Who we are

Our website address is: http://www.enc-hr.com/

Basic information

Data Controller

We are All 4 Finance s.r.o., company ID 29353211, VAT CZ29353211, with registered office at Bartákova 2253/13, Líšeň, 628 00 Brno, represented by the Managing Director Kamil Růžička as the controller we process your personal data.

What personal data we process

Personal data you provide us with

We process personal data that you provide to us

Personal data that we obtain other than directly from you

We may also process your personal data as part of joint marketing campaigns. We may combine them for the purposes of marketing campaigns or for the proper performance of a contract.

In the event that your personal data is transferred to another entity, we will inform you in advance, including an indication of to whom we are transferring the personal data. If someone passes your personal data to us, they must also inform you in advance.

Personal data of third parties that you provide to us

If you provide us with personal data of third parties, it is your responsibility to inform the person concerned and secure their consent to this privacy policy.

For example, it may happen that you purchase goods from us but do not wish to collect or claim them. By doing so, you will also provide us with their personal data.

Personal data that we process automatically

When you visit our website, we may collect certain information about you, such as your IP address, the date and time you accessed our website, information about your internet browser, operating system or your language settings. We may also process information about your behaviour on our website, e.g. which links you visit on our website and which products you are shown. However, for your maximum privacy, information about your behaviour on the website is anonymised and therefore we are unable to attribute it to a specific user, i.e. a specific person.

If you access our website from a mobile phone or similar device or through one of our mobile applications, we may also process information about your mobile device (data about your mobile phone, any records of application crashes, etc.).

Cookies

We also process cookies automatically.More about cookies

What is a cookie?

It is actually a small text file that is created when you visit any website. It is used as a standard tool to store information about how our site is used.

We can thus distinguish (but not identify) individual users from each other and tailor content to specific preferences. Cookies are important. Without them, browsing the web would be much more difficult.

What are cookies used for?

Cookies serve several purposes. We use the following cookies on our online shop pages and in our mobile apps:

Technical cookies: we use technical cookies to make our online shop work properly (e.g. so that you can create a user profile, log in and buy goods and services). Without them, our online shop could not function at all.

Functional cookies: so that you don’t have to log in all the time and so that you don’t have to set your preferences over and over again (e.g. setting the language in which our online shop is displayed to you), functional cookies help you. In this case, your password is always encrypted. The use of these cookies is not necessary, but they will make your visit to our online shop much more pleasant and easier.

Analytical cookies: analytical cookies help us to improve our online shop, which in turn benefits you. Analytical cookies on our website are collected by a script from Google Inc., which then anonymises this data. Once anonymised, it is no longer personal data, as anonymised cookies cannot be assigned to a specific user or person. We only work with cookies in anonymised form. Therefore, we cannot determine from the cookies how a particular user has behaved on our website (which pages they have visited, what goods they have viewed, etc.).

We also use the knowledge from these cookies for advertising purposes, where we can also show you advertising on other websites that we consider relevant to you based on this data. If you want to control what analytics cookies we process for you, you can use this additional program from Google (can only be run from a computer).

How you can control which of your cookies we process

You can simply use a common internet browser (e.g. Internet Explorer, Safari, Firefox, Chrome) with the anonymous browsing feature enabled to prevent the storage of data about the websites you visit, or you can disable the storage of cookies in your browser altogether. However, if you also disable the processing of technical and functional cookies, this will prevent some functions that help you from working.

You can easily control the processing of analytics cookies by us if you use this additional program from Google (can only be run from your computer). However, by disabling analytics cookies, you will unfortunately make it much more difficult for us to improve our online shop.

Mobile phone and mobile app versions

If you access our website from a phone, tablet or similar device, we optimise it for these devices. In this case, we process your personal data in a similar way to accessing it from a computer.

If you allow the app to use location data, we may also use your device’s location to provide you with a better user experience and more relevant offers of goods and services. We may also use the data we collect in this way to send you tailored commercial communications. If you do not wish to do so, you can easily opt-out of receiving commercial communications altogether by sending an email to [email protected]

Similarly, you may be shown personalised content directly on our website.

Why we collect and process your personal data

We process your personal data for the following reasons:

Purchase of goods and services: primarily, we process your personal data to properly process and deliver your order. If any problems arise, your personal data helps us know who to contact.
Customer care: if you contact us with a query/problem, we need to process your data to answer/resolve it. In some cases, personal data may also be passed on to third parties (e.g. carriers of goods).
User account: thanks to the personal data you provide us in your user profile, a number of useful functions are made available to you (e.g. if you provide your phone number, we can easily inform you when your order will be delivered). You can change the information you provide at any time, with the exception of your email address, which is used to access your user account.
Marketing activity:
Email marketing: we send you email marketing communications based on your consent. You can easily unsubscribe from receiving marketing communications by emailing us at [email protected]
Telemarketing: we make marketing calls to offer our goods and services and related marketing communications. The legal basis for processing your telephone number is either your consent or at least our legitimate interest in conventional direct marketing. You can object to this processing.
Marketing competitions: in some cases, the winner of a competition may be photographed or filmed, in particular to increase the transparency of our marketing competitions. We carry out this processing of personal data on the basis of our legitimate interest, which is to increase the credibility of our marketing competitions in the eyes of other competitors and to increase the attractiveness of these competitions. You can object to this processing.
Improving our services: by using your order history and behaviour on the website, we can offer more relevant offers for other goods, such as accessories for the products you have purchased. We therefore display products in certain places that are directly relevant to you and match your needs and interests. We can also use tools for testing different variants (so-called A/B testing), Google Analytics, Facebook Analytics, etc. to optimize elements on the website.
Customer ratings of goods and services: after you have purchased goods or services from us, you may be asked to rate them. You can also submit a rating on your own initiative.
Call centre: if you contact us via our call centre (hotline), we will record your phone call without prior notice. Such recordings serve us to check the quality of service provided by our employees.
Exercise of rights and legal claims and control by public authorities: we may also process your personal data on the grounds that we need it to exercise our rights and legal claims (e.g. in the event that you have an outstanding claim against us or to prove delivery of ordered goods). We may also process your personal data because we need it for the purposes of inspections by public authorities and for other similarly compelling reasons.

We process personal data on the following legal grounds

Performance and conclusion of a contract

We need a large part of your personal data in order to be able to enter into a purchase or other contract with you in relation to the goods or services you wish to purchase from us. Once the contract is concluded, we process your personal data in order to properly deliver the goods you have purchased or to properly provide you with the services you have purchased. On the basis of this legal basis, we therefore process primarily billing and delivery data.

Legitimate interests

We also use your personal data to provide you with relevant content, i.e. content that is interesting to you. On the basis of legitimate interest, we process personal data that we process automatically and cookies in particular in this way.

For the same legal reason, we may send you as our customer email and SMS messages. The processing of your personal data on this legal basis also takes place in the monitoring carried out via cameras at our individual locations.

In order to protect against illegal distribution and access to the e-book (or other electronic content) you have purchased, your name and address are displayed in the e-book.

If we process your personal data on this legal basis, you may object to this processing.

Consent

For the purposes of sending commercial communications (e-mail marketing) and telemarketing, we process your personal data on the basis of your consent. If you do not give us consent and you are our customer, we may send you commercial communications (or call you in the context of telemarketing) without your consent.

Transfer of personal data to third parties

In the following cases, we transfer your personal data to third parties:

Delivery of goods: the carrier you have chosen would never be able to deliver the goods you have ordered unless we have given them, among other things, details of where and to whom they are to deliver the goods. We will pass this information to the carrier according to how you fill it in the order. The information so provided includes, in particular, your name and surname, the delivery address, a telephone number at which the carrier can contact you and, if the goods have not been prepaid, the amount to be paid on receipt of the goods, if any. The carrier is entitled to process the personal data we transmit to it only for the purpose of delivery of the goods and to delete the personal data without delay thereafter.
Delivery of goods stored for us by a contractual partner: if you order goods from us that are in the warehouse of our contractual partner, we must transfer your personal data to that contractual partner to complete the order. The data so transmitted includes, in particular, your name and surname, the delivery address, a telephone number at which the carrier can contact you and, if the goods have not been prepaid, the amount to be paid on receipt of the goods, if any. The contractual partner must then pass on the personal data to the carrier who will deliver the goods, otherwise the carrier would not be able to deliver the goods to you. Both the contractual partner who stores the goods for us and the carrier are obliged, in relation to the personal data we pass on to them, to use this personal data only for the purpose of storing/delivering the goods and to delete it without delay thereafter.
Payment cards: our company does not hold details of the payment cards you use to pay with us. Only the secure payment gateway and the relevant banking institution have your payment card details.
Commercial communications: in the case of sending commercial communications (e.g. by email or SMS) or telemarketing, we may use a third party to send the communications or make the telephone calls. This entity is bound by confidentiality obligations and may not use your personal data for any other purpose.
Public authorities: in the case of the enforcement of our rights, your personal data may be transferred to a third party (e.g. a lawyer). If the law or a public authority (e.g. the Police of the Czech Republic) obliges us to pass on your personal data, we must do so.

How long do we process your personal data?

In the first instance, we will process your data for the duration of the contractual relationship between us.

In the case of processing of personal data for which consent has been given, your personal data will generally be processed for a period of 7 years or until such consent is withdrawn.

In the event that you subscribe to commercial communications, we will process your personal data for a period of 7 years, or until you have opted out of receiving further communications.

Please also note that we must process those personal data that are necessary for the proper provision of services or for the fulfilment of all our obligations, whether these obligations arise from a contract between us or from generally binding legal regulations, regardless of the consent you have given, for the period of time specified by or in accordance with the relevant legislation (e.g. for tax documents, this period is at least 10 years).

We process the data obtained through a user account or other similar means for the duration of the use of our services and then usually for 5 years after cancellation. Thereafter, only basic identification data and information on the reason for which the user account was cancelled or data forming part of operational backups are usually stored for a reasonable period of time.

Call centre call recordings are retained for a short period of time, but no longer than 1 year, unless it is necessary for us to retain the recordings for a longer period of time due to legitimate interest (e.g. suspected misuse of data, fraud, etc.).

We will store your CCTV footage for 90 days as standard. If an illegal act occurs in the monitored area, we may contact the police and hand over the recordings to the relevant authority (police, court, etc.). In this case, the records are not deleted after 90 days, but for evidentiary reasons we keep them until the final conclusion of the case.

Security of personal data

Your personal data is safe with us. In order to prevent unauthorised access and misuse of your personal data, we have put in place appropriate measures, both technical and organisational.

We regularly check their security but continuously improve their protection. All communication between your device and our web servers is encrypted. Login credentials are hashed and all your data is only stored on servers in secure data centres with limited, carefully controlled and audited access.

We strive to use security measures that provide sufficient security in light of the current state of technology. The security measures adopted are then regularly updated.

Therefore, we use two-factor authentication at the time you log in to your user account.

What rights do you have in relation to the protection of your personal data?

In relation to your personal data, you have, in particular, the right to withdraw your consent to the processing of your personal data at any time, the right to rectify or supplement your personal data, the right to request the restriction of its processing, the right to object to or complain about the processing of your personal data, the right to access your personal data, the right to request the transfer of your personal data, the right to be informed of a breach of security of your personal data and, under certain conditions, the right to erasure of certain personal data that we process in relation to you (the so-called “right to be forgotten”).

Modification and completion

According to the amendment to Act No. 235/2004 Coll., on value added tax, it is not possible to change the data in an invoice already issued as of 1 January 2013. The data on the invoice can only be changed if you have not yet received and paid for the goods.

Deletion

You can also request that we delete your data (however, deletion does not affect data on documents that we are required by law to keep (e.g. invoices or credit notes). If we need your personal data to establish, exercise or defend our legal claims, your request may be refused (e.g. if we have an outstanding claim against you or if we have a claim pending).

Please note that your core payment card information is not stored with our company, but with our payment gateway. Therefore, this data cannot be deleted by us and you must contact the payment gateway through which you made the payment.

With the exception of the cases mentioned above, you have the right to erasure in the following cases:

The personal data are no longer necessary for the purposes for which they were processed.
You have withdrawn your consent on the basis of which the data was processed and there is no further legal basis for processing it
You have raised an objection to the processing of personal data and you consider that, on examination of the objection, it appears that in the particular situation your interest outweighs our interest in processing the personal data
The personal data are being processed unlawfully
The obligation to erase is laid down in a specific legal provision
This is personal data of children under the age of 16

Objection

We process some of your personal data on the basis of our legitimate interest (see the section of this policy entitled “We process personal data on these legal grounds”). If there are specific grounds on your part, you may object to the processing of this personal data about you.

Restrictions on processing

If

(a) you contest the accuracy of your personal data

(b) your personal data is processed unlawfully

(c) we no longer need your personal data for the purposes of processing but you need it to establish, exercise or defend your legal claims, or if you are

(d) have raised an objection under the previous paragraph, you have the right to have us restrict the processing of your personal data.

In this case, we can only process your personal data with your consent (except for the storage or backup of the personal data in question).

Lodging a complaint

If you believe that we are processing your personal data unlawfully, you also have the right to lodge a complaint with the Data Protection Authority. However, we will be happy if you address any oversights with us first.

This Privacy Policy, including its components, is valid and effective from 6 August 2019