Home Handling of personal data and GDPR

Handling of personal data and GDPR

1. Personal data controller The controller of personal data is DYNAMIC FUTURE s.r.o., with registered office at Občanská 1117/23, Slezská Ostrava, 710 00 Ostrava, ID No. 25871871, registered in the Commercial Register C 23574, maintained at the Regional Court in Ostrava, hereinafter referred to as “the controller”.

2. Scope of processed personal data The Controller processes personal data in the following scope:

Name and surname
E-mail address
Telephone number
Billing and delivery address (for orders)
Order history
Other information voluntarily provided by the customer (e.g. in the order note).

3. Purposes of processing personal data We process your personal data for the following purposes:

Order processing: order processing and delivery of goods/services.
Marketing purposes: Sending newsletters, offers or information about news and events, online advertising campaigns.
Customer support: handling queries and requests through customer service.
Fulfilling legal obligations: archiving documents required by law.
Protecting the legitimate interests of the administrator: fraud prevention and IT infrastructure security.

4. Legal grounds for processing personal data The processing of personal data is based on:

Performance of a contract (Article 6(1)(b) GDPR): the processing is necessary for the performance of a contract between the controller and the customer.
Legitimate interest of the controller (Article 6(1)(f) GDPR): for example, protection of legal claims, direct marketing.
Consent of the data subject (Article 6(1)(a) GDPR): for example, for sending marketing communications.
Performance of a legal obligation (Article 6(1)(c) GDPR): for example, archiving of accounting documents.

5. Retention period of personal data We keep your data only for the necessary period of time, namely:

Data for order processing and contract performance: for 10 years (in accordance with tax and accounting regulations).
Marketing data: until withdrawal of consent (or for 3 years from the last contact).
Data within the scope of legitimate interests: until the expiry of the time limit for making claims (usually 3 years).

After these periods, the personal data are irretrievably deleted or anonymised.

6. Access to personal data The following have access to personal data:

Staff of the administrator who have been duly instructed on the duty of confidentiality.
Personal data processors, which include:
- IT service providers (e.g. hosting and email campaign management).
- External accountants and tax advisors.
- Courier and delivery services.
- Marketing tools (e.g. Ecomail, Mailchimp, etc.).

The controller has a data processing agreement with all processors to ensure the protection of your data.

7. Your rights You have the following rights under the GDPR:

Right of access to personal data.
Right to rectification of inaccurate data.
The right to erasure (“right to be forgotten”) if the data are no longer necessary for the purposes of processing.
Right to restriction of processing.
Right to data portability.
The right to object to processing based on the legitimate interest of the controller.
The right to lodge a complaint with the Office for Personal Data Protection.

8. Contact for questions and exercise of rights If you have any questions about the processing of your personal data or wish to exercise your rights, please contact us:

E-mail: jan.slajer@dynfut.cz
Phone: +420 777 948 555
Address: see introduction

9. Updates to the Privacy Policy This policy may be updated from time to time. The current version is always available on our website. This policy is valid from 01.01.2025.