Privacy Policy - LORD appliances

1) Introduction and contact details of the responsible party

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the processing of your personal data when using our website. Personal data is any data by which you can be personally identified.

1.2 The responsible party for the processing of data on this website within the meaning of the General Data Protection Regulation (GDPR) is Mc TREE a.s., Živanická 26, Vinoř, 19017 Prague 9, Czech Republic, tel.: +420 724 147 096, e-mail: eshop@lord.eu. The responsible party for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when visiting our website

2.1 When using our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

The website visited
Date and time of access
Amount of data sent in bytes
Source/link from which you came to the page
Browser used
Operating system used
IP address used (where applicable: in anonymised form)

The processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. We do not pass on or otherwise use the data. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the responsible party), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string "https://" and the lock symbol in the address bar of your browser.

3) Hosting & Content-Delivery-Network

For the hosting of our website and the display of page content, we use a provider who provides its services exclusively on servers located within the European Union.

All data collected on our website is processed on these servers.

We have concluded an order processing agreement with the provider, which ensures the protection of the data of visitors to our website and prohibits the unlawful passing on of data to third parties.

4) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when the browser is closed (so-called "session cookies"), while other cookies remain on your device for longer and allow the page settings to be saved (so-called "persistent cookies"). In the latter case, you can find out the storage period in the cookie settings overview of your web browser.

If personal data is also processed via individual cookies, the processing is carried out in accordance with Article 6(1)(b) of the GDPR either for the performance of a contract, in accordance with Article 6(1)(a) of the GDPR in the case of consent given, or in accordance with Article 6(1)(f) of the GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective arrangement of the page visit.

You can configure your browser so that it informs you about the setting of cookies and so that you can decide individually about their acceptance, or exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting us

5.1 Smartsupp

This website uses a live chat system from the following provider: smartsupp.com, s.r.o., Milady Horákové 13, 60200 Brno, Czech Republic

The processing of personal data transmitted via the chat is carried out either in accordance with Article 6(1)(b) of the GDPR, as this is necessary for the conclusion or performance of a contract, or in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in effectively caring for our page visitors.
Your data transmitted in this way will be deleted if there are no statutory retention periods, once the matter in question has been finally clarified.

In addition, in order to create pseudonymised user profiles, further information may be collected and evaluated using cookies; however, this does not serve to identify you personally and will not be merged with other data sets. If this information is related to a person, the processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation purposes.

The setting of cookies can be prevented by corresponding browser settings. In this case, however, the functionality of our website may be limited. The collection and storage of data for the purpose of creating a pseudonymised user profile can be withdrawn at any time with effect for the future.

We have concluded an order processing agreement with the provider, which ensures the protection of the data of visitors to our website and prohibits the unlawful passing on of data to third parties.

5.2 When contacting us (e.g. via the contact form or by e-mail), personal data is processed – solely for the purpose of handling and answering your enquiry and only to the extent necessary.

The legal basis for the processing of this data is our legitimate interest in answering your enquiry in accordance with Article 6(1)(f) of the GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been finally clarified, and if there are no statutory retention obligations.

6) Data processing when opening a customer account

In accordance with Article 6(1)(b) of the GDPR, personal data is collected and processed to the extent necessary if you provide it to us when opening a customer account. You can find out which data is required to open an account from the input mask of the relevant form on our website.

The deletion of your customer account is possible at any time and can be done by sending a message to the above address of the responsible party. After your customer account has been deleted, your data will be deleted provided that all concluded contracts have been fully performed, there are no statutory retention periods and there is no legitimate interest on our part in the further storage of the data.

7) Use of customer data for direct advertising

Registration for our e-mail newsletter

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The mandatory data for sending the newsletter is only your e-mail address. The provision of further data is voluntary and is used so that we can address you personally. For the dispatch of the newsletter we use the so-called double opt-in procedure, which ensures that you will only receive the newsletter after you have expressly confirmed to us your consent to receive the newsletter by clicking on the verification link sent to the e-mail address provided.

By activating the confirmation link you grant us consent to use your personal data in accordance with Article 6(1)(a) of the GDPR. In doing so, we store the IP address recorded by your internet service provider (ISP) as well as the date and time of registration, so that we can track any possible misuse of your e-mail address in the future. The data we collect from you when subscribing to the newsletter will be used exclusively for this purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a message to the responsible party at the address stated above. After unsubscribing, your e-mail address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to the further use of your data or we reserve the right to further process the data, which is permitted by law and about which we inform you in this declaration.

8) Data processing for order fulfilment

8.1 Where necessary for the performance of the contract for the purpose of delivery and payment, the personal data we collect from you will be passed on in accordance with Article 6(1)(b) of the GDPR to the commissioned carrier and the commissioned bank.

If we owe you updates for goods with digital elements or for digital products under the relevant contract, we process the contact details you provide during the order (name, address, e-mail address) in order to personally inform you about upcoming updates within the statutory information periods in accordance with Article 6(1)(c) of the GDPR by an appropriate means of communication (e.g. by post or e-mail). In this case, your contact details will be used exclusively for notifications about the updates we owe you and will be processed only to the extent necessary for this notification.

In order to fulfil your order, we also cooperate with the service providers listed below, who assist us in whole or in part with the performance of the concluded contracts. Certain personal data will be passed on to these service providers in accordance with the information below.

8.2 Transfer of personal data to carriers

– HELICAR a.s.

– PPL CZ s.r.o.

We use the following providers as carriers:

HELICAR a.s., Nádražní 203/9, 25064 Měšice

PPL CZ s.r.o., K Borovému 99, 251 01 Jažlovice

We pass on your e-mail address and/or telephone number in accordance with Article 6(1)(a) of the GDPR to the provider prior to the delivery of the goods for the purpose of agreeing a delivery date or notifying you of the delivery, provided that you have given your express consent in the ordering process. Otherwise, only the recipient's name and delivery address are passed on to the provider in accordance with Article 6(1)(b) of the GDPR for the purpose of delivery. The transfer takes place only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or notification of the delivery is not possible.

Consent can be withdrawn at any time with effect for the future vis-à-vis the responsible party at the address stated above or vis-à-vis the provider.

8.3 Use of payment service providers

– GoPay

On this website, one or more online payment methods are available from the following provider: GoPay s.r.o., Planá 67, 370 01 Planá, Czech Republic

When selecting a payment method of the provider for which you have to pay in advance (e.g. payment by card), your payment details (including name, address, bank and card information, currency and transaction number) and information about the contents of your order are passed on in accordance with Article 6(1)(b) of the GDPR. In this case, the transfer of your data takes place exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this.

9) Web analytics services

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of your use of our website.

By default, when the website is visited via Google Analytics 4, cookies are set; these are small text blocks stored on your device that collect certain information. This information also includes your IP address, which is, however, truncated by Google to the last digit in order to rule out direct personal identification.

The information is transmitted to Google servers and further processed there. It is also possible that transfers to Google LLC, domiciled in the USA, may take place.

Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to the use of the website and the internet. The truncated IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. The data collected within the scope of the use of Google Analytics 4 will be stored for a period of two months and then deleted.

All of the processing described above, in particular the setting of cookies on the device used, takes place only if you have granted us your express consent in accordance with Article 6(1)(a) of the GDPR.
Without your consent, the use of Google Analytics 4 will not take place during your visit to the website. You can withdraw your granted consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "cookie consent tool" available on the website.

We have concluded an order processing agreement with Google, which ensures the protection of the data of visitors to our website and prohibits the unlawful passing on of data to third parties.

You can find further legal information on Google Analytics 4 at https://business.safety.google/intl/cs/privacy/, https://policies.google.com/privacy?hl=cs&gl=cs and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses a special "demographic characteristics" function and can compile statistics that provide information about the age, gender and interests of page visitors. This is done by analysing advertising and third-party information. In this way, target groups for marketing activities can be identified. However, the collected data cannot be attributed to a specific person and will be deleted after two months of storage.

Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to create cross-platform reports. If you have personalised advertising activated and your devices are linked to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) of the GDPR, analyse your behaviour across devices and create database models, including cross-platform conversions. We do not receive any personal data from Google, only statistics. If you wish to stop the cross-platform analysis, you can deactivate the "Personalised advertising" function in the settings of your Google account. Please follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=cs You can find further information on Google Signals at the following link: https://support.google.com/analytics/answer/7532985?hl=cs

UserIDs
As an extension of Google Analytics 4, the "UserIDs" function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Article 6(1)(a) of the GDPR, have created an account on this website and have logged in from different devices with this account, your activities, including conversions, may be analysed on a cross-platform basis.

For the transfer of data to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of the European Commission's decision, ensures compliance with the European level of data protection.

9.2 Google Tag Manager

This website uses "Google Tag Manager", a service from the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google").

Google Tag Manager provides the technical basis for grouping various web applications, including tracking and analytics services, and enables them to be calibrated, managed and conditioned via a uniform user interface. Google Tag Manager itself does not store any information on users' end devices and does not read it. The service also does not perform any independent data analyses. However, when accessing the pages, your IP address is transmitted to Google and may be stored there. It is also possible that a transfer to Google LLC servers in the USA may take place.

This processing takes place only if you grant us your express consent in accordance with Article 6(1)(a) of the GDPR. If this consent is not granted, Google Tag Manager will not be used during your visit to the website. You can withdraw your granted consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the "cookie consent tool" available on the website.

We have concluded an order processing agreement with the provider, which ensures the protection of the data of visitors to our website and prohibits the unlawful passing on of data to third parties.

You can find further legal information on Google Tag Manager at https://business.safety.google/intl/cs/privacy/ and https://policies.google.com/privacy?hl=cs&gl=cs

10) Retargeting/Remarketing and conversion tracking

10.1 Meta Pixel

Within the scope of our online offer, we use the "Meta Pixel" service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta").

When a user clicks on one of our advertisements on Facebook and/or Instagram, the URL of our linked website is extended by a parameter using the "Meta Pixel". This URL parameter is then, after the redirect, entered into the user's browser via a cookie set by our linked website.

In this way, Meta is able to identify the visitors of our online offer as a target group for the display of advertisements (so-called "Ads"). Accordingly, we use the service in order to display our Facebook and/or Instagram advertisements only to those users who have shown interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Meta (so-called "Custom Audiences").

Furthermore, the "Meta Pixel" can track whether users were redirected to our website after clicking on an advertisement and what actions they took there (so-called "conversion tracking").

The collected data is anonymous to us, which means it does not provide us with any conclusions about the identity of users. However, the data is stored and processed by Meta, which enables a connection to the respective user profile, and Meta may use the data for its own advertising purposes.

All of the processing described above, in particular the setting of cookies for reading information on the device used, takes place only if you have granted us your express consent in accordance with Article 6(1)(a) of the GDPR. You can withdraw your granted consent at any time with effect for the future by deactivating this service in the "cookie consent tool" available on the website.

We have concluded an order processing agreement with the provider, which ensures the protection of the data of visitors to our website and prohibits the unlawful passing on of data to third parties.

The information generated by Meta is usually transmitted to a Meta server and stored there; in this respect, a transfer to Meta Platforms Inc. servers in the USA may also take place.

10.2 Google Ads conversion tracking

This website uses the online advertising programme "Google Ads" and, within the scope of Google Ads, conversion tracking from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads offer in order to draw attention to our attractive offers on external websites by means of advertisements (so-called Google Adwords). On the basis of the data on advertising campaigns, we can determine how successful individual advertising measures are. We aim to show you advertisements that are of interest to you, to make our website more interesting for you and to achieve a fair billing of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an advertisement displayed by Google. Cookies are small text files that are stored on your device. These cookies usually lose their validity after 30 days and do not serve personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advertisement and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information obtained using the conversion tracking cookie serves to compile conversion statistics for Google Ads customers who have decided to use conversion tracking. The customers learn the total number of users who clicked on their advertisement and were redirected to a page tagged with a conversion tracking tag. They do not, however, receive any information that would allow the personal identification of users. Within the scope of the use of Google Ads, a transfer of personal data to Google LLC servers in the USA may also take place.

You can find details on the processing initiated by Google Ads conversion tracking and on how Google handles data from websites here: https://policies.google.com/technologies/partner-sites

You can also permanently object to the setting of cookies via Google Ads conversion tracking by downloading and installing the browser plugin available at the following link:
https://www.google.com/settings/ads/plugin?hl=cs

Please note that certain functions of this website may not be available or may be restricted if you deactivate the use of cookies.
You can view Google's privacy policy here: https://business.safety.google/intl/cs/privacy/ and https://www.google.cz/policies/privacy/

11) Website functionalities

11.1 Google Maps

This website uses an online map service from the following provider: Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Maps is a web service for displaying interactive (map) maps in order to visually present geographical information. By using this service, our location will be displayed to you and any journey will be made easier.

Already when opening the sub-pages into which the Google Maps map is integrated, information about your use of our website (e.g. your IP address) is transmitted to Google servers and stored there; in this respect, a transfer to Google LLC servers in the USA may also take place. This takes place regardless of whether Google provides a user account to which you are logged in, or whether a user account exists at all. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish your data to be assigned to your Google profile, you must log out before activating the button. Google stores your data (also for users who are not logged in) as user profiles and evaluates them.

The collection, storage and evaluation takes place in accordance with Article 6(1)(f) of the GDPR on the basis of Google's legitimate interest in the display of personalised advertising, market research and/or the adaptation of the Google website. You have the right to object to the creation of these user profiles, whereby you must contact Google in order to exercise this right. If you do not agree to the future transmission of your data to Google within the scope of the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by disabling JavaScript in your browser. Google Maps and thus the map display on this website will then not be possible.

Where this is legally necessary, we have obtained your consent in accordance with Article 6(1)(a) of the GDPR for the processing of your data described above. You can withdraw your granted consent at any time with effect for the future. To exercise your withdrawal, please follow the objection procedure described above.

You can find further information on Google's privacy policy here: https://business.safety.google/intl/cs/privacy/

11.2 Google Web Fonts

This page uses so-called web fonts for the uniform display of fonts from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

When the page is opened, your browser loads the required web fonts into its browser cache in order to correctly display texts and fonts, and establishes a direct connection with the provider's servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.

The data may also be transmitted to: Google LLC, USA.

The processing of personal data in the course of establishing a connection with the font provider takes place only if you have granted us your express consent in accordance with Article 6(1)(a) of the GDPR. You can withdraw your granted consent at any time with effect for the future by deactivating this service in the "cookie consent tool" available on the website. If your browser does not support web fonts, the standard font of your computer will be used.

You can find further information on Google's privacy policy here: https://business.safety.google/intl/cs/privacy/

12) Rights of the data subject

12.1 The applicable legal regulation on the protection of personal data grants you, vis-à-vis the responsible party, the following rights of the data subject (rights to information and intervention), with reference to the respective legal basis for the individual conditions of exercise:

The right to information in accordance with Article 15 GDPR;
The right to rectification in accordance with Article 16 GDPR;
The right to erasure in accordance with Article 17 GDPR;
The right to restriction of processing in accordance with Article 18 GDPR;
The right to information in accordance with Article 19 GDPR;
The right to data portability in accordance with Article 20 GDPR;
The right to withdraw granted consents in accordance with Article 7(3) GDPR;
The right to lodge a complaint in accordance with Article 77 GDPR.

12.2 Right to object

If we process your personal data within the scope of a balancing of interests on the basis of our predominantly legitimate interest, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.

If you exercise your right to object, we will stop the processing of the data concerned. Further processing is, however, reserved if we can prove compelling grounds for the processing that override your interests, fundamental rights and freedoms, or if the processing serves the assertion, enforcement or defence of legal claims.

If your personal data is processed for the purposes of direct advertising, you have the right to object at any time to the processing of your personal data for these purposes. You can lodge the objection as described above.

If you exercise your right to object, we will stop the processing of the data concerned for the purposes of direct advertising.

13) Storage period of personal data

The storage period of personal data is determined on the basis of the respective legal basis, the purpose of the processing and, if relevant, additionally on the basis of the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of express consent in accordance with Article 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

If statutory retention periods exist for data that is processed in accordance with Article 6(1)(b) GDPR within the scope of legal or similar obligations, this data will be routinely erased after the expiry of the retention periods, provided it is no longer necessary for the performance of a contract or the conclusion of a contract and/or there is no legitimate interest on our part in the further storage of it.

When processing personal data on the basis of Article 6(1)(f) GDPR, this data is stored until you exercise your right to object in accordance with Article 21(1) GDPR, unless we can prove compelling grounds for processing that override your interests, rights and freedoms, or unless the processing serves the assertion, exercise or defence of legal claims.

When processing personal data for the purposes of direct advertising on the basis of Article 6(1)(f) GDPR, this data is stored until you exercise your right to object in accordance with Article 21(2) GDPR.