Data Processing Policy

We are Light In Space SE, located at Petrohradská 216/3, Prague 10.

We operate an online shop at gfBar.cz.

To provide our services, sell goods, and operate our website, we process some personal data.

The processing of personal data is primarily governed by the regulation of the European Parliament and Council (EU) 2016/679 of April 27, 2016, on the protection of individuals in relation to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR")

 

The processing of personal data in the case of using the contact form

If you inquire about our products and services, we will work with your contact details that you provide to us, mainly through the inquiry form. These are: first name, last name, email address, phone number.   

For what reason?

We contact you through these for further arrangements regarding the supplied goods and services.

On what legal basis?

This is processing based on Article 6(1)(b) of the GDPR – actions related to a contract, or taking steps at your request prior to entering into a contract. How long will we process personal data? If we do not establish further cooperation, we will process your data for a maximum of 90 days from our last communication.

Processing of personal data in the case of a purchase

If you make a purchase with us, we will work with the information you provide.

 

These mainly include billing details: first name, last name, address, email address, phone number.

For what reason? These are mainly billing details: name, surname, address, email address, phone number.

For what reason?

We need to process personal data to fulfill our contract – to deliver our goods or services to you. We will also communicate with you regarding the status of your order, as well as any complaints or your inquiries through your contact details.

We will further process personal data to fulfill our obligations arising from the law (mainly for accounting and tax purposes, or for handling complaints and others). 

On what legal basis do we process personal data?

This is processing based on Article 6(1)(b) of the GDPR – fulfilling a contract and Article 6(1)(c) of the GDPR – fulfilling our legal obligation. How long will we process personal data? 1 letter b) GDPR – fulfillment of the contract and Art. 6 par. 1 letter c) GDPR – fulfillment of our legal obligation.

How long will we process personal data?

For the duration of our service and then for 90 days from the last provision of such service or delivery of goods.

 

Newsletters (commercial communications)

If you are a purchasing customer and you have not opted out during your purchase, we will use your email address and possibly your phone number to send you our updates.

On what legal basis?

This allows us under § 7(3) of Act No. 480/2004 Coll., on certain information society services, unless you have opted out during your purchase. How long will we process personal data? Five years from your last purchase. 480/2004 Coll., on certain information society services, if you haven't prohibited it during your purchase.

How long will we process personal data?

Five years from your last purchase. You can unsubscribe from the mailing list at any time via email or contact us at help@gfBar.com

 

Who has access to the data?

Your data will remain with us. However, some companies or individuals work for us and may access the data because they help us operate our online shop. These include:

• the operator of the e-commerce platform Shopify
• companies involved in the shipping of goods
• companies involved in payment processing
• the email service provider, Ontraport.

 

What else should you know?

In our company, we do not have a designated data protection officer.

Our company does not engage in decision-making based on automated processing or profiling.

If you have questions about personal data, contact us at help@gfBar.com or call +420 272 101 121.

Your rights regarding the processing of personal data

The GDPR regulation gives you the right to contact us and request information about what personal data we process, request access to this data, and have it updated or corrected. You can also request a restriction on processing, ask for a copy of the processed personal data, request the deletion of personal data in certain situations, and in some cases, you have the right to data portability. You can object to processing based on legitimate interest.

If you believe we are not handling your data correctly, you have the right to file a complaint with the Office for Personal Data Protection, or you can bring your claims to court.

These terms are effective from the 7th.7.2021