Privacy policy

THE PRINCIPLES OF PERSONAL DATA PROCESSING

1. PRIVACY POLICY , COOKIES

1.1 The www.hashba.com website (hereinafter “website”), operated by HASHBA of

Giovanni Berruyer and hosted by Squarespace, collects personal data to power the site

analytics, including: information about the browser, network and device, web pages

visited prior to the website, IP address, details about clicks, internal links, pages

visited, scrolling, searches, timestamps.

1.2 The collected information are being shared with Squarespace, the analytic provider, for

the purpose of the de-personalised form of analysis of the site traffic and activity and

protection and improvement of the platform and services.

1.3 The website uses Cookies and similar technologies, which are small files or pieces of

text that download to a device when the visitor accesses a website. For information

about viewing cookies dropped to the device, please visit the cookies Squarespace

uses.

1.4 The functional and performance cookies are used only when the visitor acknowledge

the cookie banner. The website uses analytics cookies to view site traffic, activity, and

other data.

1.5 HASHBA of Giovanni Berruyer may e-mail the visitor with messages about the order

or account activity such as creation of a Customer account, reset or updating of the

password, about purchase made, shipment of the order. It is not possible to unsubscribe

from these messages.

2. GDPR

2.1 Personal data of natural person (hereinafter the “customer”) are processed in

compliance with the Regulation of the European Parliament and of the Council (EU)

2016/679 on the protection of natural persons with regard to the processing of personal

data and on the free movement of such data, and repealing Directive 95/76/EC

(hereinafter “GDPR“) by HASHBA of Giovanni Berruyer (hereinafter the

“administrator”) for one of the below specified purposes.

2.2 The administrator processes personal data of the customer primarily for the purpose of

implementation of the rights and liabilities following from the purchase contract and

for fulfillment of the purpose of the purchase contract as well as for the purpose of

legitimate interests of the seller (for application of purchase contract rights and

liabilities).

2.3 The processed data include identification and address data of the e-shop customers in

the maximum scope of the name and surname, residential address, delivery address, or

billing data (name, surname, company name, business IF, V.A.T. ID, company

address), e-mail, phone.

2.4 In connection with the executed purchase contracts the administrator holds data on the

implemented transactions, i.e. the purchased goods, their volume and value and

purchase-contract-related communication, and in the case of payments to the bank

account also the bank details used for the purchase price payment.

2.5 The personal data are processed for the minimum period necessary for the purpose of

their processing, but not longer than for the period specified by Czech legislation for

accounting document archiving.

2.6 Personal data will be processed in the electronic and printed format.

2.7 The processed personal data shall not be disclosed or made accessible to any other

entity, except for provision of the needed data to the delivering entity for the purpose

of the goods delivery to the customer, including notification of the delivery date and

time, further except for provision of the needed data to the payment processor for the

purpose of the purchase price payment processing, and further except for provision to

external collaborators of the company (legal representatives, accounting or tax

advisors, the e-shop webhosting provider, network developers/administrators) and

competent state or administrative authorities if these request the data from the

company within the scope of their powers and responsibilities.

2.8 Personal data provision is voluntary but without it no purchase contract may be

executed with the company via its e-shop.

2.9 By providing the personal data in the shopping cart / news subscription/contact form

and clicking on the confirming icons and by clicking on the purchase button, the Buyer

voluntarily agrees that the provided data that he/she has filled in the particular case or

were obtained based on the concluded Purchase Contract or by browsing the website,

were processed by the administrator, in order to offer services and products of the

administrator, sending information about the administrator’s activities, as well as

electronical marketing according to the Act. No 480/2004 Coll, until the consent is

withdrawn.

2.10 In connection with their personal data processing the customer may address

administrator any time to obtain information about their personal data processing

process for the purpose of application of any of the following rights:

a. Right to access to personal data: the customer may any time request a copy of personal

data processed by the administrator about him/her, as well as other information

pursuant to Art. 15 of GDPR;

b. Right to personal data rectification: if the customer believes that the data processed by

the administrator about him/her are inaccurate or incomplete then the customer may

ask for correction or extension;

c. Right to personal data erasure (right to be forgotten): if the personal data are no longer

needed for the purpose for which they were processed, the customer has withheld

his/her consent with the processing, the data has been processed illegally or for

another reason pursuant to Art. 17 of GDPR, the customer may ask the administrator

for erasure of their personal data;

d. Right to personal data processing restriction: under the terms and conditions laid down

in Art. 18 of GDPR the customer is entitled to request limitation of his/her personal

data processing by the administrator;

e. Right to personal data portability: under the terms and conditions laid down in Art. 20

of GDPR the customer is entitled to obtaining his/her personal data provided to the

administrator in a structured, standard machine-readable format;

f. Right to objection: the customer may raise an objection against his/her personal data

processing, including profiling, by the administrator for the purpose of satisfaction of

tis legitimate interest, and also in the case of their personal data processing for the

purpose of direct marketing;

g. Right to withdrawal of consent with personal data processing: the customer´s consent

is voluntary and can be withheld, fully or partly, any time. Personal data processing

before the consent withdrawal is legal. Consent withdrawal does not prevent the

administrator from processing of personal data for other legal reasons listed in Art. 6

(1) of GDPR;

h. Right to file a complaint with a surveillance office: the customer may file a complaint

with the data protection surveillance office (Personal Data Protection Office, Pplk.

Sochora 27 170 00 Prague 7), if he/she believes that his/her personal data processing

violated the personal data processing rules. 

2.11 The administrator may be contacted for the purpose of personal data processing issues

on info@hashba.com

These Principles come to force and effect on 24.05.2021