Privacy policy

Information on the Processing of Personal Data

MUFFIK s.r.o.

 

1. MUFFIK UK LIMITED, Company Number: 16681481, having its registered office at 483 Green Lanes, London, England, N13 4BS, United Kingdom, is the Controller of personal data within the meaning of the relevant provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”).
2. Pursuant to Article 12 of the GDPR, the following information is hereby provided to purchasers (hereinafter also referred to as “Data Subjects”) concerning the processing and protection of personal data and the related rights.
3. The protection of personal data of a purchaser who is a natural person is ensured in accordance with the GDPR.
4. The Seller acts in such a way as to ensure that the Data Subject does not suffer any harm to their rights, in particular the right to human dignity, and takes care to protect the Data Subject from unauthorised interference with their private and personal life.
5. The categories of processed personal data are determined by the scope in which they have been provided to the Seller, in particular:

• through the registration form by which the purchaser creates a customer account on the Seller’s website;
• through data and information obtained in the course of using the website when placing orders.

1. Based on the above, the Seller processes the purchaser’s personal data within the following categories of address, identification, and descriptive data, namely: first name, surname, contact information (e-mail address, telephone number), residential address, delivery (billing) address if different from the residential address, company identification number, tax identification number, and bank account number (hereinafter referred to as the “Personal Data”).
2. As the data controller, the Seller processes personal data in accordance with the GDPR and other applicable legal regulations, while duly respecting the rights of the persons whose personal data are being processed.
3. The purposes of the processing of personal data are as follows:

• the performance of rights and obligations arising from the purchase contract, i.e., the purchase of goods via the Seller’s e-shop (online store interface), delivery of goods, handling of complaints and warranty claims, and the performance of other rights and obligations in connection with the purchase contract, including the administration of the User Account;
• the fulfilment of the Seller’s legal (statutory) obligations;
• purposes covered by the consent granted by the Data Subjects.

 

1. The legal basis for the processing of personal data includes, in particular, the following grounds: the processing of personal data is necessary for the fulfilment of a legal obligation to which the Seller, as the data controller, is subject; the processing of personal data is necessary for the performance of a contract to which the purchaser, as the data subject, is a party; or for the implementation of measures taken prior to the conclusion of the contract at the purchaser’s request; or the consent of the data subject (purchaser) to the processing of their personal data for one or more specific purposes, where none of the aforementioned legal bases applies.
2. The Seller may authorise a third party to process personal data as a data processor. Except for entities delivering goods, personal data will not be disclosed to third parties by the Seller without the purchaser’s prior consent.

 

1. The purchaser’s personal data are processed both manually and automatically, including profiling. The Seller considers personal data to be confidential and will not disclose them to third parties without the consent of the data subjects or without a legal obligation to do so, unless the disclosure concerns an entity belonging to the same corporate group as the Seller, having its registered office within the European Union. In addition to the Seller, personal data may be accessed by third parties within the European Union — processors that provide appropriate safeguards, whose processing meets the requirements of applicable legal regulations, and that ensure adequate protection of the rights of data subjects.

 

1. The purchaser acknowledges that they are obliged to provide accurate and truthful personal data (when registering, within their User Account, and when placing an order through the online store interface) and that they are obliged to inform the Seller without undue delay of any changes to their personal data. If the purchaser fails to do so, any resulting consequences shall be borne by them.

 

1. Personal data are processed for the duration of the User Account on the online store interface and for the period necessary after its termination. Personal data are processed for the time necessary to fulfil the purpose of the purchase contract and during the warranty period for the delivered goods, except in cases where the law provides for a longer retention period (e.g., for purposes of archiving, warranty, accounting, etc.). Personal data processed on the basis of consent are processed no longer than until the consent is withdrawn, which may be done at any time. Personal data shall be processed either electronically by automated means or in printed form by non-automated means.

 

1. The withdrawal of consent shall not affect the lawfulness of processing based on consent given prior to its withdrawal. The withdrawal of consent also does not affect the processing of personal data that the Seller processes on another legal basis than consent (i.e., in particular, where processing is necessary for the performance of a contract, compliance with a legal obligation, or for other reasons provided for by applicable legal regulations).

 

1. The purchaser confirms that the personal data provided are accurate and that they have been informed that the provision of such personal data is voluntary.

1. As a data subject, the purchaser has, pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”), in particular, the following rights:

1. a) the right to information;
2. b) the right of access to personal data and the right to data portability;
3. c) the right to rectification of inaccurate personal data or completion of incomplete data;
4. d) the right to erasure of personal data (“the right to be forgotten”);
5. e) the right to restriction of the processing of personal data;
6. f) the right to object to processing;
7. g) the right to withdraw consent to the processing of personal data;
8. h) the right to obtain confirmation from the Seller as to whether or not the data subject’s personal data are being processed.

 

1. The rights referred to in paragraph 16 may be exercised by data subjects by contacting the Seller using the contact details provided in this notice. For further information on personal data processing and the exercise of their rights, data subjects (purchasers) may contact the Seller via e-mail. For security reasons, the Seller may process only those requests relating to personal data associated with the specific e-mail address used by the purchaser to submit the request, and, in certain cases, the Seller may be required to verify the identity of the data subject before acting on the request. Requests for access, rectification, erasure, or other actions relating to personal data may be submitted:

• by e-mail: support@muffik.uk
• by post: MUFFIK UK LIMITED, 483 Green Lanes, London, England, N13 4BS, United Kingdom

The Seller is obliged to respond to such requests without undue delay and in accordance with applicable legal regulations, i.e., no later than one month after receiving the request. This period may be extended, where necessary, taking into account the complexity and number of requests, by up to an additional two months. The Seller shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay.

1. The information referred to in paragraph 17 shall be provided by the Seller free of charge. Where requests from the purchaser are manifestly unfounded or excessive, in particular because of their repetitive nature, the Seller may:

• charge a reasonable fee taking into account the administrative costs of providing the requested information or communication or of taking the requested action; or
• refuse to act on the request.

 

1. Customer satisfaction with purchases is assessed via e-mail questionnaires within the Verified by Customers programme, in which our e-shop participates. These questionnaires are sent to you after each purchase, unless you refuse to receive them pursuant to Section 7(3) of Act No. 480/2004 Coll., on Certain Information Society Services. The processing of personal data for the purpose of sending these questionnaires is carried out on the basis of our legitimate interest, which consists in determining your satisfaction with your purchase. For the purpose of sending questionnaires, evaluating feedback, and analysing our market position, we use a data processor — the operator of the Heureka.cz portal — to whom we may transmit information about the purchased goods and your e-mail address. Your personal data are not shared with any third party for its own purposes in connection with the sending of such questionnaires.

1. The Seller fulfils its information obligation towards the purchaser under Article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), in relation to the processing of the purchaser’s personal data for the purpose of performing the purchase contract, negotiating such contract, and fulfilling the Seller’s public-law obligations, by means of a separate document titled Information on the Processing of Personal Data.
2. The purchaser agrees to receive information relating to the Seller’s goods, services, or business to the purchaser’s electronic address and further agrees to receive commercial communications from the Seller to the purchaser’s electronic address.
3. The purchaser consents to the storage of so-called cookies on their computer. In cases where it is possible to make a purchase on the website and fulfil the Seller’s obligations under the purchase contract without the storage of cookies on the purchaser’s computer, the purchaser may withdraw such consent at any time.
4. The full text of the Personal Data Protection Policy and Cookies Information can be found in the section Personal Data Protection Terms and Cookies Information.