Privacy policy
THE PRINCIPLES OF PERSONAL DATA PROCESSING
1. PRIVACY POLICY , COOKIES
1.1 The www.hashba.com website (hereinafter “website”), operated by HASHBA of
Giovanni Berruyer and hosted by Squarespace, collects personal data to power the site
analytics, including: information about the browser, network and device, web pages
visited prior to the website, IP address, details about clicks, internal links, pages
visited, scrolling, searches, timestamps.
1.2 The collected information are being shared with Squarespace, the analytic provider, for
the purpose of the de-personalised form of analysis of the site traffic and activity and
protection and improvement of the platform and services.
1.3 The website uses Cookies and similar technologies, which are small files or pieces of
text that download to a device when the visitor accesses a website. For information
about viewing cookies dropped to the device, please visit the cookies Squarespace
uses.
1.4 The functional and performance cookies are used only when the visitor acknowledge
the cookie banner. The website uses analytics cookies to view site traffic, activity, and
other data.
1.5 HASHBA of Giovanni Berruyer may e-mail the visitor with messages about the order
or account activity such as creation of a Customer account, reset or updating of the
password, about purchase made, shipment of the order. It is not possible to unsubscribe
from these messages.
2. GDPR
2.1 Personal data of natural person (hereinafter the “customer”) are processed in
compliance with the Regulation of the European Parliament and of the Council (EU)
2016/679 on the protection of natural persons with regard to the processing of personal
data and on the free movement of such data, and repealing Directive 95/76/EC
(hereinafter “GDPR“) by HASHBA of Giovanni Berruyer (hereinafter the
“administrator”) for one of the below specified purposes.
2.2 The administrator processes personal data of the customer primarily for the purpose of
implementation of the rights and liabilities following from the purchase contract and
for fulfillment of the purpose of the purchase contract as well as for the purpose of
legitimate interests of the seller (for application of purchase contract rights and
liabilities).
2.3 The processed data include identification and address data of the e-shop customers in
the maximum scope of the name and surname, residential address, delivery address, or
billing data (name, surname, company name, business IF, V.A.T. ID, company
address), e-mail, phone.
2.4 In connection with the executed purchase contracts the administrator holds data on the
implemented transactions, i.e. the purchased goods, their volume and value and
purchase-contract-related communication, and in the case of payments to the bank
account also the bank details used for the purchase price payment.
2.5 The personal data are processed for the minimum period necessary for the purpose of
their processing, but not longer than for the period specified by Czech legislation for
accounting document archiving.
2.6 Personal data will be processed in the electronic and printed format.
2.7 The processed personal data shall not be disclosed or made accessible to any other
entity, except for provision of the needed data to the delivering entity for the purpose
of the goods delivery to the customer, including notification of the delivery date and
time, further except for provision of the needed data to the payment processor for the
purpose of the purchase price payment processing, and further except for provision to
external collaborators of the company (legal representatives, accounting or tax
advisors, the e-shop webhosting provider, network developers/administrators) and
competent state or administrative authorities if these request the data from the
company within the scope of their powers and responsibilities.
2.8 Personal data provision is voluntary but without it no purchase contract may be
executed with the company via its e-shop.
2.9 By providing the personal data in the shopping cart / news subscription/contact form
and clicking on the confirming icons and by clicking on the purchase button, the Buyer
voluntarily agrees that the provided data that he/she has filled in the particular case or
were obtained based on the concluded Purchase Contract or by browsing the website,
were processed by the administrator, in order to offer services and products of the
administrator, sending information about the administrator’s activities, as well as
electronical marketing according to the Act. No 480/2004 Coll, until the consent is
withdrawn.
2.10 In connection with their personal data processing the customer may address
administrator any time to obtain information about their personal data processing
process for the purpose of application of any of the following rights:
a. Right to access to personal data: the customer may any time request a copy of personal
data processed by the administrator about him/her, as well as other information
pursuant to Art. 15 of GDPR;
b. Right to personal data rectification: if the customer believes that the data processed by
the administrator about him/her are inaccurate or incomplete then the customer may
ask for correction or extension;
c. Right to personal data erasure (right to be forgotten): if the personal data are no longer
needed for the purpose for which they were processed, the customer has withheld
his/her consent with the processing, the data has been processed illegally or for
another reason pursuant to Art. 17 of GDPR, the customer may ask the administrator
for erasure of their personal data;
d. Right to personal data processing restriction: under the terms and conditions laid down
in Art. 18 of GDPR the customer is entitled to request limitation of his/her personal
data processing by the administrator;
e. Right to personal data portability: under the terms and conditions laid down in Art. 20
of GDPR the customer is entitled to obtaining his/her personal data provided to the
administrator in a structured, standard machine-readable format;
f. Right to objection: the customer may raise an objection against his/her personal data
processing, including profiling, by the administrator for the purpose of satisfaction of
tis legitimate interest, and also in the case of their personal data processing for the
purpose of direct marketing;
g. Right to withdrawal of consent with personal data processing: the customer´s consent
is voluntary and can be withheld, fully or partly, any time. Personal data processing
before the consent withdrawal is legal. Consent withdrawal does not prevent the
administrator from processing of personal data for other legal reasons listed in Art. 6
(1) of GDPR;
h. Right to file a complaint with a surveillance office: the customer may file a complaint
with the data protection surveillance office (Personal Data Protection Office, Pplk.
Sochora 27 170 00 Prague 7), if he/she believes that his/her personal data processing
violated the personal data processing rules.
2.11 The administrator may be contacted for the purpose of personal data processing issues
on info@hashba.com
These Principles come to force and effect on 24.05.2021