Principles of personal data processing
About BEWIT Natural Medicine, s.r.o. company Michalská 2030, Slezská Ostrava, 710 00 Ostrava (hereinafter referred to as the "registered office address"), ID No: 29443237, a company registered in the Commercial Register of the Regional Court in Ostrava under No. C 53597(hereinafter referred to as "we" or "the administrator").
We do not take the protection of personal data lightly. This Policy tells you for what purpose, for what reason and how we process your Personal Data. You will also find information on what your rights are in relation to data protection.
If you have any further questions about the processing of your Personal Data, please contact us:
- E-mail info@bewit.loveor
- Michalská 2030, Slezská Ostrava, 710 00 Ostrava
Some Personal Data is necessary for the conclusion and performance of the Contract, some Personal Data is processed on the basis of our legitimate interest. For some Personal Data, we are required by law to process it (for example, accounting). In some cases, we use Processors who may have access to your Personal Data. These include, for example, accounting companies or marketing specialists. Where necessary, we will ask for your consent to process your personal data.
When are we the administrator? In relation to Users, we are the controller of Personal Data. An overview of the Personal Data we process, including the reasons for processing it, can be found below. If anything is unclear, please do not hesitate to contact us by e-mail at info@bewit.love.
In order to make the text clearer, we will simplify your reading with a few terms that we use in this Privacy Policy:
The website |
or also referred to as the Website is the e-shop website at https://bewit.love, which is operated by the Administrator; |
GDPR |
Regulation (EU) 2016/679 of the European Parliament and of the Council; |
Personal data |
any information about the User from which the User can be directly or indirectly identified; |
User / you |
the natural person to whom the Personal Data relates, most commonly a customer or potential customer, or a user of our Website, also referred to as " you"; |
Processor |
we use other entities that process Personal Data on the basis of a contract or other mandate for the controller; |
Processing of Personal Data |
is any operation or set of operations on Personal Data or sets of Personal Data that is carried out with or without the aid of automated processes, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other disclosure, alignment or combination, restriction, erasure or destruction; |
Specific categories of Personal Data |
data that we understand to be more sensitive. For example, they ask about your ethnicity, your sexual orientation, whether you are in a trade union, your health and your faith. Genetic and biometric data are also considered a special category of data if they are processed for the purpose of uniquely identifying a natural person. We do not process this Personal Data. |
1. WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU AND HOW?
How do we process your personal data? We process your Personal Data only to the extent necessary to achieve the purpose for which it was collected and we comply with technical and organisational security rules when processing it. The processing of Personal Data is automated, but we do not carry out profiling. The specific purposes of data processing and the categories of personal data we process for each purpose are set out in the following section.
→ Name and surname, contact details (especially e-mail, phone number) |
→ Order notes and other information you provide to us in communication with us (in particular, your questions and answers to your questions, communication with you) |
→ Invoicing data and bank details (data necessary for bookkeeping and payment) |
→ Cookies and IP address, activity data (including information about your device or operating system) |
→ Login to the user accountand behaviour in the user account (in particular the data filled in by the User in the user account, purchase history, time of registration, date of last profile update) |
→ comments posted by you on our social media posts (in particular Facebook, Instagram, YouTube), as well as your profile name (nickname) on these social media and publicly accessible information on your profiles |
→ identification data of the entrepreneur, if you are an entrepreneur |
Special Categories of Personal Data. We do not process any Personal Data of a sensitive nature about you.
A. USERS OF OUR WEBSITE
If you visit our Website, we process your Personal Data for the purposes set out in this table. If you are interested, you can sign up on the Website or via email to receive commercial communications or similar promotional material that we prepare for potential buyers of our goods. In order to subscribe to commercial communications, you must provide us with your consent to process some of your personal data.
Why? |
What kind of data? |
How? |
How long? |
Visit the Website. Providing basic functions of our Website, analytics, improving our services. We also process personal data so that we can show you relevant content or our advertising on other websites. You can set preferences in the cookie bar. The legal basis for the processing of Personal Data is consent (analytics, marketing cookies) or our legitimate interest(necessary cookies). |
Information about when and how you visit and view our Website may include: IP address, date and time of access to our Website, information about your internet browser, operating system or your language settings, history of your behaviour on the Website. If you visit our Website via your mobile phone, we may also process data about your phone. |
Cookies or other technologies for tracking User behavior. |
The processing time varies according to the type of cookie. Some process data only for a session (visit), some for longer. More information can be found in the Cookie Policy. |
Communication with customer support, requests and complaints. By submitting your enquiry, you consent to the processing of Personal Data for the purpose of processing your enquiry. |
Name, surname, telephone number, e-mail. |
In order to process your enquiry, we process the Personal Data necessary to process your enquiry. Communication takes place by phone, e-mail or directly on our Website. |
Closed queries are periodically deleted, but no later than 3.5 years after the query was submitted. |
Sending commercial messages (direct marketing). You have agreed to receive our newsletter. If you do not want to receive the newsletter, you can unsubscribe in the footer of the email. |
Name, surname, telephone number and e-mail. |
We send a newsletter in which we inform you about our goods, services and news. |
The data is processed for a period of 2 years from the last active viewing of the newsletter, unless you unsubscribe earlier. |
B. CUSTOMERS AND/OR PARTNER
If you create a user account with us, we will process your personal data to the extent necessary for the purpose of maintaining your user account and processing your Order. If you are interested, you can sign up on the Website or via email to receive commercial communications or similar promotional material that we prepare for existing customers.
Why? |
What kind of data? |
How? |
How long? |
Visit the Website. Providing basic functions of our Website, analytics, improving our services. We also process personal data so that we can show you relevant content or our advertising on other websites. You can set preferences in the cookie bar. The legal basis for the processing of Personal Data is consent (analytics, marketing cookies) or our legitimate interest(necessary cookies). |
Information about when and how you visit and view our Website may include: IP address, date and time of access to our Website, information about your internet browser, operating system or your language settings, history of your behaviour on the Website. However, information about your behaviour on the Website is anonymised for your maximum privacy. If you visit our Website via your mobile phone, we may also process data about your phone. |
Cookies or other technologies for tracking User behavior. |
The processing time varies according to the type of cookie. Some process data only for a session (visit), some for longer. More information can be found in the Cookie Policy. |
Order processing. In order to purchase goods on our e-shop, you need to go through the Order process. Upon completion of the Order, the Contract between us is concluded. This is the performance of the Contract. |
During the Order process, you enter your name, surname, e-mail, telephone number, contact and delivery address, billing data, or data in the notes. |
You will provide us with this information when you fill it in either during registration for a user account or during the Order process. |
The data is processed for the duration of the Contract or until its transfer and then for a period of 4 years from the end of the Contract. |
Complaints. We will process certain personal data for the purpose of handling the complaint in order to comply with the legal obligation and also to fulfil the concluded Contract. |
Name, surname, e-mail, telephone number, details of the concluded Contract, delivery and necessary payment details. |
You provide us with this Personal Data in order to purchase goods on our e-shop, we process the Order and then fulfil our statutory or contractual obligation. |
We will process your Personal Data for the duration of the customer's contractual relationship with us and subsequently for 4 years after its termination. |
User account. If you create a user account, we will process your Personal Data to the extent necessary. We process personal data on the basis of the concluded Contract. |
The data filled in during registration, in particular your e-mail and other contact details (see above). The scope of processing of Personal Data may vary depending on which Personal Data you fill out in your User Account. |
You will provide us with this information when you create your user account. |
We process your Personal Data for this purpose for as long as the user account exists. |
Communication with customer support, requests and complaints. By submitting an enquiry, you consent to the processing of Personal Data for the purpose of processing the enquiry, or Personal Data is processed on the basis of a concluded Contract. |
Name, surname, phone number, email, invoice number and user account. |
Communication with customer support takes place by phone, email, Facebook or directly on our website. |
Closed enquiries and complaints are periodically deleted, but no later than 3.5 years after the enquiry or complaint has been dealt with. |
Direct marketing, especially sending commercial messages. For our customers, we may send the newsletter based on a legitimate interest in improving and promoting our goods and services or to those who have consented to receive it. |
Name, surname, telephone number and e-mail. |
We send a newsletter in which we inform you about our goods, services and news. |
The data is processed for a period of 2 years from the last active viewing of the newsletter, unless you unsubscribe earlier. If you do not want to receive the newsletter, you can unsubscribe in the footer of the email. |
We organise competitions. So that we can evaluate the competition, announce and publish the winners on our Website and social media. You give your consent to participate in the competition. |
Name, surname, address, telephone number, email address or other details that may be specified by the terms of the competition. |
You voluntarily provide us with Personal Information when you enter a contest on social media or on our Website. |
The data is processed for a period of 2 years from the last end of the competition, unless you withdraw your consent earlier - or a different period if stated differently in the terms and conditions of the competition. |
Satisfaction rating. We have a vested interest in finding out whether you were satisfied with our service and the goods you ordered from our e-shop. |
Customer's name, surname, e-mail and information about the ordered goods. |
Unless you have previously consented (e.g., as part of an Order), we will disclose certain Customer Personal Data to a third party for the purpose of evaluating customer satisfaction. |
We process data for the duration of the customer's contractual relationship with us and subsequently for 4 years after its termination. |
Accounting. On the basis of the concluded Contract you will pay us the purchase price of the goods and transport. We issue you accounting and tax documents, which we then archive and continue to work with them for the purposes of proper bookkeeping and compliance with legal obligations. |
Invoice details: name, surname, email address, billing address or other identification of the User and details of performance as per the Order. Details on the tax document: name, surname, email address, billing address or other identification of the User and details of the goods ordered. |
After filling in the payment information in the profile, we save this information to create an invoice. We are fulfilling our legal obligation. |
We are legally obliged to archive accounting documents and accounting records (invoices) for a period of 5 years starting from the end of the accounting period to which they relate. We are also obliged to keep the invoice for 3 years from the end of the tax year in which the tax liability related to the invoice arose. We are also obliged to archive tax documents for 10 years from the end of the tax year in which the transaction took place. |
Compliance with legal obligations. In certain cases, we must process your personal data in order to comply with obligations imposed by law. |
In particular, this may include the name, surname, e-mail address, billing information, or other identification of the User. |
In this case, we process your Personal Data in order to comply with applicable law (compliance with a legal obligation). |
We process your Personal Data for the period of time required by applicable law. |
C. PARTICIPANTS IN TRAINING AND OTHER EVENTS
Why? |
What kind of data? |
How? |
How long? |
Training and other events. We organise trainings, seminars, webinars and workshops. |
We process your Personal Data that you fill in the order form, in particular name, surname, email, phone number, user account name and subscriber preferences. |
After completing the order form, we will look at this information to ensure your attendance at the event, i.e. for the purpose of fulfilling the contract. |
We will process your Personal Data for the duration of the customer's contractual relationship with us and subsequently for 4 years after its termination. |
D. JOB APPLICANTS
Why? |
What kind of data? |
How? |
How long? |
Offer of job positions. You can find current job vacancies in the Careers section of our Website. |
This is the information you provide in your CV. Name and surname, address, date of birth, phone number, email address, social networking link if applicable, former employment information, education, interests, skills, certifications. |
We will look at the documents you have sent us that contain Personal Data and we will get back to you on that basis. |
We have a legitimate interest in retaining the Personal Data of job applicants for a period of 3 years. This is because we may have an interesting job offer for you at a later date. |
2. WHO ARE OUR PROCESSING PARTNERS?
Processors. We only use verified Processors with whom we have a written contract and who provide us with at least the same guarantees as we provide to you. We have listed above the data that may be processed by Processors, including the purpose and legal title of the processing. Details of the processors are available on request.
Website operation and security |
|
Routine analysis of Website traffic |
|
Order processing |
Helios , Zoner, Abra, Mail order |
Complaints |
|
Inquiry handling and communication with us |
|
Accounting |
|
Marketing |
Ecomail, Notifee, Persoo, Heureka, Smartupp, GoogleAds, Sklik, Bulkgate |
Social networks |
|
Satisfaction rating |
|
Administration of a training, workshop or other online event |
Legal obligations. We may transfer personal data to third parties other than our Processors if required to do so by law or in response to lawful requests by public authorities or at the request of a court in litigation.
3. WHAT MEASURES HAVE WE TAKEN TO PROTECT YOUR PERSONAL DATA?
Technical and organisational measures. Security is very important to us and we are constantly working to ensure that your Personal Data is protected. When selecting measures, we take into account the extent of the processing, the riskiness of the processing or the state of our technology.
- We regularly back up data;
- we update antivirus software systems;
- we use secure https protocol;
- access passwords to information systems (where Personal Data will be processed) and access permissions are controlled at the individual level.
Organisational arrangements. We have adopted and are committed to maintaining the following measures:
- Our employees are bound by confidentiality;
- Our employees are properly trained and also regularly trained on GDPR and familiarised with the rules of working safely on work equipment;
- Access to all systems, including the information system, is personalised and covered by secure passwords.
4. YOUR RIGHTS AND THE POSSIBILITY TO MAKE A DATA PROTECTION REQUEST
In relation to the protection of personal data, you are guaranteed the rights described below, which you can exercise:
- e-mailinfo@bewit.loveor
- by post to the address of BEWIT Natural Medicine, s.r.o., Michalská 2030, Slezská Ostrava, 710 00 Ostrava.
How quickly can we process your application? We will reply to you within one month at the latest. If disclosing the information would compromise the privacy of others, or if disclosure would be disproportionate to the risks or costs of providing the information, we may not be able to comply. In order to process your request as quickly as possible, we may need to verify your identity. In the event of a repeated request, the Controller shall be entitled to charge a reasonable fee for a copy of the Personal Data.
Right of access |
We will confirm whether we are processing your Personal Data. You have the right to be informed about the purposes of the processing, the categories of personal data, the recipients to whom they are disclosed and the duration of the processing. You have the right to know whether a right has already been exercised. It is also a prerequisite that the rights and freedoms of other persons and copies of personal data are not adversely affected. |
Right to correction |
You have the right to request the rectification of inaccurate personal data. You can also correct some information in your user profile. |
Right of deletion |
If there is no other reason to further process the data, we will delete or anonymise the data requested by you. |
Right to restriction of processing |
Please contact us if you believe that we are processing data incorrectly. Whether it is the reasons for the processing or its scope. |
Right to notification of rectification, erasure or restriction of processing |
If you contact us with a request, we will inform you of the outcome. Sometimes we may not be able to accommodate you (e.g. the email address you wrote to us from no longer works). |
The right of portability |
We will provide your Personal Data that you have provided to us in a structured and machine-readable format to another controller at your request. |
Right to object |
If we process your data on the basis of a legitimate interest (e.g. sending a newsletter to Users). It is up to us to demonstrate our legitimate interest. If your objection is justified, we will stop processing your Personal Data. |
The right to withdraw consent |
If you have changed your mind, please let us know. Processing for marketing and commercial purposes may be revoked at any time. |
Automated individual decision-making including profiling |
Don't want to be decided by a computer? We respect your right, therefore we do not carry out profiling. We process Orders and so your Personal Data may be processed automatically. |
5. CONCLUSION
This Personal Data Processing Policy may only be amended in writing. You will be informed of this via our Website.
If you have any questions about our Privacy Policy, please contact us at info@bewit.love.
If you are dissatisfied, you may at any time file a complaint with the Office for Personal Data Protection, located at Pplk. Sochora 727/27, 170 00 Prague 7 - Holešovice (more at https://www.uoou.cz/)
This Personal Data Protection Policy is effective as of 29 May 2023.