Principles of personal data protection

I.

Basic provision

1. The personal data controller under Art. 4 para. 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "GDPR") is ID: 07439342 with registered office in Prague... (hereinafter referred to as the "controller").

2. The contact details of the controller are

address: Sokolovská 44

email: info@pragmoon.cz

phone: +420 223 011 218

3. Personal data means any information about an identified or identifiable natural person; an identifiable natural person is a person who can be identified directly or indirectly, in particular by reference to a specific identifier such as a name, an identification number, location data, an online identifier, or one or more special elements of the physical, physiological, genetic, mental, economic, cultural, or social identity of this natural person.

II.

Sources and categories of processed personal data

1. The controller processes personal data that you have provided to him/or personal data that the controller has obtained based on fulfilling your order.

2. The controller processes your identification and contact data and data necessary for the performance of the contract.

III.

Legal basis and purpose of personal data processing

1. The legal basis for the processing of personal data is

• the performance of a contract between you and the controller under Art. 6 para. 1 letter b) of the GDPR,

• the legitimate interest of the controller in providing direct marketing (in particular for sending commercial messages and newsletters) under Art. 6 para. 1 letter f) of the GDPR,

• Your consent to processing for the purposes of providing direct marketing (in particular for sending commercial messages and newsletters) under Art. 6 para. 1 letter a) of the GDPR in conjunction with Section 7 para. 2 of Act No. 480/2004 Coll., on certain information society services, in case no goods or services have been ordered.

2. The purpose of processing personal data is

• processing your order and performing the rights and obligations arising from the contractual relationship between you and the controller; when ordering, personal data necessary for successful order processing (name and address, contact) are required, providing personal data is a necessary requirement for concluding and fulfilling the contract, without providing personal data, it is not possible to conclude the contract or for the controller to fulfill it,

• sending commercial messages and conducting other marketing activities.

3. The controller engages in automated individual decision-making within the meaning of Art. 22 of the GDPR. You have expressly consented to such processing.

IV.

Data retention period

1. The controller retains personal data

• <