Privacy & Security

The controller of personal data is Artel Glass LLC, with its registered office at 1013 Centre Road, Wilmington, Delaware 19805, United States of America, registered in the Delaware Department of Companies on November 8, 1999 under number 991484363-3122548, conducting business activity in the Czech Republic through a branch office ARTEL GLASS LLC, organizační složka (organizational unit), identification number: 70102937, with its registered office in Praha 3, Vinohradská 2279/164, postal code 130 00, entered in the Commercial Register kept by the Municipal Court in Prague, Section A, Insert 40479 (hereinafter referred to as the “Company”).

A company which, in its activities as a controller of personal data, processes personal data of natural persons (data subjects), in accordance with Regulation (EU) No. 2016/679 of the European Parliament and of the Council (hereinafter "GDPR"), hereby in accordance with the Art. 13 GDPR provides the following information to data subjects.

1. Introduction

The Company sells luxury handmade crystal and other products and is also the operator of the website www.artelglass.com, through which the Company's products can be ordered. The sale of goods is carried out on the basis of customer orders confirmed by the Company (ie on the basis of contracts concluded in this way), the subject of which is the sale of the Company's goods (hereinafter collectively referred to as the "Contract").

In connection with the Contract, resp. during its performance and on the basis thereof, you have provided the Company with your personal data listed below. Other personal data is processed in connection with the creation and use of a user account, if you have agreed to the sending of commercial communications and also if you have contacted our Company with a question or request.

2. What personal data we process

The company processes your following personal data:

Data necessary for the creation of the order and subsequent performance of the Contract
These are in particular name and surname, address (residence / delivery address / billing address), e-mail address, telephone number, identification of the ordered goods, including price, method of payment and related data.
Data related to the creation of a user account and the use of a user account
These are, in particular, the name and surname, e-mail address, password and, in the event of an account created via Facebook, Google or Apple ID, other personal data processed by these applications, which will be made available to the Company for the purpose of creating and logging in to the user account.
It also includes personal data related to the use of the user account, such as saved addresses, tracking and order history, saved products, etc., and other data related to your user account.
Data processed in communication with the Company
Depending on the method of communication with the Company, it will be mainly the e-mail address, telephone number, name and surname and all other personal data depending on what personal data you provide in connection with the communication and what our communication will relate to.
Data for the purpose of sending commercial communications
This is the email address..

3. For what purposes do we process personal data and what is the legal basis for processing

In connection with the above stated activities, the Company processes and keeps your personal data for the following purposes and under the conditions and within the limits set by applicable law, in particular in accordance with the following provisions of the GDPR:

Performance of the Contract (measures prior to the conclusion of the Contract) and the related legitimate interests of the Company
In the event that a Contract is concluded with you as a customer of the Company, the Company processes your personal data (see paragraph 2 letter a) of this document), as this is necessary for the purposes of fulfilling the Contract, especially for delivery of goods and communication between you and the Company, pursuant to Article 6 (1) b) GDPR.
Even in the event of creating and using a user account, the Company processes your personal data (see paragraph 2 letter b) of this document), as a means of facilitating the conclusion and performance of the Contract and providing other functionalities associated with the user account, pursuant to Article 6 (1) b) GDPR.
All the above stated data are also processed and kept by the Company on the basis of its legitimate interest in order to protect the Company's rights, especially in defense against your legal claims against the Company or possibly for the Company to assert potential legal claims against you, pursuant to Article 6 (1) f) GDPR.
Performance of the Company's legal obligations
Due to the existence of a contractual relationship established between you and the Company by the Contract, the Company is subject to a number of obligations arising from legal regulations, especially in the area of accounting and taxes, for the fulfillment of which it is necessary to process your personal data. For this reason, the Company processes your personal data mentioned above, on the basis of Article 6 (1) c) GDPR.
Communication with the Company - Implementation of measures before concluding the contract, resp. processing for the purposes of the legitimate interests of the Company
If you contact our Company through any of the published contact information or in any other way, in order to leave a message, ask a question, request for more information about the goods and products of our Company, etc., we will also process your personal data (see paragraph 2 (c) of this document).
If you contact us because you are interested in our products, the Company processes personal data in order to take pre-contractual measures with you as an interested party, in particular to communicate the necessary information and instructions before concluding the contract and to ensure all pre-contractual activities; pursuant to Article 6 (1) b) GDPR.
If you contact the Company with a request to answer a question of a more general nature only (ie it will be such a question, report or message that will not be made by the author primarily for the purpose of concluding the Contract), it is a legitimate interest of the Company to answer such questions and communicate with such a person, especially in a situation where it was the author himself who initiated this contact. For this activity, it is necessary to process the personal data of the author, on the basis of Article 6 (1) f) GDPR.
Commercial communications - Processing by consent
In the event that you request the sending of newsletters or other commercial messages via the website (or otherwise) (ie all forms of communication, including advertising and encouraging to visit the Website, intended to directly or indirectly promote goods or services or the Company's image), the Company will process your personal data (see paragraph 2 (d) of this document) for the purpose of sending (disseminating) these commercial communications, ie for the Company's marketing purposes, but only with your consent; such processing of personal data will be carried out on the basis of Article 6 (1) a) GDPR.

4. Duration of personal data processing

In the event of concluding the Contract, personal data will be processed for the entire duration of the contractual relationship established by the Contract and for a certain period after its termination.

Personal data processed for the purpose of protecting the Company's rights will be processed for the entire duration of the contractual relationship established by the Contract and for the duration of the longest possible limitation period relating to all claims that could be asserted in connection with the Contract and related relationships.

The personal data of data subjects who have created their user account on the website will be processed for the entire period of existence of their user account. In order to protect the Company's rights, they will be further processed for the duration of the longest possible limitation period relating to all claims that could be asserted in connection with the existence of the user account and related relationships.

All personal data necessary for the fulfillment of the Company's obligations will be processed for the period that results from individual legal regulations or which is necessary for the fulfillment of obligations stipulated by legal regulations (especially legal regulations governing tax and accounting issues). Personal data processed for the purpose referred to in paragraph 3 c) of this document will be processed for the entire period of communication between the Company and the person who initiated this communication, and for a period of 6 months from the date on which the last such contact takes place between the Company and such person. If the Contract is subsequently concluded in connection with the communication, the Company will further process the personal data as personal data of its customer.

Personal data processed for the purpose referred to in paragraph 3 c) of this document will be processed for the entire period of communication between the Company and the person who initiated this communication, and for a period of 6 months from the date on which the last such contact takes place between the Company and such person. If the Contract is subsequently concluded in connection with the communication, the Company will further process the personal data as personal data of its customer.

Personal data processed for the purpose provided in paragraph 3 d) of this document will be processed until your consent to their processing for these purposes is revoked.

As soon as the purpose of the processing has ceased or the Company no longer has any legal reason to process personal data, the Company will delete the personal data.

5. Further information on the processing of personal data (recipients of personal data)

The Company may also transfer (communicate) your personal data to other subjects, namely

suppliers of external services for the Company, such as accounting, tax, auditing, consulting, legal and other services, as well as IT services and services related to network and database management,
carriers and deliverers of goods, payment service providers (‎Unzer GmbH),
subjects to which the Company is obliged to provide data on the basis of legal regulations (public authorities, etc.).

6. Your rights in connection with the processing of personal data

In connection with the processing of personal data, you have in particular the following rights:

The right to obtain confirmation from the Company whether or not your personal data are being processed, and, where that is the case, the data subject has the right to obtain access to personal data (for more details see Article 15 of the GDPR).
The right to obtain from the Company without undue delay the rectification of inaccurate personal data or taking into account the purposes of processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement (for more details see Article 16 of the GDPR).
The right to obtain from the Company the erasure of personal data, if any of the reasons set out in Article 17 of the GDPR is fulfilled, eg if the personal data are no longer necessary in relation to the purposes for which they were collected, the data subject objects to the processing of personal data and and there are no overriding legitimate grounds for the processing, etc.
The right to obtain from the Company restriction of processing in cases reffered to in Article 18 of the GDPR, eg if the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,, the Company no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims, or the data subject has objected to processing of personal data.
The right to data portability of personal data under the conditions set out in Article 20 of the GDPR.
The right to object to the processing of personal data concerning you, under the conditions set out in Article 21 of the GDPR, ie in particular in relation to data which are processed on the basis of and for the purposes of the legitimate interest of the Company.
The right not to be subject to a decision based solely on automated processing, including profiling, within the meaning of Article 22 of the GDPR.
The right to lodge a complaint with the competent supervisory authority if the data subject considers that the processing of personal data is contrary to law. The competent supervisory authority in the Czech Republic is the Office for Personal Data Protection. For more information, see www.uoou.cz.
In relation to personal data processed on the basis of your consent, you have the right to withdraw your consent to the processing at any time without any sanction. You may withdraw your consent by sending an email to the Company's email address below. In the e-mail message, it is sufficient to state "I withdraw my consent to the sending of commercial communications" or any other similar text from which the withdrawal of consent will be apparent. You can also withdraw your consent by "unsubscribing" directly via an email message, which was / will be sent to you a commercial communication. You can also withdraw consent through your user account if you have created a user account. The consent may also be withdrawn in another verifiable manner, eg by delivering a written withdrawal of the consent to the Company's address below. Withdrawal of consent by the data subject shall not affect the lawfulness of the processing based on the consent prior to its withdrawal.

7. Requirement to provide personal data

To the extent that the processing of personal data is necessary for the fulfillment of the legal obligation of the Company or for the fulfillment of the Agreement concluded between the Company and you, the provision of personal data is legal, resp. contractual requirement. If personal data is not provided, these obligations cannot be properly fulfilled by the Company.

Personal data for the purpose of sending commercial communication is provided by you completely voluntarily. It is not your duty to provide this personal information for this purpose. Failure to do so has no negative consequences.

8. Transfer of personal data to third countries

The company (founder of the Czech branch) is a company based in the USA. Due to the fact that the Company conducts its business activities in the Czech Republic through a subsidiary, the Company is fully subject to the GDPR legislation, regardless of whether the processing itself takes place in the territory of the European Union or outside it. In this respect, therefore, there is no transfer of personal data to third countries, as the Company is fully bound by the GDPR and the obligations set out therein.

Where in connection with the concluded Contract it will be necessary to deliver the purchased goods to a third country (ie a country outside the European Economic Area), it will be necessary to transfer your personal data necessary for this delivery to the carrier in this third country. In such a case, the Company will ensure that personal data are transferred only if the special conditions pursuant to Article 44 et seq. of the GDPR are met.

There is no further transfer of personal data to third countries (ie countries outside the European Economic Area) or to international organizations.

9. Cookies

Cookies are used in connection with the operation of the website. Cookies are small, simple text files that your web browser stores on your end device (typically a computer or phone) that you use to access the website when you visit the website. Cookies contain information about your terminal device and other information about how you use the website. Thanks to this information, it is possible to ensure the correct functionality and security of the website, or to improve and speed up work with them. Cookies are commonly used by websites.

In most cases, the information contained in cookies will not have the nature of personal data, as it is not possible to identify a specific individual on the basis of them. Nevertheless, such cookies may exist. In such a case, we will process such information (personal data) only if their processing is necessary for the purposes of our legitimate interests or in connection with the performance of the contract, or if you give us your consent to the processing

Complete information on what types of cookies we use in connection with the operation of our website, to what extent and for what purpose, you will find here and also in the pop-up windows on our website (hereinafter referred to as "Cookie Information"). In those cases where it is required by law, we will ask you to give your voluntary consent to the use of cookies and at the same time we will provide information on how the consent can be withdrawn.

In addition to the Cookie Information, the information on the processing of personal data specified in this information document on the processing of personal data also applies to those cookies with which the processing of personal data is connected.