Privacy policy

1 Introductory provisions

1/1 The purpose of this document is to inform the data subject about the processing of his/her personal data, the individual purposes of the processing the personal data, the scope and duration of the processing of personal data.

1/2 The document regulates the processing of personal data on the website www.wecareabout.cz, which is operated by the personal data administrator (as specified below).

1/3 Every visitor to the website is obliged to read this document and, if they do not understand any information, to inform the personal data administrator.

2 Personal data Administrator

2/1 The personal data Administrator is The We Care Company a.s., with registered office at Walterovo náměstí 329/3, Jinonice (Praha 5), 158 00 Praha, ID No. 142 38 152, registered in the Commercial Register, maintained by the Commercial Register of the Commercial Register, Section B, Insert 27025.

2/2 The contact details for making enquiries about personal data, lodging complaints, objections or exercising rights are as follows:

• e-mail: pecujeme@wecareabout.cz
• Tel: 722 366 848
• Postal address Walterovo náměstí 329/3, Jinonice (Praha 5), 158 00 Praha, ID No. 142 38 152

3 Purposes of the processing personal data processing

3/1 Performance of the contract

If the data subject make an order, his/her personal data the Administrator to perform the concluded purchase contract.

The legal basis for processing personal data in this case is the performance of the purchase contract.

3/2 Direct marketing

Direct marketing to customers consists of sending catalogues and commercial communication.

The legal basis for processing the personal data of costumers is the legitimate interest of Administrator in carrying out direct marketing to its own customers with the offers of its own products and services. The data subject may request deletion of his/her personal data.

3/3 Direct marketing at the data subject's request

If the data subject (costumer) gives consent, their personal data is processed for direct marketing purposes. This means that the personal data will be included in the controller's database for the purpose of direct marketing.

The implementation of direct marketing includes the following activities:

• sending targeted and relevant information about news, events, products and services offers, by all means, including electronic means;
• sending catalogues and commercial communications by all means, including electronic means;
• sending the products of the Administrator and collaborating persons by all means, including electronic means;
• performing simple segmentation (profiling) - which means selecting suitable offers according to the subject's activity, previous orders, their age and gender, and according to their preferences.

The legal basis for processing for this purpose is the consent of the data subject. Consent may be withdrawn by the data subject at any time.

3/4 Protection the Administrator´s rights

If the Administrator processes personal data for the purpose of performance of a contract or direct marketing (whether on the basis of legitimate interest or on the basis of the data subject's consent), the costumer´s personal data will also be processed after the termination of a contract for the purpose of protecting the Administrator´s rights, in particular to defend against costumers or third party claims, or in the event of an inspection by a supervisory authority.

The legal basis for processing the personal data for this purpose is the legitimate interest of the Administrator.
The subject may request deletion of his/her personal data.

4 Scope of personal data

4/1 For the purpose of the performance of the contract (order), personal data are processed in the following scope: name, surname, street, description number, city, postcode, telephone, e-mail, date of birth, information about the ordered goods, information about the price, other information provided by the subject.

4/2 For the purpose of direct marketing to customers, personal data are processed in the following scope: name, surname, street, description number, city, postcode, telephone, e-mail, date of birth, gender, age, information on previous orders, or information on the first order, and all other relevant information about the costumer or its order.

4/3 For the purpose of direct marketing at the request of the subject, personal data are processed to the extent provided by the data subject, at most in the following scope: name, surname, gender, age, street, descriptive number, city, postcode, telephone, e-mail, date of birth, information on previous orders, information on the type of product received, information on the number of paid shipments and information on the subject's activity in the context of subscription to products from the Administrator.

5 Period of processing of personal data

5/1 For the purpose of the performance of the purchase contract (order), personal data are processed for the duration of the purchase contract and 3 years thereafter, for the purpose of claims, warranty or other entitlement of the data subject or for the purpose of debt recovery by the Administrator.

5/2 For the purpose of direct marketing to customers, personal data is processed for an indefinite period, until they are not requested to delete by the costumer. The data for segmentation is retained for a maximum of three years.

5/3 For the purpose of direct marketing at the request of the subject, personal data are processed for an indefinite period, until the costumer withdraws consent.

6 Withdrawal of consent, objections, and complaints

6/1 The consent granted by the subject to the Administrator may be recall at any time by sending a written declaration to the e-mail pecujeme@wecareabout.cz or to the address Walterovo náměstí 329/3, Jinonice (Praha 5), 158 00 Praha, ID No. 142 38 152.

6/2 If the processing is based on a legitimate interest, the subject may object to this as well. Objecting to processing the personal data for the purpose of direct marketing shall mean the termination of such processing. Objections may be submitted by e-mail to: pecujeme@wecareabout.cz or at Walterovo náměstí 329/3, Jinonice (Praha 5), 158 00 Praha, ID No. 142 38 152.

6/3 If the subject considers that the Administrator does not proceed the personal data in accordance with the legal regulations, the subject may submit a complaint to the e-mail pecujeme@wecareabout.cz or to the address Walterovo náměstí 329/3, Jinonice (Praha 5), 158 00 Praha, ID No. 142 38 152.

6/4 The data subject may file a complaint to the Office for Personal Data Protection at any time.

7 Beneficiaries and processors

7/1 The recipient of the personal data is the Administrator.

7/2 The following categories of processors may have the access to personal data of the subjects : e-commerce platform operator, marketing companies, commercial call centres, accounting companies, auditing companies, legal services companies, HR and education companies, IT services companies, internet marketing companies, marketing systems development, sales and service companies, enterprise systems development and implementation companies, web and mobile application development companies, online communication software license companies, packaging and delivery companies. In particular, such companies are f.e.: Zásilkovna, Česká pošta, Shoptet, GLS, Fio Banka, MailChimp, Google, Meta, Seznam).

8 Cookies

8/1 Cookies are used to ensure that the website is as easy to use as possible. Other purposes of cookies are to display relevant advertising.

8/2 The terms and conditions for the use of Cookies are described in the Cookies document, which can be found at HERE.

9 Information on the rights of the subject

9/1 Right of access, transparent information, communication, and procedures for exercising the data subject's rights. The subject has the right to be informed of what kind of personal data the Administrator processes about him or her.

The Administrator shall take appropriate measures to provide the data subject in a concise, transparent, intelligible and easily accessible manner using clear and plain language means with all information (e.g. about the processor of the personal data and the processing) and to make any communication about the processing. The Administrator shall provide the information to the subject in writing or by other means (e.g. in electronic form). Provided that identity is established by other means, the subject shall also have the right to request the provision of this information orally.

The Administrator shall not refuse to comply with a data subject's request in the exercise of the data subject's rights (in particular the right of access) unless it can prove that it cannot identify the data subject to whom the data relate.

The  data subject shall have the right to have information on the measures taken provided by the Administrator on request, without undue delay and in any event within one month of receipt of the request. This period may be extended by a further two months if necessary and considering the complexity and number of requests. The Administrator shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay. If the data subject has made the request in electronic form, the information shall be provided in electronic form where possible and unless the subject requests otherwise.

If the Administrator does not take the measure requested by the data subject, it shall inform the data subject without delay and within one month of receipt of the request of the reasons for not taking the measure and of the possibility of lodging a complaint with the supervisory authority and seeking judicial protection.

The Administrator informs the data subject that all such information, communications and acts are provided free of charge. Where requests made are assessed as manifestly unfounded or excessive, and where they are repetitive, the controller may either:

• impose a reasonable fee, considering the administrative costs involved in providing the requested information or communication or taking the requested action; or
• refuse to grant the request.

The apparent unfoundedness or unreasonableness of the request shall be documented by the Administrator.

If the Administrator has reasonable doubt as to the identity of the natural person making the request, the controller may request the provision of additional information necessary to confirm the identity of the data subject.

The information to be provided to the data subject may be accompanied by standardised icons in order to provide an easily visible, comprehensible and clear overview of the intended processing. Where icons are presented in electronic form, they shall be machine-readable.

9/2 Right to repair

The data subject shall have the right to have inaccurate personal data concerning him or her rectified by the Administrator without undue delay. Considering the purposes of the processing, he or she also has the right to have incomplete personal data completed, including by providing an additional declaration.

9/3 Right to erasure ("right to be forgotten")

The data subject has the right to have personal data concerning him or her erased by the Administrator without undue delay and the Administrator is obliged to erase the personal data without undue delay if one of the following grounds applies:

• the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• the data subject withdraws the consent on the basis of which the data were processed and there is no other legal basis for the processing;
• the data subject objects to the processing (under the "right to object" below) and there are no overriding legitimate grounds for the processing;
• personal data have been unlawfully processed;
• personal data have been collected in connection with the offer of information society services in the case of a person under 16 years of age, for whom the person exercising parental responsibility must give consent to processing under the applicable legislation.

9/4 Right to restriction of processing

The data subject shall have the right to have the Administrator restrict the processing in any of the following cases:

• if the data subject contests the accuracy of the personal data, for the period necessary to allow the Administrator to verify the accuracy of the personal data;
• the processing is unlawful and the data subject refuses the erasure of the personal data and instead requests a restriction on its use;
• the Administrator no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims;
• where the data subject has objected to the processing, until it is verified that the legitimate grounds of the controller override the legitimate grounds of the subject.

9/5 Notification obligation regarding rectification or erasure of personal data or restriction of processing
The Administrator shall notify the individual recipients to whom the personal data have been disclosed of any rectification or erasure of personal data or restriction of processing, except where this proves impossible or requires disproportionate effort. The Administrator shall inform the subject of these recipients if requested to do so.

9/6 Right to data portability

The data subject shall have the right to obtain personal data concerning him or her which he or she has provided to a controller in a structured, commonly used and machine-readable format and to transmit those data to another third person/ company, without hindrance from the Administrator to whom the personal data have been provided.

9/7 Right to object

The data subject shall have the right to object at any time to processing of personal data concerning him or her on grounds relating to his or her situation. If the subject objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

9/8 Automated individual decision-making, including profiling

The data subject has the right not to be subject to any decision based solely on automated processing, including profiling, which has legal effects concerning him or her or similarly significantly affects him or her. The Administrator shall not carry out any decisions based solely on automated processing.

10 Definitions

Personal data is any information relating to an identified or identifiable data subject. A data subject shall be deemed to be identified or identifiable if the data subject can be identified, directly or indirectly, in particular by reference to a number, a code or one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity; for example, email, mobile phone, shopping preference in conjunction with surname may also be personal data.

The subject is the natural person whose personal data is processed in accordance with this document.

A special category of personal data is data revealing racial or ethnic origin, political opinions, trade union membership, religious or philosophical beliefs, health, sex life or sexual orientation of the data subject. The Administrator shall never request data falling under a special category of personal data. These are not processed.

Processing of personal data means any operation or set of operations which the Administrator or processor carries out systematically on personal data, whether by automated means or by other means.

Processing of personal data means, in particular, collection, storage on a medium, disclosure, adaptation or alteration, retrieval, use, transmission, dissemination, disclosure, storage, exchange, classification or combination, blocking and destruction; collection of personal data means a systematic process or set of processes designed to obtain personal data for the purpose of further storage on a medium for immediate or subsequent processing; retention of personal data means the maintenance of data in a form which permits further processing; blocking of personal data means an operation or set of operations which restricts for a specified period of time the manner or means of processing personal data, except for necessary interventions; destruction of personal data means the physical destruction of the medium, their physical erasure or their permanent exclusion from further processing.

A Administrator is any entity that determines the purpose and means of processing personal data, carries out the processing and is responsible for it.

The Administrator may authorise or delegate the processing of personal data to a processor.

A processor is a natural or legal person, public authority, agency, or other body that processes personal data for the Administrator.

The purpose of the processing is the reason why the controller processes the personal data.

By scope we mean the specific personal data that is processed, for example, name and surname.

11 Final provisions

11/1 This document shall enter into force on July 18, 2024.

11/2 The Administrator is entitled to update this document. The entity shall keep track of changes to this document. The current version of this document is always displayed on the website of the Administrator and is available for archiving and reproduction by the purchaser.

The We Care Company a.s.