Privacy Statement

The protection of your personal data is important to us. Therefore we wish to inform you below about the general data privacy principles according to EU GDPR at Nutristar s.r.o. (Ltd).  (hereafter „Nutristar").

Responsibility:

Responsibility within the meaning of the EU General Data Protection Regulation (hereafter: GDPR) and other national data privacy laws of the Member States as well as other privacy-related regulations lies with:

Nutristar s.r.o. (Ltd.) 
Bratislavská 1527/17
102 00 Prague 10 
Czech republic
Phone: +420 602 270 412 
Email: info@nutristar.shop
www.nutristar.cz

Our general Data Protection Statement applies both to the initiation and execution of our business relations and the related transactions as well as in-house systems.

Data protection officer

Our internal data protection office and contact for any questions concerning data privacy is:
Mr. Jaroslav Kalat
U Hranic 3419/12a
100 00 Prague 10
Czech republic

Phone: +420 602 270 412
Email: [email protected]

Personal data are all pieces of information which relate to an identifiable natural person. This includes, for instance, such information as your name, your phone number, your email or IP address. Information which we cannot link to your person, e.g. due to the anonymization of information, does not constitute personal data.

We are committed to the principle of data economy. We only collect, process, store, or transfer those data that are necessary for initiating or executing the respective business.

The processing of personal data always requires a legal basis or your consent. The personal data you provide during the initial business contact or for the execution of a business transaction are solely processed by our in-house systems for these purposes in accordance with the applicable data protection regulations. Personal data that have been processed are deleted as soon as the purpose of the processing has been achieved and any retention obligations required by law no longer apply.

Revocation of Your Consent

You can revoke consent which you have previously granted without stating reasons by sending an email to our Data Protection Officer, Mr. Jaroslav Kalat  ([email protected]). If you revoke your consent, the pertinent data are erased immediately. However, within the context of a business relationship we reserve the right to collect and request personal data from you as needed for specific purposes (phone number, email address).

Access to Your Personal Data

When you are in a business relationship with Nutristar, your data are transmitted to the competent company department or to in-house systems as required to carry out an order. Your personal data are only passed on inasmuch as this is necessary to process your order efficiently.

Your data are stored on in-house servers of Nutristar and servers Data 3S – Data System Solutions, Antala Staska 40, 140 00 Prague 4, Czech Republic. Your data are only accessed by authorized persons in the context of a business relationship and by staff members in the IT Operations Department inasmuch as this is necessary for the maintenance of the system (especially servicing and repair work) and to ensure data security. All persons who are authorized to process personal data and can access your personal data are pledged to confidentiality in accordance with the legal provisions. Your data are only transferred to third parties (e.g. authorities) to the extent that this is legally permissible, for instance when transmission is required to comply with a legal obligation.

Erasure of Data

Your personal data will be erased as soon as they are no longer required to carry out a joint business relationship. This does not apply to the extent that your personal data are subject to legally stipulated retention obligations which require storage of the data beyond the duration of the business relationship.

Data Security

Taking the state of technology, the risks posed by processing, and the protection requirements concerning your data into account, Nutristar has taken suitable technical and organizational measures to protect the personal data provided by you pursuant to the legal provisions.

Your Rights as Data Subject

As a business partner you are a data subject within the meaning of the GDPR and you have the following rights toward Nutristar:

You have the right to information regarding the personal data Nutristar has stored about you. You may exercise this right by contacting our Data Protection Officer, Mr. Jaroslav Kalat, by sending an email to [email protected]. The information you receive must include a copy of your data which, in addition to your personal data, also states the recipients of data, the purpose of the storage, and all other legally required information pursuant to art. 15 GDPR. Upon your special request the data will be provided in a structured, standard, and machine-readable format. The competent IT department shall determine the applicable standard.

You have a right to the rectification of your personal data if they turn out to be inaccurate. You can also demand that incomplete personal data be completed.

You have the right to request the erasure of your personal data if one of the following grounds applies:

• knowledge of the data is no longer necessary in relation to the purposes for which they were stored;
• you have withdrawn your consent and there is no other legal ground for the processing;
• the processing of the personal data is unlawful;
• you invoke a right to object based on a special personal situation (which you must substantiate);
• the personal data are special data whose correctness cannot be proven, or
• another legal obligation to erase the data exists.

If there is an obligation to erase and the personal data have been made public, other data controllers must be informed about your request to erase with respect to all copies of your data.

You may request that the processing of your data be restricted if:

• you contest the accuracy of your personal data, for a period enabling Nutristar to verify the accuracy of the personal data;
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
• Nutristar no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims;

Where the processing of your personal data has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the processing has been restricted pursuant to grounds specified above, Nutristar shall inform you before the restriction of processing is lifted. We will notify you within one month at the latest of any measures that have been taken in response to your request.

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority.

Amendments to this Data Protection Statement

Changes in the legal regulations or internal business processes may necessitate amendments to this Data Protection Statement. The amendments to this guideline need not be formal to be effective, and Nutristar shall suitably notify you of such amendments.

Enforcement of and Compliance with the Data Protection Statement Nutristar pledges to adhere to the above provisions as described. If you have any questions or suggestions regarding data privacy, please contact our Data Protection officer, Mr. Jaroslav Kalat.

Website

Anonymous data collection

In principle you can visit the websites without informing us who you are. We only get to know the name of your internet service provider, the websites you visit us from and our websites you visit. These information are evaluated for statistical purposes only. You as a single user remain anonymous.

Collection and Processing of Personal Data

Personal data is not collected on our webpages which serve purely to provide information.

Copyright

All text, images and graphics, as well as the design and layout of these web pages are protected by international copyright. The unauthorised use, reproduction or dissemination of individual content items or complete pages can be prosecuted under both civil and criminal law.

Cookies

A cookie is a small text data file, which a webserver sends to your internet browser and which is placed on the hard disk of your computer. No other personal data of the user except the IP address will be stored. These pieces of information help the system to recognize you during your next visit on our websites. They also make the navigation easier for you. Each time our website is visited our webservers store automatically general information in anonymous form. This information is used for marketing purposes and for optimization of our activities. This information contains by default the type of the browser, the operating system used, the domain name of your internet service provider, the IP address, which your internet service provider has assigned to you, the website from which you pay the visit to our website, all the web pages, which you visit on our websites, as well as the date and the duration of your internet visit. These pieces of information exclude strictly any further implications of your person. Your personal data will be stored only when you give it to us yourself in the context of registering yourself in our system, participating in a survey or completing a contract with us. The data will not be used to identify the visitor of the website and the data are not combined with the bearer of the pseudonym. You have the right to object to the storage of data with future effect at any time.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer to help analyse how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In the event that the IP addresses are made anonymous on this website, your IP address will first be abbreviated by Google within the member states of the European Union or in other countries with treaties with the European Economic Area. The full IP address will only be transmitted to the US by Google in exceptional cases and abbreviated there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and Internet usage. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this website. Furthermore, you can prevent the information on your use of this website generated by the cookie (incl. your IP address) from being transmitted to and analysed by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout 

YouTube

Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited. If you're logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used to help make our website appealing. Further information about handling user data, can be found in the data protection declaration of YouTube under https://policies.google.com/privacy 

Electronic Mail (email):

Sending data over the Internet continues to pose a risk. Information sent unencrypted by electronic mail (email) to Nutristar might be intercepted and read, stored and used for unintended purposes by third parties. Therefore, please do not send any confidential information without first using an encryption program. Further Information and Contact If you have further questions about "Data Privacy at Nutristar" please contact our company's data privacy officer.

Design & Realisation

Data 3S – Data Systém Solutions s.r.o. (Ltd.), Antala Staska 511/40, 140 00 Praue 4, Czech republic, www.data3s.com

Server log files

Whenever you visit our web application at www.nutristar.cz certain information transmitted automatically by your browser to our server is collected and stored. This includes:

• the IP address
• the date, time and time zone of access
• HTTP method
• the requesting URI

We use additional logging and debugging outputs in order to analyze and rectify errors, which are temporarily stored in server log files. These log files are not attributed to any user and are deleted after ten days.
These data are not cross-referenced with data from other sources. The basis for data processing is point (f) of Article 6(1) GDPR, which permits data processing for the performance of a contract or in order to take steps prior to entering into a contract.

Provision of a user account

We collect, process and store the following personal data in order to enable access for you or in order to identify your user account unequivocally:

• username
• password

Usage of cookies

Session cookies
Cookies are small text files, which a website can store on a user's computer or save locally. These session cookies do not contain any personal data and expire at the end of the session.

Usability cookies
Our dashboard displays user cookies in order to store temporarily the display status of components. These cookies remain valid after the end of the session, although do not contain any personal data, but rather only status descriptions such as "off", "on" or "collapsed" so that certain fields (e.g. filters) can be loaded in expanded form. This means that the values associated with "usability cookies" do not contain any personal information.

Notice
You can prevent your browser from installing cookies by adjusting its settings accordingly. However, please note that, if cookies are disabled, the proper operation of our web application may be impaired.

Privacy Notice for mobile

Certain personal data must be collected and processed and certain access privileges for your mobile end device must be obtained in order for mobile app to be used to the full. If you do not agree to the terms and conditions and utilization requirements described below, please do not use the app.

Collection of personal data by the Nutristar mobile app.

The Nutristar mobile app can only be used if you have access to our Nutristar web application. Personal data such as for example the user's first name, surname, email address, user role etc. are collected and stored within the Nutristar web application. These data are made available within the Nutristar mobile app in order to enable your account to be used on the move through the web application. All information relating to the collection, processing and storage of personal data by the Nutristar web application may be found in the relevant Privacy Notice. The Nutristar mobile app collects, processes and stores exclusively the following data:

• the IP address of your mobile end device in conjunction with the Nutristar server
• username
• password
• The display of a photograph in the user account, where an image has been stored under gravatar.com

Privileges: access to your mobile end device.

As part of the installation process you will be informed of the access privileges required by the Nutristar mobile app on your mobile end device. You can grant an access privilege by confirming the corresponding dialog during the installation process. The app may in principle be installed even if you have not granted any access entitlements. However, if no access privileges are granted, you will only be able to benefit from limited functionality of the Nutristar mobile app. The following access privileges are necessary in order to be able to use the Nutristar mobile app to the full:

• Microphone access: using voice commands as part of the search function
• Access to the local device memory: for downloading and displaying documents
• Access to the library: for uploading files to Nutristar
• Access to the camera and flash / torch: for using the bar code scanning features (not active at present). If required, the feature can also turn on the mobile torch in order to illuminate the item being scanned
• Access to settings: in order to save the language setting permanently
• Access to geolocation data: in order to determine your location (not active at present)
• Access to the internet: in order to access the Nutristar web application
• Access to network settings: in order to retrieve the system network settings (mobile network and WLAN) from the mobile app
• Access to the boot process: for service start or event handling when the mobile app is launched
• Access to the vibration alarm: for user feedback on the mobile end device
• Access to the telephone: in order to provide telephone number links

Usage of cookies

The Nutristar mobile app uses cookies in order to ascertain the technical status of the app. No cookies are used for the purpose of user tracking.