Privacy policy
How Ler digital studio s.r.o. processes the personal data of website users and customers, and what rights you have.
Effective from 1 January 2019
1.General provisions
This Personal Data Processing Policy (the “Policy”) is issued by Ler digital studio s.r.o., company ID: 07647115, registered office at Platnéřská 90/13, Prague 1, Staré Město 110 00 (the “Company” and the “Studio”).
This Policy describes how the Company collects, processes and shares information about users (“users”) of the website www.lerstudio.cz and its subdomains (e.g. hire.lerstudio.cz) and about customers (“customers”) using its services. This Policy does not apply to information that the Company’s customers process using its services.
The Company is both the controller and the processor of the personal data of customers who provide it when ordering goods and services, joining a loyalty programme or subscribing to a newsletter, and of users of the website www.lerstudio.cz. The Company may use the further processors listed below.
We recommend that you read the entire Policy and make sure you fully understand it. If you have any questions about this Policy or about how the Company collects, processes and shares personal data, please contact us at hello@lerstudio.cz.
2.What data we process
The Company processes data obtained from the use of the website and through cookies. To better target advertising campaigns and improve the website, the Company uses information about the pages a user viewed, links they clicked and other activity on the website, such as filling in order and contact forms. This data is collected automatically by the Company’s tools and the tools of the processors listed below. If your device allows cookies, this data is also collected through them.
The Company mainly processes the data you provide when creating and using a user account, placing an order or joining a loyalty programme, and when subscribing to a newsletter. Some personal data is required for registration (name and email address) and serves to identify the user or log the customer into their account. The data the Company processes when you subscribe to a newsletter or create a user account may include:
- first name and surname, or company name,
- email,
- phone number,
- delivery address,
- company identification details,
- payment details,
- access credentials to servers, email and website,
- any other data strictly necessary to perform the contract.
The Company does not knowingly collect information from children under 15, and children under 15 may not use its services. If you learn that a child has provided us with personal information in breach of this Policy, please let us know at hello@lerstudio.cz.
3.Purposes of processing
The Company always processes personal data solely for the purposes for which it was collected, on the basis of legitimate interest, a legal obligation or consent given. We process personal data for various purposes, mainly:
- to perform concluded contracts and orders,
- to meet legal obligations in accounting and taxes, or as required by other applicable laws and regulations, or by any court proceedings or government agency,
- to communicate with customers, including information about current services and products, updates to the terms and conditions, and for marketing and promotional purposes,
- to reply to enquiries from website users,
- to handle responses to specific job offers,
- for website traffic analytics to improve our services and offering,
- for marketing communication by electronic means,
- to process transactions and detect fraud,
- to target potential customers with online advertising. To better target ads and optimise the website, the Company uses information about user activity on the website, including data obtained through cookies,
- for push notifications. If you have this feature enabled, the Company may send push notifications directly in the website interface. They are shown on the basis of your consent given after the relevant notice is displayed.
4.Processors with access to data
Personal data is processed mainly by the Company and its employees, who are bound by confidentiality, and by the Company’s suppliers where processing is related to the performance of concluded contracts and orders (e.g. delivery companies).
The Company may also use processors. They may process personal data only for the purposes and in the manner determined by the Company and may not disclose it further without consent. We only pass on the data processors strictly need to provide their services. The Company uses the following processors:
- Google LLC (web analytics and online marketing tools),
- Facebook Ireland Ltd. (online marketing tools),
- Seznam.cz, a.s. (online marketing tools).
In justified cases, the Company may also transfer personal data to other entities (processors). Personal data may be transferred to:
- processors handling personal data on the Company’s instructions in public relations, electronic data management or accounting,
- public authorities and other entities where required by law,
- other entities in the event of an unexpected situation in which disclosure is necessary to protect life, health, property or another public interest, or to protect our rights, property or safety.
5.How long we keep personal data
Personal data for the purposes listed in section 3 is processed to the extent and for the time necessary to achieve them, or for the period set directly by law. After that, it is deleted or anonymised.
After this period, personal data may only be kept for state statistical, scientific and archiving purposes. The basic retention periods are listed below.
- For registered customers, the Company processes personal data until their registration is cancelled. Data about customers’ contact persons is processed for the duration of the business relationship or until the customer updates it.
- For service customers, the Company may process their basic personal, identification and contact details, service data and communication with the Company for 10 years from the end of the last contract.
- When goods are purchased from the Company, it may process the customer’s basic personal, identification and contact details, data on the goods and communication for 5 years from the end of the warranty period.
- Invoices issued by the Company are archived for 10 years from their issue in accordance with Section 35 of Act No. 235/2004 Coll., on Value Added Tax. To document the legal basis for invoicing, contracts are also archived for 10 years from the end of the contract.
- Data obtained for marketing purposes is processed for as long as consent lasts, including while the user allows cookies in the website settings or in their browser. Processing may continue after consent is withdrawn, at most until the relevant cookies expire.
- Commercial and marketing communications by electronic means are sent until consent is withdrawn or the user unsubscribes.
6.Withdrawing consent
Customers can unsubscribe from any marketing and commercial communications at any time:
- by clicking the link in the footer of each communication,
- on the dedicated web page,
- by sending a request to the contact given.
Users can disable ad targeting (cookies) directly in their browser. If you block selected cookies, some parts of the website may not work properly.
7.How data is processed and stored
Personal data is processed and stored:
- by machine (automatically) using computer hardware and software,
- in writing.
8.Your rights
A data subject who is an identifiable natural or legal person and proves their identity has the following rights:
Right of access
Under Article 15 GDPR, you have the right of access to your personal data, which includes the right to obtain from the Company:
- confirmation of whether it processes your personal data,
- information about the purposes of processing, categories of personal data concerned, recipients to whom the data has been or will be disclosed, the planned retention period, your right to request rectification or erasure or restriction of processing or to object to processing, your right to lodge a complaint with a supervisory authority, all available information about the source of the data if not obtained from you, the existence of automated decision-making including profiling, appropriate safeguards for transfers outside the EU, and — provided the rights and freedoms of others are not adversely affected — a copy of the personal data.
For repeated requests, the Company may charge a reasonable fee for a copy of the personal data.
Right to rectification
Under Article 16 GDPR, you have the right to have inaccurate personal data the Company processes about you corrected. You are also required to report changes to your personal data and document them, and to cooperate with the Company if your data is found to be inaccurate. We will make corrections without undue delay, subject to technical possibilities.
Right to erasure
Under Article 17 GDPR, you have the right to have your personal data erased unless the Company demonstrates legitimate grounds for processing it. The Studio has mechanisms in place to automatically anonymise or delete personal data once it is no longer needed for the purpose for which it was processed.
Right to restriction of processing
Under Article 18 GDPR, until your request is resolved you have the right to restrict processing if you contest the accuracy of the data or the grounds for processing, or object to processing — in writing to the Company’s registered office.
Right to notification of rectification, erasure or restriction
Under Article 19 GDPR, you have the right to be notified by the Company of any rectification, erasure or restriction of processing. If personal data is rectified or erased, the Company will inform the individual recipients unless this proves impossible or involves disproportionate effort.
Right to data portability
Under Article 20 GDPR, you have the right to receive the data concerning you that you provided to us as controller in a structured, commonly used and machine-readable format, and to ask us to transfer it to another controller. We cannot comply if exercising this right would adversely affect the rights and freedoms of third parties.
Right to object
Under Article 21 GDPR, you have the right to object to the processing of your personal data by the Studio. Unless the Company demonstrates compelling legitimate grounds that override your interests, rights and freedoms, the Studio will stop processing without undue delay.
Right to withdraw consent
If you have given the Company consent to process personal data, you may withdraw it at any time. Withdrawal must be an explicit, clear and specific expression of will, either in writing to the Company’s registered office or by email to hello@lerstudio.cz.
Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. The Company does not carry out automated decision-making with legal effects without human review.
Right to lodge a complaint
You have the right to lodge a complaint about our processing of your personal data with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
9.Security
The Company is committed to protecting the personal data and other information of its customers and users of its services. It uses a range of security technologies and measures designed to protect information from unauthorised access, use or disclosure, providing a level of security appropriate to the risk of misuse. Security is tested regularly and continuously improved. Please bear in mind, however, that 100% security cannot be guaranteed on the internet.
All personal data in electronic form is stored in databases and systems accessible only to persons who need to handle it directly for the purposes set out in this Policy, and only to the extent necessary.
10.Contact
If you have any questions about this Privacy Policy or want to exercise your rights, contact us at hello@lerstudio.cz.
The controller of your personal data is Ler digital studio s.r.o., company ID: 07647115, registered office at Platnéřská 90/13, Prague 1, Staré Město 110 00.
11.Updates to this Policy
Please note that we may amend or update this Privacy Policy. Any changes take effect once published on this page and at www.lerstudio.cz/ochrana-osobnich-udaju.
Questions about your personal data or cookies?
hello@lerstudio.cz