Privacy Policy

We are a company VBB & Partners s.r.o and we operate an e-shop on the website www.bobus.cz .

For the provision of our services, the sale of goods and the operation of our website, we process some personal data.

The processing of personal data is regulated in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation personal data) ("GDPR")

  1. GENERAL PROVISIONS

This Privacy Policy (hereinafter referred to as "ZOOÚ") was issued by the company VBB & Partners s.r.o., ID number: 17052718, with its registered office at Zbraslavská 12/11, Prague 5 - Malá Chuchle, 159 00 (hereinafter referred to as the "Company").

These TOS describe how the Company collects, processes and shares information of users (hereinafter referred to as "user") of the e-shop www.bobus.cz , and also of customers (hereinafter referred to as "customer") using their services. These GTC do not apply to information that the Company's customers process using their services.

The company is the administrator and processor of personal data of customers who provide it when ordering goods and services, joining the loyalty program or signing up for the newsletter and e-shop users www.bobus.cz. The company may use other processors listed below to process personal data.

We encourage you to read the entire TOU and make sure you fully understand the information. If you have any questions about this TOU or the Company's collection, processing and sharing of personal data, please contact us at info@bobus.cz .

  1. WHAT DATA WILL BE PROCESSED

The company processes data obtained based on the use of the website and through cookies . In order to better target advertising campaigns and improve the website, the Company uses information about the user's viewed pages, possibly about the links they clicked and other activities on the website, such as filling out order and contact forms. This data is obtained automatically through the Company's tools and the tools of the data processors listed below. If you have enabled the storage of cookies on your device, this data is also obtained through these files.

The company mainly processes data that you provide when creating and using a user account, creating an order or registering for a loyalty program, and also when signing up for a newsletter subscription . Some personal data are necessary for registration (name and e-mail address) and are used for basic user identification or customer login to the account. The data that the Company processes when registering to subscribe to the newsletter or creating a user account may be the following:

  • First and last name, or company name
  • E-mail
  • Telephone number
  • Delivery address
  • Company identification data
  • Payment information
  • Access data to servers, e-mail and website
  • Or other excessively necessary data to perform the contractual relationship

  1. FOR WHAT PURPOSES PERSONAL DATA WILL BE USED

The company always processes personal data exclusively for the purposes for which they were collected, based on legitimate interest, legal obligation or consent. We process personal data for various purposes, primarily for:

  • fulfillment and implementation of concluded contracts and orders,
  • to comply with legal accounting, tax, or other applicable laws and regulations, or as required by any legal process or government agency.
  • communication with customers, including sending information about current services and products, updating business conditions and for marketing and promotional purposes,
  • sending a response to an e-shop user's inquiry, processing a response to a specific product,
  • analytics of e-shop traffic in order to improve their offer,
  • marketing outreach through electronic contact,
  • for transaction processing and fraud detection,
  • targeting potential customers through online advertising. For better advertising targeting and website optimization, the Company uses information about user activity on the website. This information also includes data obtained using cookies.
  • Push notifications. If you have this function active, the Company can send so-called push notifications directly in the website interface. These notifications are displayed based on your consent given after displaying the relevant notification in the website interface.

  1. PROCESSORS WHO HAVE ACCESS TO THE DATA

Personal data is processed primarily by the Company and its employees, who are bound by confidentiality, and also by the Company's suppliers, if they are processed in connection with the fulfillment and implementation of concluded contracts and orders (e.g. transport companies).

The company may also use a so-called processor for the processing of personal data. These entities may process personal data only for the purposes and in the manner determined by the Company and may not expand it without further consent. We only pass on to processors the data they absolutely need to provide their services. The company uses as a processor:

  • Google LLC (web analytics and online marketing tools);
  • Facebook Ireland Ltd. (tools for online marketing);
  • cz, as (tools for online marketing)
  • iDoklad, Solitea Czech Republic, as (Accounting system)
  • Aliexpress

In justified cases, the Company may transfer personal data to other entities (processors). Personal data may be transferred to the following processors:

  • processors who process personal data according to the Company's instructions in the area of ​​contact with the public, electronic data management or accounting,
  • public authorities and other entities, if required by valid legal regulation;
  • other entities in the event of an unexpected event in which the provision of data is necessary for the purpose of protecting life, health, property or other public interest or if it is necessary to protect our rights, property or safety.

  1. PERIOD FOR WHICH PERSONAL DATA WILL BE KEPT

Personal data for the purposes specified in point 3 are processed to the extent necessary for the fulfillment of these purposes and for the time necessary to achieve them or for the time directly stipulated by legal regulations. Personal data are then deleted or anonymized.

After this period, personal data may only be kept for the purposes of the state statistical service, for scientific purposes and for archival purposes. The basic periods for processing personal data are available below.

  • The company processes personal data of registered customers until their registration is cancelled. Data on customer contact persons are processed for the entire duration of the business relationship, or until the customer updates the data.
  • In the case of service customers, the Company is entitled to process their basic personal, identification, contact data, service data and data from their communication with the Company for a period of 10 years from the date of termination of the last contract.
  • In case of purchase of goods from the Company, the Company is entitled to process basic personal, identification and contact data of the customer, data about the goods and data from communication between the customer and the Company for a period of 5 years from the date of expiry of the warranty period for the goods.
  • In accordance with § 35 of Act No. 235/2004 Coll., on value added tax, invoices issued by the Company are archived for 10 years from their issuance. Due to the need to document a legal reason for issuing invoices, contracts are also archived for a period of 10 years from the date of termination of the contract.
  • The data obtained for marketing purposes are processed for the entire duration of the consent, i.e. for the period when the user allows storage as part of the cookie settings on the website or in his browser. The processing may continue even after the withdrawal of consent, at the latest until the expiry of the relevant type of Cookies.
  • Business and marketing communications via electronic contact are sent until the withdrawal of consent or until the time of unsubscribing.

  1. WITHDRAWAL OF CONSENT

Customers may unsubscribe from any marketing and commercial communications at any time by:

  • by clicking on the relevant link located in the footer of each commercial communication;
  • on the dedicated website;
  • by sending a request to info@ bobus.cz

The user can disable advertising targeting (Cookies) by changing it directly in their browser. If you disable the storage of selected Cookies, some parts of the website may not work properly.

  1. METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Personal data will be processed and stored:

  • by machine (automated) through computing hardware and software,
  • in written form.

  1. RIGHTS OF THE DATA SUBJECT

 If the data subject is an identifiable natural or legal person and proves his identity, he will have the following rights:

Right of access to personal data

According to Article 15 of the GDPR, the data subject has the right to access personal data, which includes, on the one hand, the right to obtain from the Company:

  • confirmation whether it processes his personal data,
  • information on the purposes of the processing, the categories of personal data concerned, the recipients to whom the personal data have been or will be made available, the planned period of processing, the existence of the right to request from the administrator the correction or deletion of personal data concerning the data subject or the restriction of their processing or to raise an objection to this processing, the right to file a complaint with a supervisory authority, about all available information about the source of personal data, if not obtained from the data subject, the fact that automated decision-making takes place, including profiling, about appropriate safeguards when transferring data outside the EU,
  • in the event that the rights and freedoms of other persons and a copy of personal data are not adversely affected.
  • in the event of a repeated request, the Company will be entitled to charge a reasonable fee for a copy of the personal data.

The right to correct inaccurate data

According to Article 16 GDPR, you have the right to correct inaccurate personal data that the Company processes about you. You are also obliged to report changes to your personal data and to document that such a change has occurred. At the same time, you are obliged to cooperate with the Company if it is found that the personal data it processes about you is not accurate. We will carry out the repair without unnecessary delay, but always taking into account the given technical possibilities.

Right to erasure

According to Article 17 of the GDPR, you have the right to delete personal data concerning you, if the Company does not prove legitimate reasons for the processing of this personal data. The company has set up mechanisms for deleting personal data in the event that they are no longer needed for the purpose for which they were processed.

Right to restriction of processing

According to Article 18 GDPR, the data subject has the right to limit processing until the resolution of the complaint, if he denies the accuracy of personal data, the reasons for their processing or if he objects to their processing, in writing to the address of the Company's registered office.

The right to be notified of correction, erasure or restriction of processing

According to Article 19 of the GDPR, the data subject has the right to be notified by the Company in the event of correction, deletion or restriction of the processing of personal data. If personal data is rectified or deleted, the Company will notify individual recipients, except where this proves impossible or requires unreasonable effort.

The right to portability of personal data

According to Article 20 of the GDPR, you have the right to the portability of data that concern you and that you, as the controller, have provided to us in a structured, commonly used and machine-readable format. At the same time, you have the right to ask us to transfer this data to another administrator.

If the exercise of this right could adversely affect the rights and freedoms of third parties, your request cannot be granted.

The right to object to the processing of personal data

According to Article 21 GDPR, you have the right to object to the processing of your personal data by the Studio. In the event that the Company does not prove that there is a serious legitimate reason for the processing that outweighs the interests or rights and freedoms of the data subject, the Company will terminate the processing based on the objection without undue delay.

The right to withdraw consent to the processing of personal data

If you give the Company consent to the processing of personal data, it can be revoked at any time. It is necessary to make the appeal explicit, understandable and a certain manifestation of will, either in writing to the address of the Company's headquarters or via an e-mail address infobobus.cz .

Automated individual decision-making including profiling

The data subject has the right not to be the subject of any decision based solely on automated processing, including profiling, which would have legal effects for him or significantly affect him in a similar way. The company states that it does not make automated decisions without the influence of human judgment with legal effects for data subjects.

The right to contact the Office for Personal Data Protection

You have the right to file a complaint regarding our processing of your personal data with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7. Office website: www.uoou.cz.

  1. SAFETY

The company undertakes to protect personal data and other information about its customers and users of its services. To do this, it uses a number of security technologies and measures designed to protect information from unauthorized access, use or disclosure. The measures it uses are designed to provide a level of security appropriate to the risk of misuse of personal data. The security of personal data is regularly tested by the Company and the protection is constantly improved. However, keep in mind that 100% security cannot be guaranteed on the Internet.

All personal data in electronic form are stored in databases and systems to which only persons who need to handle personal data immediately for the purposes specified in these rules have access, and only to the extent necessary.

  1. CONTACT

If you have any questions about this Privacy Policy or if you wish to exercise your rights, please do not hesitate to contact us at info@ bobus.cz .

The administrator of your personal data is the company VBB & Partners s.r.o., ID number: 17052718, with registered office at Zbraslavská 12/11, Prague 5 - Malá Chuchle, 159 00,

  1. ZOOÚ UPDATE

 We hereby inform you that we may modify or update this Privacy Policy. Any changes to these Policies will become effective after their publication at the following link www.bobus.cz/zasady-ochrany-osobnich-udaju

These General Terms and Conditions are effective from 14 April 2022.