Policy key definitions:
"I", "our", "us", "we" and "Services" refer to the website HANNDE.com
"you" and "the user" refer to the person(s) using this website.
GDPR means General Data Protection Act.
PECR means Privacy & Electronic Communications Regulation.
ICO means Information Commissioner's Office.
Cookies mean small files stored on a user’s computer or device.
Key principles of GDPR:
We are not responsible for the content or the privacy policies or practices of any of our members, third-party websites, or third-party apps.
Information Collected or Received
In the course of providing our Services, we collect or receive your personal information in a few different ways.
Registration, Account Setup, Service Usage: In order to use the Services, you need to provide us with a valid email address, and for Services that require registration, a name associated with your account that you can choose to represent your identity on HANNDE. You may review, change, or remove that name through your account settings. You need to provide this information to enable us to provide you with the Services. Depending on which services you choose to use, additional information, such as a shop name, billing and payment information (including billing contact name, address, telephone number, credit card information), a telephone number, and/or a physical postal address, may be necessary in order for us to provide a particular service.
Profile: You may provide your name and other personal information in connection with your account and activity. You can edit or remove this information through your account settings.
The name associated with your account, which you may review and change in your account settings, is publicly displayed.
Other people may see ratings, reviews and related photos for items; your profile information; items you listed for sale; your shop pages and policies; your Favourites, followers, and those you follow; sold item listings and the number of items sold; comments you post in our community spaces; and information you decide to share via social networks.
Analytics Information: We use data analytics to ensure site functionality and improve the Services.
Choice & Control
You may change or correct your HANNDE account information through your account settings. You may also remove certain optional information that you no longer wish to be publicly visible through the Services, such as your name.
You can also request the deletion of the personal information in your account.
If you no longer wish to use the Services or receive service-related messages (except for legally required notices), then you may close your account.
Processing of your personal data
Under the GDPR (General Data Protection Regulation) we control and/or process any personal information about you electronically using the following lawful bases.
We are exempt from registration in the ICO Data Protection Register because we only process data for core business purposes.
Lawful basis: Consent
The reason we use this basis: To send the user marketing/newsletter emails.
We process your information in the following ways: We submit your information to our emailing list to send the emails.
Data retention period: We will retain your information under this basis until you withdraw consent or it is determined your consent no longer exists.
Lawful basis: Contract
The reason we use this basis: To complete your purchase and organise delivery of the item(s) purchased.
We process your information in the following ways: We process your data to organise the fast and efficient processing of your order.
Data retention period: We shall retain your information until the contract between us ends or the information is no longer required to be held for tax purposes and we believe it is no longer useful for us or you to store this information.
Sharing your information: We do not share your information with third parties.
Lawful basis: Legitimate interests
The reason we use this basis: To reply to customer enquiries.
We process your information in the following ways: We process your information internally after receiving it from our website hosting platform Wix.com.
Data retention period: We will retain your information until we believe it is no longer useful for us or you to store this information. You can also inform us at any time if you would like us to remove your information.
Sharing your information: When you submit your information via the contact form on our website who will automatically pass it on to us. We will not pass on your information to any other parties unless it is required to process your enquiry.
If, as determined by us, the lawful basis upon which we process your personal information changes, we will notify you about the change and any new lawful basis to be used if required. We shall stop processing your personal information if the lawful basis used is no longer relevant.
Your individual rights
Under the GDPR your rights are as follows:
the right to be informed;
the right of access;
the right to rectification;
the right to erasure;
the right to restrict processing;
the right to data portability;
the right to object; and
the right not to be subject to automated decision-making including profiling.
You can read more about your rights in detail here.
You also have the right to complain to the ICO (www.ico.org.uk) if you feel there is a problem with the way we are handling your data.
We handle subject access requests in accordance with the GDPR.
Some cookies are required to enjoy and use the full functionality of this website.
Some cookies will be saved for specific time periods, where others may last indefinitely. Your web browser should provide you with the controls to manage and delete cookies from your device. Please see your web browser options.
Session (Transient) cookies: These cookies are erased when you close your browser, and do not collect information from your computer. They typically store information in the form of a session identification that does not personally identify the user.
Persistent (Permanent or Stored) cookies: These cookies are stored on your hard drive until they expire (i.e. the are based on a set expiration date) or until you delete them. These cookies are used to collect identifying information about the user, such as Web surfing behavior or user preferences for a specific site.
Data security and protection
We ensure the security of any personal information we hold by using secure data storage technologies and precise procedures in how we store, access and manage that information. Our methods meet the GDPR compliance requirement.
Fair & Transparent Privacy Explained
We have provided some further explanations about user privacy and the way we use this website to help promote a transparent and honest user privacy methodology.
Sponsored links, affiliate tracking & commissions
Our website may contain adverts, sponsored and affiliate links on some pages. These are typically served through Google Adsense.
Clicking on any adverts, sponsored or affiliate links may track your actions by using a cookie saved to your device. Your actions are usually recorded as a referral from our website by this cookie.
If you have any concerns about this we suggest you do not click on any adverts, sponsored or affiliate links found throughout the website.
Email marketing messages & subscription
Under the GDPR we use the consent lawful basis for anyone subscribing to our newsletter/marketing mailing list. We only collect certain data about you, as detailed below. Any email marketing messages we send are done so through an EMS, email marketing service provider. An EMS is a third party service provider of software/applications that allows marketers to send out email marketing campaigns to a list of users.
Email marketing messages that we send may contain tracking beacons/tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of data such as times, dates, IP addresses, opens, clicks, forwards, geographic and demographic data. Such data, within its limitations will show the activity each subscriber made for that email campaign.
Any email marketing messages we send are in accordance with the GDPR and the PECR. We provide you with an easy method to withdraw your consent (unsubscribe) or manage your preferences/the information we hold about you at any time. Please see the footer of any marketing messages from us for instructions on how to unsubscribe or manage your preferences.
Our EMS provider is MailChimp. We collect and hold the following information about you within our EMS system:
Subscription time and date
Resources & further information
If you have any questions or concerns about our privacy practices or your personal information please contact us by email at info(at)obec.net or by post at:
OBEC.net, sro; Potoční 8; 617 00 Brno, Czech Republic, EU
Last updated 26/06/2019