Page for clients and non-clients on how, why and in what manner personal data is processed by Urbania, s.r.o.
If you are our customer, a subscriber to our newsletter or a visitor to our website, you have provided your personal data to us. We are responsible for the safety and protection of this data. Please find out below how your personal data is protected and about the principles and your rights with regard to the General Data Protection Regulation (GDPR).
Who is the controller?
We are Urbania, s.r.o., Company Registration Number 26242826, having its registered seat at Hlavní 21, 664 48 Moravany, Czech Republic; entered in the Commercial Register maintained by the Regional Court in Brno, Section C, File 39839, as the operator of the website www.urbania-streetfurniture.com. We process your personal data as a data controller, i.e. we decide on how the data is processed, for what purpose and for how long. To this end, we select processors to assist in the processing.
Should you wish to contact us in the course of the processing, you can do so by calling +420 547 217 955 or by writing to us at email@example.com .
We hereby declare that, as the controller of your personal data, we comply with all legal obligations stipulated by the applicable legislation, especially the Act on Personal Data Protection and the General Data Protection Regulation, and therefore:
we shall process your personal data solely upon the basis of legitimate reasons, especially legitimate interest, contract performance, the fulfilment of legal obligations or your consent;
we comply with the provisions of Article 13 of the GDPR regarding the duty to inform prior to the commencement of processing;
we shall cooperate with you and support you in asserting your rights pursuant to the Act on Personal Data Protection and pursuant to the General Data Protection Regulation.
Scope of personal data and purposes of processing
We process the personal data provided by you for the following reasons (for the achievement of the following purposes):
● Provision of services, contract performance, orders, offers
We need your personal data (which shall include contact information such as first name, last name, address, e-mail, phone number, company registration number, VAT number) in order to process your inquiries and orders and for the delivery of goods.
As long as you are our customer, we need your personal data (invoicing data) in order to fulfil our legal obligations with respect to the issue and processing of invoices.
● Marketing – newsletters – legitimate interest
Your personal data and data on your behaviour (e.g. what you click on most often in e-mails, and when you open them) is used for direct marketing purposes – for sending marketing messages. As long as you are our customer, we shall do so based on our legitimate interest, as we have a reason to believe you are genuinely interested in our information, for a period of ten years since the last order.
● Marketing – newsletters – your consent
If you are not our customer, we shall only send you newsletters based on your prior consent for a period of ten years since the granting of said consent. In both cases, you shall have the right to withdraw your consent by clicking on the “unsubscribe” link which you can find in all e-mails.
We shall retain your personal data during the relevant limitation periods, as long as the law does not require that it be retained for a longer period of time, or unless otherwise declared in specific cases.
Safety and security of your personal data
We protect your personal data using state-of-the-art technologies to the maximum extent possible. We shall protect your personal data as if it were our own data. We have adopted and ensure all technical and organisational measures known to us in order to prevent the misuse, damage or destruction of your personal data.
Transfer of personal data to third persons
Our employees and partners have access to your personal data. In order to ensure specific operations with the framework of personal data processing that we cannot handle ourselves, we use the services and applications of processors who are able to protect data even better, as they specialise in that particular form of processing.
These consist of the providers of the following platforms:
SmartSelling a.s. (SmartEmailing)
Accountant (Renata Bartošková)
We may decide in the future to use other applications or processors in order to facilitate and improve the processing. However, we promise to choose these processors based on the same criteria of security and safety as those applicable to us.
Transfer of data to third countries
Your rights with regard to personal data protection
You have a variety of rights with regard to personal data protection. Should you ever wish to assert any of these rights, please contact us at firstname.lastname@example.org.
You have the right to request information; our obligation in this regard is already fulfilled via this informative page containing the principles of personal data processing.
Thanks to the right of access you can send an inquiry at any time and we shall inform you, within 15 days, regarding which of your personal data is processed and why.
In the event of any changes that would render the data processed by us inaccurate or incomplete, you can exercise your right to the rectification of personal data.
You may exercise the right to the restriction of processing if you think that we process inaccurate data, or if you think our data processing procedures constitute a breach of the law, but at the same time you do not request data erasure or where you have lodged an objection to processing. You may restrict the scope of the personal data or the purposes of processing, e.g. by unsubscribing to our newsletter you can restrict the purpose of processing with regard to the sending of marketing messages.
Right to data portability
Should you wish to take your data to another entity, we shall proceed in the same manner as in the case of the right of access – the difference being that we shall provide the data to you in a machine-readable format. We will need at least 15 days to fully comply with your request.
Right to erasure (“right to be forgotten”)
You also have the right to erasure (“the right to be forgotten”). We do not want to forget you, but should you so wish, it is your right and we shall delete all of your personal data from our system and from the systems of all processors, including data backups. We will need 15 days to fully comply with your request.
In some cases, we are obliged to comply with the applicable law to retain invoices for the period of time stipulated by the relevant act; in which case we shall delete the personal data whose retention is no longer required pursuant to other laws. We shall inform you via e-mail about the completion of the erasure process.
Complaints with the Office for Personal Data Protection
If you think your personal data is not processed in accordance with the applicable law, you are entitled to lodge a complaint with the Office for Personal Data Protection at any time. We would appreciate if you could contact us in advance to give us the opportunity to address the issue and adopt the necessary remedial measures.
Unsubscribing to newsletters and marketing messages
We shall send you e-mails with inspiration, articles and products and services, if you are our client, based on the principle of legitimate interest.
If you are not our customer, we shall only send you newsletters based on your prior consent. In both cases, you shall have the right to withdraw your consent by clicking on the “unsubscribe” link which you can find in all e-mails.
We would like to assure you that our employees and partners in charge of the processing of your personal data are bound by confidentiality obligations with respect to the personal data and the security measures whose disclosure would pose a risk to the security of your personal data. This obligation shall survive the termination of employment or any other relation with them. Any transfer of your personal data to a third person is subject to your consent.
These principles governing personal data protection shall become valid as at 25 May 2018.