I. Data Controller

The controller of personal data pursuant to Art. 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is Sonera s.r.o., ID No.: 22641416, with its registered office at Uralská 689/7, 160 00 Prague 6 (hereinafter: the "Controller").

II. Sources and Categories of Processed Personal Data

The Controller processes personal data that you have provided to them or personal data that the Controller has obtained based on the fulfillment of your order: name and surname, email address, postal address, telephone number, ID No./VAT No.

III. Legal Reason and Purpose of Processing

The legal reason for processing personal data is the performance of the contract between you and the Controller pursuant to Art. 6 (1) (b) GDPR and the legitimate interest of the Controller in providing direct marketing (especially for sending commercial communications and newsletters) pursuant to Art. 6 (1) (f) GDPR.

IV. Data Retention Period

The Controller retains personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Controller and to assert claims from these contractual relationships (for a period of 15 years from the termination of the contractual relationship).

V. Your Rights

Under the conditions set out in the GDPR, you have the right to access your personal data, the right to correct personal data, the right to delete personal data, or limit processing, the right to data portability, and the right to object to processing.