therefore processing that does not require your consent.
3) We will process your data for the purpose of:
(i) implementation of the concluded purchase contract and delivery of ordered goods based on performance
contract, for the duration of the warranty period for the delivered goods;
(ii) fulfillment of legal obligations (especially accounting and tax), for a period of time
established in the relevant legal regulations;
(iii) protection of rights and legally protected interests consisting in protection from
by any legal disputes arising from concluded purchase contracts, on
based on our legitimate interests, for a period of 3 years from the date of expiry of the warranty
time for goods.
4) We are constantly expanding and improving our products, and therefore we will process your e-mail address for the purpose of sending commercial messages containing news in our product range (direct marketing). We carry out such processing on the basis of our legitimate interest in offering new products to our customers, i.e. you. We send you these commercial communications for a period of 1 year after ordering our goods, unless, in accordance with § 7 paragraph 3 of Act No. 480/2004 Coll., on certain information society services, as amended, you do not refuse to send our commercial communications or revoke your previously granted consent.
5) In the event that you withdraw from the purchase contract, we will also process your bank account number, which you will provide to us for the purpose of settling our mutual obligations. We will only process the provided personal data for the period necessary for the refund and in order to prove that the amount paid has actually been returned to you, but at most for the period of limitation resulting from generally binding legal regulations. The provision of this personal data is necessary for the settlement of our mutual obligations in the event of withdrawal from the contract, and it is therefore processing that does not require your consent.
6) On the basis of your consent granted when sending the order, we will process personal data for the purpose of other business communications and marketing activities than according to paragraph 4. Consent is granted for a period of 3 years and can be revoked at any time. Data processing in connection with a visit to our website
7) In connection with browsing our website, we process log files
files about access to these websites, namely: website, from where to us
you go, IP-address, date and time of access, information about your browser and operating system.
8) We process this data for the purpose of protecting our legitimate interests in ensuring the protection of websites and improving their functioning.
9) We process these log files without your consent and keep them for 1 month after visiting the website.
10) Use of cookies. To improve the functioning of our website and
optimized our activities We use cookies on our website. A cookie is a small file that a website stores on your hard drive. The information obtained may include the IP address of the connecting computer or the type of browser used. Cookies are used to distinguish individual users accessing our website and do not allow for further personal identification of website users. If you do not agree to the collection of Cookies, you can disable their use in your browser settings. Even so, you can prevent the collection of cookies, for example by changing your browser settings or by installing a special plugin in your browser.
IV. TRANSFER OF YOUR PERSONAL DATA
We may also make your personal data available to other entities - namely to our external collaborators who participate in the provision of our services or to companies providing technical and IT support for us or the activities of experts, lawyers and auditors. These other persons are in the position of processors of personal data, namely:
- company FerMark s.r.o
ID: 13951106
headquarters: Prvního pluku 143/12, Prague 186 00
registered in the commercial register maintained by the Municipal Court in Prague under no. stamp
357749
Personal data is processed directly by YES Business s.r.o. or another processor mentioned above, which also provides sufficient and credible guarantees about the technical and organizational security of the protection of personal data mentioned above. The processing of the above-mentioned personal data takes place in technically and physically secured electronic information systems. The transfer and processing of personal data takes place only within the territory of the European Union.
V. METHOD OF PROCESSING PERSONAL DATA
We process your personal data automatically and manually and keep records of processing activities.
VI. PROTECTION OF YOUR DATA
We take all technical and organizational measures to ensure the protection of personal data and to exclude the possibility of unauthorized or accidental access to personal data, their change, destruction or loss, unauthorized transfers, their other unauthorized processing, as well as other misuse of personal data. We comply with all obligations imposed on us by generally binding legal regulations in the field of personal data protection. We use modern security and control mechanisms ensuring the maximum possible data protection. All persons who come into contact with personal data in the performance of their work or contractual obligations are bound by a legal or contractual obligation of confidentiality.
VII. RIGHTS RELATED TO THE PROTECTION OF PERSONAL DATA
We process your data in a transparent manner, which means that you always know for what purpose your data can be used, who processes the data and who manages it. In connection with the processing of personal data, you have the following rights associated with the processing of personal data, which we fully respect, if the prerequisites established by law are met:
Right of access to personal data
You have the right to receive from us, free of charge, upon your request, information about whether or not your personal data is being processed and, if so, you have the right to obtain access to this personal data. Upon request, we will always provide you with all information about the processing of personal data where we are in the position of personal data administrator.
The right to correct processed personal data
If you discover that your personal data is inaccurately or incorrectly processed, contact us and we will correct it immediately.
The right to delete processed personal data
If the purpose for which we process personal data no longer exists, we will automatically anonymize or dispose of your personal data. If we process personal data about you based on your consent and you withdraw your consent, we will delete your personal data.
However, the right to erasure is not absolute, and if we have an objective obligation to keep the data (e.g. accounting), only those personal data that are no longer needed for the original processing purposes will be deleted.
The right to restrict the processing of personal data
You have the right to have us restrict the processing of your personal data if: a) you dispute the accuracy of the personal data for the time required for us to verify the accuracy of the personal data, or b) the processing is unlawful and you refuse the erasure of the personal data and request instead about limiting their use; or c) we no longer need the personal data for processing purposes, but you require them from us to determine, exercise or defend your legal claims; or d) you have objected to the processing until it has been verified whether our legitimate reasons outweigh your legitimate reasons.
The right to portability of personal data
If we process your personal data in an automated manner based on your consent or contract, you have the right to a copy of your personal data that you have provided to us in a structured, commonly used and machine-readable format, which will be delivered to you or another person.
The right to withdraw consent to processing
If consent is the legal basis for the respective processing of personal data, you have the right to withdraw this consent at any time.
The right to object to processing
If the prerequisites established by law are fulfilled, you also have the right to object to the processing of your personal data, if the legal basis for the processing is our legitimate interests.
Automated decision-making, including profiling
Our company does not make informed decisions when processing personal data
exclusively on automated processing without human assessment that would have legal effects or otherwise significantly affect the data subjects whose personal data we process according to these principles.
The right to file a complaint
You can exercise your rights, as well as complaints, in writing or by e-mail to our company, as the administrator of personal data, using the contact details listed above. You can also address your complaint to the supervisory authority, which is the Office for the Protection of Personal Data, based in Plk. Sochova 27, 170 00 Prague 7.
VIII. COMMISSIONER FOR THE PROTECTION OF PERSONAL DATA
Our company has not appointed a personal data protection officer.
IX EFFECTIVENESS OF PRINCIPLES
This Privacy Policy is effective from 1/1/2022 and is available online at our website or upon request at our headquarters. If there is a need to update this Privacy Policy, we will notify you of any material changes.