Notice to EU individuals: this Policy is intended to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the “GDPR”) and Act No. 110/2019 Sb., on Personal Data Processing, as amended.
Notice to California residents: this Privacy Statement is intended to comply with the California Consumer Privacy Act ("CCPA") and other applicable California law.
Notice to Nevada consumers: this Privacy Statement is intended to comply with Nevada Senate Bill 220.
Conceptar is entitled to change this Policy at any time with immediate effect. You will be informed about such changes. The date of the latest version of this Policy is available at the footer of our Website.
By using the Website, you acknowledge that you understand that we will use your personal data in accordance with this Policy. Where required by law, you will also be asked to provide clear and unequivocal affirmative consent to the collection, processing, and sharing of your personal data via cookies and similar technologies.
Your personal data will be processed under the conditions below by us via conceptar,an e‑shop operator of the Website and the data controller of your personal data. In order to exercise your rights relating to the processing of your personal data, you may contact us directly through our contact details:
- If you are an individual in the EU/EEA/UK: GAME CHANGER a.s., Šeříková 681/4, Prague 5, 150 00
- If you are an individual in the United States: GAME CHANGER a.s., Šeříková 681/4, Prague 5, 150 00
Our processing of personal data is both manual and automated. Automated processing of personal data is used in order to perform the contract, in particular, to ensure internal processes within conceptar and its contractual partners that are necessary for the provision of services. Automated processing of personal data is also used if consent to sending marketing communications is granted.
The Policy thus describes the purposes and methods of personal data processing, informs about individual categories of processed personal data, their potential recipients, retention periods and your rights in relation to personal data protection.
WHAT PERSONAL DATA DO WE COLLECT:
Conceptar may store and otherwise process personal data you provide to us in connection with the use of our services, especially when entering into a purchase agreement with us through the Website or by subscribing to our newsletters.
In particular, the following personal data are processed:
- name, surname, e-mail address, telephone number, home address, delivery address, bank account number or credit card number, other voluntarily provided information you fill in as part of the registration or order creation (such as apartment number, apartment floor etc.), and details of the purchased goods.
In connection with your activities on our Website, we further collect and process your IP address and cookies.
All personal data we process come directly from you.
FOR WHICH PURPOSES DO WE PROCESS PERSONAL DATA:
We may process your personal data for one or more of the following purposes:
- Performance of the purchase agreement and other contracts, especially managing and processing personal data to create a personal profile within our Website, managing and processing of your purchase through the Website. We use your personal information to deliver to you your ordered goods, to inform you about the status of your order or to exercise your right to withdraw from the purchase agreement or other claims;
- Creation of a user account;
- Fulfilment of legal obligations, especially keeping accounting records and fulfilling our other statutory duties;
- Protection of the controller’s legitimate interest, especially improving the quality of our services and developing new ones, protection against misuse, detection of online frauds related to payment means, prevention and settlement of payment deficiencies;
- Sending commercial communications, especially by email, SMS/MMS or postal service providers to let you know about the latest discounts, latest news, new products, promotions and other related information;
- Sending personalised commercial communications, exclusively with your consent, we may send relevant commercial communications based on analysing your preferences and display content that matches your individual needs;
- Handling buyers’ requests, especially responding to your query sent via contact details or contacting us via telephone customer support, recovery of claims and the exercise of our rights (for example in the case of a lawsuit concerning our services).
In connection with your activities and depending on the scope of your activities, the Website may process the following personal data for the following purposes:
Purposes of processing:
Login and password
performance of the contract, creation of a user account, fulfilment of legal obligations, protection of the controller’s legitimate interest, handling users’ requests
Name, surname, e-mail address, telephone number, home address, delivery address, bank account number or credit card number
performance of the contract, fulfilment of legal obligations, protection of the controller’s legitimate interest, handling users’ requests, sending commercial communications
Name, surname, e-mail address, telephone number
creation of a user account
Personal communication or correspondence
performance of the contract, protection of the controller’s legitimate interest, handling buyers’ requests
Site usage data
protection of the controller’s legitimate interest, sending commercial communications, sending personalised commercial communications
WHAT ENTITLES US TO THE PROCESSING OF PERSONAL DATA?
Conceptar is authorized to process your personal information under at least one of the following legal bases:
- Performance of the contract. The most common legal basis for collecting and processing your personal data is the conclusion of the purchase agreement through the Website. In order to make a valid purchase agreement and make a purchase, you are required to provide us with your personal data. The establishment of your user account within the Website is also considered to be an agreement, when the conditions are agreed upon. Without providing the required personal data, you cannot create your user account.
- Compliance with legal obligations. In particular, with regard to invoicing and administration, your personal data is processed to meet legal obligations in relation to tax and other legal regulations.
- Consent. In some cases, we process your personal data based on your own consent. This includes, in particular, the consent to sending newsletters and related marketing communications. You may at any time withdraw your consent in accordance with the procedure outlined in this Policy. The non-granting or revocation of consent is not relevant to the processing of your personal data under different legal basis.
- Legitimate interests of conceptar. We are also authorized to process your personal data for the purposes of our legitimate interests. This is especially the case of our direct marketing or the security of our Website.
TO WHOM CAN WE PROVIDE PERSONAL INFORMATION:
Particularly for the purposes mentioned above, conceptar transfers personal data to the following partner companies, which act as processors or other controllers of personal data:
- Transporters who are responsible for delivering your ordered goods;
- Our business partners;
- Company operating our PBX for customer support purposes;
- Pay gate providers (payment card providers);
- To our tax and legal advisors in connection with the exercise of our rights;
- Partners responsible for processing returns.
When using services of personal data processors, conceptar concludes relevant data processing agreements if they are processors of personal data.
Under certain statutory conditions, we are further required to provide or transfer your personal data to, for example, law enforcement agencies (in particular the Police of the Czech Republic) and other public authorities in the countries we do business.
HOW LONG ARE YOUR PERSONAL DATA STORED:
We process and store your personal data only for the period strictly necessary for the above purposes. If personal data are processed on the basis of your consent, for the period of your consent (usually 5 years), unless your consent to the processing of personal data is withdrawn.
In the case of personal data processing, we handle and keep your personal data at least for the duration of the contract and until the expiry of the statutory or contractual limitation periods and deadlines for exercising the rights of defective performance or warranty for the possible performance, determination or defence of our claims.
We will process the personal data related to your registration and user account, including the data contained therein, in order to manage your account and send offers of our goods and services until you cancel it.
We may continue to process your personal data after the termination of the contract based on our legitimate interest, i.e. to protect our legal claims, for as long as necessary, but no longer than 3 years, unless a special legal regulation stipulates a longer period.
At the same time, we would like to point out that your personal data is retained in cases where legal regulation requires it, and only for the period prescribed by these laws (especially archiving deadlines for accounting and tax documents).
HOW ARE YOUR PERSONAL DATA SECURED:
We have put in place reasonable controls designed to help safeguard your personal data we collect via the Website. All personal data that you provide and which we process are secured by standard procedures and technologies. All security measures are regularly checked, especially for any weaknesses in the system and potential attacks. At the same time, we use security measures to prevent unauthorized access to your personal data, and to provide sufficient security with respect to the state of the art. The security measures adopted are then regularly updated. However no security measures are perfect, and we cannot assure you that personal information that we collect will never be accessed or used in an unauthorized way.
Personal data are stored on secured servers in the relevant IT systems. Access to your user account is only possible after entering your personal password. In this context, we would like to point out that it is essential that you do not share your access data with third parties and that you always log off after completing your personal activity, especially if you are using the computer together with other people. Conceptar does not take responsibility for the misuse of the passwords.
Cookies are an essential tool for the functionality of our Website. They are a short text file that a visited webpage sends to the browser that saves it to your computer. Cookies contain information about your visit, preferred language, login information and other settings. The goal of these files is to find out how these pages are used in order to optimize their content.
Cookie settings are fully under your control. In the browser settings you can set everything according to your wishes. You can delete, block, or set that the cookies will be saved only with your given consent in each instance individually.
Depending on the purpose of use, cookies can be divided into:
- Essential cookies are needed to operate the Website. They include, for example, cookies that allow you to log in to secured parts of our Website. These cookies do not collect information about users that could be used for marketing purposes or to remember which sites users visited on the Internet;
- Performance cookies we use to improve the operation of the Website. These cookies collect information about how visitors use this Website, such as which pages visitors visit most frequently and whether they receive error messages from the Website. They also allow us to record and count the number of visitors to the Website, which allows us to track how visitors use the Website;
- Functional cookies make it easy to use and improve the functionality of the Website. They are used to activate specific features of the Website and set them up to your preference (e.g. language), in order to enhance your Website experience. At the same time, functional cookies are used to remember your preferences the next time you visit the Website;
- Targeting and advertising (profiling) cookies are used to track the preferences that you reveal through the use of the Website and to send advertising messages in accordance with those preferences.
You can find more information about our cookies and their current list through individual web browsers, most often in Developer Tools.
Different browsers can also be pre-set to automatically reject cookies or automatically display information when cookies are offered. For more information on how to manage cookies in each browser, visit the following links:
- Explorer Internet Explorer - https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
- Edge Microsoft Edge - https://docs.microsoft.com/en-us/sccm/compliance/deploy-use/browser-profiles
There are also many third-party applications that allow you to block or manage cookies. You can also delete cookies that were previously stored on your device by clearing your browsing history. Make sure you check the option to clear cookies when you do so.
We use marketing tools, in particular, through Google Ireland and Facebook Ireland, to help us target ads to users who have already visited our Website. The purpose and scope of the data collection, as well as the applicable rights and options for setting the scope of privacy, can be found in the information on these third-party sites, such as:
- Facebook: https://www.facebook.com/policies; and
- Google: https://policies.google.com/privacy.
More about these marketing tools can be found at:
- Facebook: https://cs-cz.facebook.com/business/ads/dynamic-ads; and
If you don't want to be addressed by our ad, you can turn off ad personalisation by following the links below:
- Facebook: https://cs-cz.facebook.com; and
- Google: https://adssettings.google.com.
We use one of Google's basic analytics tools - Google Analytics. For information on the scope and method of processing personal data processed by this company, please visit: https://www.support.google.com/analytics/answer/6004245.
HOW YOU CAN ACCESS OR CORRECT INFORMATION
To access personal data that we have collected about you onlince from the Website on which this Police is posted, or to update your user profile, please log into your account if you have created one with us, or send an email to firstname.lastname@example.org.
WHAT KIND OF RIGHTS DO YOU HAVE WITH RESPECT TO PROCESSING OF YOUR PERSONAL DATA?
In connection with personal data processing, you have the rights listed below that you may exercise at any time in accordance with applicable data protection laws.
Privacy Rights for Individuals in the EU
If you are a resident in the EU, you have certain rights with respect to your personal data that we collect and process. We respond to all requests we receive from individuals in the EU wishing to exercise their data protection rights in accordance with applicable data protection laws.
The right to withdraw the consent. In case of processing based on your consent, you have the right to withdraw at any time the page about your personal information that is available upon login here. Withdrawal of consent is without prejudice to the lawfulness of the processing of your personal data prior to such withdrawal. Withdrawal of consent does not affect the processing of your personal data on the basis of any different legal basis, in particular in connection with the processing necessary for performance of the contract or fulfilment of a legal obligation.
The right to access personal data. In accordance with Article 15 of the GDPR, you have the right to receive confirmation of whether and what personal data are processed by conceptar and gain access to these personal data, including information about the purpose of the processing, categories of personal data, recipients, retention periods, personal data sources, if they have not been obtained directly from you, and whether automated decision making, including profiling takes place.
The right to rectify inaccurate data or complete incomplete data. You have the right to ask conceptar to correct your personal data if it is inaccurate or to complete it if it is incomplete. You may make a correction or complete your personal data through your user account on our Website if you are registered.
The right to erasure / the right to be forgotten. If you ask for erasure, conceptar will erase your personal data if: (i) they are no longer needed for the purposes for which they have been collected or otherwise processed; (ii) the processing is unlawful; (iii) you raise objections to the processing and there are no prevailing legitimate reasons for the processing of your personal data; or (iv) conceptar is required to erase the data under legal regulations. Conceptar will not comply with your request if any of the circumstances under Article 17 (3) of the GDPR prevents it from doing so.
The right to restriction of personal data processing. You have the right to restrict the processing of your personal data by conceptar if: a) you deny the accuracy of your personal data (for as long as the accuracy is verified), b) the processing is unlawful and you request for the restriction of the use of your personal data instead of the deletion; c) you will need the data to determine, exercise or defend legal claims, even if conceptar will no longer need it for further processing; or d) if you object to processing of personal data for the purposes of our legitimate interests (especially in the context of direct marketing).
The right to portability of personal data. If you want conceptar to transfer your personal data that conceptar processes based on your consent or data that are necessary for the performance of the contract to a third entity, you may exercise your right to data portability. If the exercise would adversely affect rights and freedoms of other persons, conceptar will not be able to comply with your request.
The right to object. You have the right to raise an objection to the processing of personal data that are processed for the purposes of performing a public service task or in the exercise of public authority or for the purposes of protecting conceptar’s legitimate interests. If conceptar does not prove that there is a serious legitimate reason for the processing which takes precedence over the interest or rights and freedoms of the customer, conceptar will terminate the processing based on the objection without undue delay.
Automated individual decisions. You have the right not to be the subject of a decision based solely on automated processing, including creating profiles that have legal effects for you or will have a similar effect, unless one of the legal exceptions applies.
The right to file a complaint. You have the right at any time to file a complaint with the Supervisory Authority, which is the Office for Personal Data Protection (www.uoou.cz) in Czech Republic, regarding the processing of your personal data.
In the event of repeated or apparently unjustified requests for the exercise of the above rights, conceptar is entitled to charge an appropriate fee for the exercise of the right, or to refuse its exercise. We would inform you about the procedure in advance.
Conceptar reserves its right to verify the identity of the person requesting the exercise of rights in accordance with Article 12 (6) of the GDPR. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Privacy Rights for Individuals in the United States
Residents in California
This CCPA Privacy Rights and Disclosure section addresses legal obligations and rights laid out in the California Consumer Privacy Act (‘CCPA’) and other laws that apply only to California residents. These obligations and rights apply to businesses doing business in California and to California residents and information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with California consumers or households. It does not apply to information that has been de-identified or aggregated as provided by CCPA.
California residents have certain rights regarding the personal data that businesses have about them. This includes the rights to request access or deletion of your personal data, as well as the right to direct a business to stop selling your personal data.
With Whom We Share and Sell Your Personal Information
Conceptar shares personal information as necessary for certain “business purposes,” as defined by the CCPA (Cal. Civ. Code 1798.140(d)). This includes sharing identifiers, commercial information and internet or other electronic network activity with providers of payment processing, customer relationship management, consulting, email, feedback and helpdesk services.
While conceptar does not sell personal information in exchange for any monetary consideration, we do share personal information for other benefits that could be deemed a “sale,” as defined by the CCPA (Cal. Civ. Code 1798.140(t)(1)). This includes sharing identifiers, commercial information and internet or other electronic network activity with advertising networks and website analytics companies.
Personal Data We Collect
As described above, we collect identifiers (such as name, surname, e-mail address, telephone number, home address, delivery address, bank account number or credit card number, other voluntarily provided information you fill in as part of the registration or order creation (such as apartment number, apartment floor etc.), commercial information (such as details of the purchased goods) and Internet or other electronic network activity information (such as usage information, IP address, cookie information, and customer feedback)..
Why We Collect Your Personal Information
We use identifiers to provide the services requested, such as to fulfill a request for goods.
We use identifiers and commercial information for general website administration, which includes record keeping, troubleshooting, data analysis, and testing.
We use identifiers, commercial information, and Internet or other electronic network activity for trend monitoring, marketing, and advertising, as well as to ensure website security.
The Right to Opt-out of Sale
While conceptar does not sell personal data in exchange for any monetary consideration, we do share personal data for other benefits that could be deemed a “sale,” as defined by the CCPA (Cal. Civ. Code 1798.140(t)(1)). We support the CCPA and wish to provide you with control over how your personal data is collected and shared.
You have the right to direct conceptar to not sell your personal data as you have the right to opt-out.
With respect to cookies, you can always customize your settings at any time.
Please note that we may still use aggregated and de-identified personal data that does not identify you or any individual; we may also retain data as needed in order to comply with legal obligations, enforce agreements, and resolve disputes.
Right to Request Disclosure
You have the right to request disclosure about what categories of personal data conceptar has sold or disclosed for a business purpose about you and the categories of third parties to whom the personal data was sold or disclosed. Additionally, you have the right to request disclosure of specific pieces of information. Below is a full list of the information that you can include in your request.
§ The categories of personal data that conceptar has collected about you
§ The categories of sources from which conceptar collected the personal data
§ The business or commercial purpose for collecting or selling the personal data
§ The categories of third parties with whom conceptar shares personal data
§ The specific pieces of personal data conceptar has collected about you
§ The categories of personal data that conceptar disclosed about you for a business purpose
§ The categories of personal data that conceptar has sold about you, as well as the categories of third parties to whom conceptar sold the data
If you would like to exercise your right to request disclosure, please contact us as provided below. You may make a personal data request twice in a 12-month period.
Right to Request Deletion
You have the right to request that conceptar delete any personal data about your that conceptar has collected from you. Please note that there are exceptions where conceptar does not have to fulfill a request to delete information, such as when the deletion of information would create problems with the completion of a transaction or compliance with a legal obligation.
If you would like to exercise your right to delete, please contact us as provided below.
The Right to Non-Discrimination
Conceptar will not discriminate against you (e.g., through denying goods or services, or providing a different level or quality of goods or services) for exercising any of the rights afforded to you.
Residents in Nevada
If you would like to submit a request to opt-out of the sale of your personal data in exchange for monetary consideration by us to a person for that person to license or sell your personal data to additional person, pursuant to Nevada Senate Bill 220, please contact us as provided below.
CALIFORNIA AND DELAWARE “DO NOT TRACK” DISCLOSURES
California and Delaware law require conceptar to indicate whether it honors “Do Not Track” settings in your browser concerning targeted advertising. Conceptar adheres to the standards set out in this Policy and does not monitor or respond to Do Not Track browser requests.
INTERNATIONAL DATA TRANSFERS
We operate internationally, and are based in Prague. Personal data that we collect may be transferred to, and stored at, any of our affiliates, partners or service providers which may be inside or outside the European Union, EEA, UK, and Switzerland, and includes the United States. By submitting your personal data, you agree to such transfers. Your personal data may be transferred to countries that do not have the same data protection laws as the country in which you initially provided the information. When we transfer or disclose your personal data to other countries, we will protect that information as described in this Policy.
We will always protect your information in accordance with this Policy wherever it is processed.
We do not knowingly collect or solicit personal information from anyone under the age of 13. If you are under 13, please do not attempt to purchase any goods or send any personal data about yourself to us. If we learn that we have collected personal data from a child under age 13, we will delete that information as quickly as possible. If you believe that a child under 13 may have provided us personal data, please contact us at email@example.com.
To make any request under this section, please email us as outlined below from the email address associated with your account. We may ask you for additional information to confirm your identity and that we are providing access to information about the correct person. We will do our best to respond to your request within one month and, in any event, we will respond within the timescales required by applicable data protection and/or consumer privacy law.
You can modify your cookie preferences by following the procedure outlined in the Cookie section of the Privacy Statement above. Of course, if you have any questions, please contact us as outlined below.
Postal address: conceptar.com, GAME CHANGER a.s., Kaprova 42/14, Prague – 110 00, Czech Republic
e-mail address: firstname.lastname@example.org.