Personal data protection

Privacy Policy

INTRODUCTORY PROVISIONS

1.1 The purpose of this document is to inform the data subject about the processing of their personal data, including the purposes, scope, and duration of personal data processing.

1.2 This document regulates the processing of personal data on the website www.soma.vision, operated by the data controller.

1.3 Every visitor to the website is required to read this document and, if they do not understand any information, to inform the data controller using the contact details provided in section 2.

DATA CONTROLLER

2.1 The data controller is Aether Phungi, s.r.o., located at Zeiberlichova 53, 644 00, Brno Soběšice, Czech Republic, company registration number 19675739, registered in the Commercial Register under file no. C135443/KSBR at the Regional Court in Brno. We are VAT payers, VAT ID CZ19675739.

2.2 Contact details for inquiries regarding personal data, complaints, objections, or exercising rights are as follows:

Email: info@soma.vision

Phone: +420 704 978 844

Postal Address: Zeiberlichova 53, 644 00, Brno Soběšice, Czech Republic, company registration number 19675739

PURPOSES OF PERSONAL DATA PROCESSING

3.1 Fulfillment of Contract (Order)

If the data subject places an order, their personal data will be processed to fulfill the online order and to complete the obligations of the purchase agreement.

The legal basis for processing for this purpose is the performance of the contract.

3.2 Direct Marketing to Customers

If the data subject is a customer of the controller, their personal data will also be processed for direct marketing purposes based on the legitimate interest of the controller. Direct marketing to customers involves sending catalogs and commercial communications in all forms, including electronic means, and may involve sending marketing communications regarding the controller's own products and services under the legal exemption according to § 7(3) of Act No. 480/2004 Coll. This processing includes simple segmentation (profiling) – choosing suitable offers based on the data subject's activity, previous orders, paid orders, requests, age, gender, and detected preferences.

The legal basis for processing for this purpose is the legitimate interest of the controller in conducting direct marketing to its own customers with offers of similar products and services.

The data subject has the right to object to this processing, and processing will cease upon such objection.

3.3 Direct Marketing on Request of the Data Subject

If the data subject gives consent, their personal data will be processed for direct marketing purposes. This means that personal data will be included in the controller's database for direct marketing.

Direct marketing involves:

Sending targeted and relevant information about news, promotions, product and service offers, by all means, including electronic methods.
Sending catalogs and commercial communications by all means, including electronic methods, sending products from the controller and cooperating parties by all means, including electronic methods.
Simple segmentation (profiling) – choosing suitable offers based on the data subject’s activity, previous orders, paid orders, requests, age, gender, and detected preferences.

The legal basis for processing for this purpose is the data subject’s consent. Consent may be withdrawn at any time.

3.4 Protection of Controller’s Rights

If the controller processes personal data for the purpose of fulfilling a contract or conducting direct marketing (whether based on legitimate interest or consent of the data subject), personal data will also be processed for the purpose of protecting the controller’s rights, including defending against claims from the data subject or third parties, for potential audits by supervisory authorities, and for debt collection. The legitimate interest of the controller also includes linking multiple one-time orders from the same data subject, i.e., associating different contracts with a specific data subject for subsequent archiving of contracts and tax documents.

The legal basis for processing for this purpose is the legitimate interest of the controller.

The data subject may file objections to this processing.

SCOPE OF PERSONAL DATA

4.1 For the purpose of fulfilling the contract (order), personal data is processed in the following scope: name, surname, street, house number, city, postal code, phone number, email, date of birth, information about ordered goods, information about price, and other information provided by the data subject.

4.2 For the purpose of direct marketing to customers, personal data is processed in the following scope: name, surname, street, house number, city, postal code, phone number, email, date of birth, information about previous orders, i.e., information about the first order, based on which commercial communications are sent electronically under the legal exemption according to the Act on Information Society Services and for a period of three years, information about orders and preferences of the data subject, i.e., information about order forms, types of ordered goods, and purchasing preferences.

4.3 For the purpose of direct marketing on request of the data subject, personal data is processed to the extent provided by the data subject, up to the following scope: name, surname, gender, age, street, house number, city, postal code, phone number, email, date of birth, information about previous orders, information about the type of received product, information about the number of paid shipments, and information about the data subject’s activity in receiving products from the controller.

4.4 For the purpose of protecting rights, personal data is processed only to the extent necessary for this purpose – in the extent of necessary documentation.

DURATION OF PERSONAL DATA PROCESSING

5.1 For the purpose of fulfilling the contract (order), personal data is processed for the duration of fulfilling and the term of the relevant contract and for 3 years thereafter, for the purpose of handling complaints, guarantees, or other claims by the data subject or for debt collection by the controller.

5.2 For the purpose of direct marketing to customers, personal data is processed indefinitely, but no later than until the data subject objects to direct marketing. Data for segmentation is stored for a maximum of three years.

5.3 For the purpose of direct marketing on request of the data subject, personal data is processed indefinitely, but no later than until the data subject withdraws consent.

5.4 For the purpose of protecting rights, personal data is processed for the necessary period, during which an audit by supervisory authorities, claims can be made, or debts and rights can be enforced, which is up to 3 years or the duration of the proceedings from the realization of the purchase contract or its termination. This processing does not affect further processing retained by the controller under applicable legal regulations, such as retaining tax documents for ten years, etc.

WITHDRAWAL OF CONSENT, OBJECTIONS, AND COMPLAINTS

6.1 Consent given by the data subject may be withdrawn at any time by sending a written statement to email info@soma.vision or to the address Zeiberlichova 53, 644 00, Brno Soběšice.

6.2 If processing is based on legitimate interest, the data subject may file objections. Objections to processing for the purpose of direct marketing mean the cessation of this processing. For other purposes, objections will be reviewed for legitimacy, and the data subject will be informed of the handling of these objections. Objections can be submitted by email to info@soma.vision or to the address Zeiberlichova 53, 644 00, Brno Soběšice.

6.3 If the data subject believes that the controller is not complying with legal regulations in processing personal data or has other concerns, they may file a complaint to email info@soma.vision or to the address Zeiberlichova 53, 644 00, Brno Soběšice.

6.4 The data subject may also file a complaint with the Office for Personal Data Protection.

RECIPIENTS AND PROCESSORS

7.1 The recipient of personal data is the controller.

7.2 Personal data may be accessed, to the necessary extent, by processors from the following categories: e-shop platform operators, marketing companies, commercial call centers, accounting firms, auditing firms, legal service providers, personnel and training companies, IT service providers, internet marketing companies, marketing system development, sales, and service companies, enterprise system development and implementation companies, web and mobile application development companies, software license providers for online communication, and packaging and delivery companies. These companies include: Zásilkovna, Česká pošta, GLS, PPL, Raiffeisen Bank, MailChimp, Google, Meta, Seznam.

COOKIES

8.1 To ensure the easiest use of the website, cookies are used. Other purposes of cookies include displaying relevant advertisements.

8.2 The conditions for using cookies are described in the Cookies document, which can be found here.

INFORMATION ON THE RIGHTS OF DATA SUBJECTS

9.1 Right to Access, Transparent Information, and Procedures for Exercising Rights

The data subject has the right to information about what personal data the controller processes about them.

The controller will take appropriate measures to provide the data subject with information in a concise, transparent, intelligible, and easily accessible form using clear and plain language (e.g., information about the data processor and the processing process) and make all processing information available. The controller will provide information in writing or by other means (e.g., electronically). If the identity is verified by other means, the data subject also has the right to request this information orally.

The controller will not refuse to comply with the data subject’s request (e.g., the right of access) unless they can prove that they cannot determine the identity of the data subject to whom the data relates.

The data subject has the right to be informed of the measures taken without undue

Company ID: 19675739

VAT ID: CZ19675739

We are VAT payers.