In the case that you grant us your consent to the processing of your personal data, we will be able to contact you in the future with an offer of our products and services which correspond better to your needs. Provision of our products and services is, however, not conditioned by this consent. Of course, you can change your decision at any time and to withdraw your consent. Here we would like to state some information on the processing of your personal data.

1. TO WHOM DO YOU GRANT YOUR CONSENT TO THE PROCESSING OF YOUR PERSONAL DATA, OR WHO ARE WE?

You grant your consent to the processing of your personal data to the company:

E.Mi – International s.r.o.

Company Reg. No. 24214647

Registered office: U božích bojovníků 89/1, Žižkov, 130 00 Prague 3

Registered in the Commercial Register administered by the Municipal Court in Prague under the file ref. no. C 189332

2. FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

We process your personal data for marketing purposes which include the following activities:

• Participation in the loyalty programme,
• Informing about new products and special offers, as well as sending invitations to corporate events (exhibitions, E.MiDay); we can send you offers on the basis of your consent electronically, especially by way of e-mail messages or messages sent to a mobile device through a phone number, through the web client zone, in a written form or by way of phone calls,
• Automated processing of personal data with a view to adapting a commercial offer to your individual needs,
• Organising various surveys of satisfaction with our products and services.

3. WHAT PERSONAL DATA WILL WE PROCESS ON THE BASIS OF THIS CONSENT PROVIDED BY YOU?

On the basis of this consent we will process the following personal data:

• First name(s), surname, title,
• Place of residence/business,
• Date of birth,
• Data from the documents submitted,
• Payment data and payment behaviour data,
• Telephone and e-mail connection data,
• Information identifying the equipment or the person connected with the use of the equipment, namely the IP address.

4. WHY DO PROFILING AND AUTOMATED DECISION MAKING TAKE PLACE?

We try to provide you with the most suitable personalised offers of products and services and not to bother you with the offer of all our products. For this reason we profile your personal data on the basis of the consent granted by you, to which we use automatic information systems or web applications. In practice this means that still before offering a product or service to you, we at first assess, according to your personal data, what needs you could have and according to the results we will send you personalised offers of products and services.

The automated assessment (profiling) of personal data helps us to get better knowledge of you and your needs and according to this fact also to adapt our products and services so that they can be tailored to you.

5. FOR HOW LONG WILL WE PROCESS YOUR PERSONAL DATA?

We will process your personal data for up to 10 years from the day when you provide this consent to the processing of your data to us.

6. CAN ANYBODY ELSE PROCESS YOUR PERSONAL DATA FOR US?

Your personal data are processed by us, however, in order to be able to fulfil the above mentioned purpose of the processing of your personal data, your personal data are processed for us also by the following processors – providers of web sites, e-mail, SMS correspondence, on-line chat, statistical and monitoring systems.

7. CAN YOU WITHDRAW YOUR CONSENT TO THE PROCESSING OF PERSONAL DATA?

Yes, you can withdraw your consent to the processing of your personal data at any time, by clicking on the corresponding field in your account.

At the same time we state that the non-granting of this content or its withdrawal does not have any impact on provision of our products or services.

8. WHAT ARE YOUR RIGHTS IN RELATION TO THE PERSONAL DATA PROCESSED?

You have the right to:

• Access to your personal data – or you have the right to ask us for the information whether we process your personal data or not, and if yes, what of your personal data we process and for what purpose, to what other entities we make your personal data accessible, for how long your personal data will be stored at our company, whether automated decision making, including profiling, is carried out or not
• Explanation, correction or completion of your personal data – if you think that your personal data which we process are inexact, you have the right to require explanation and removal of the state which has arisen, especially through blocking, correction, completion or erasure of personal data
• Erasure of your personal data,
• Limitation of the processing of your personal data,
• Portability of your personal data – you have the right to obtain the personal data concerning you and which you have provided to us, in a structured, commonly used and machine-readable format, for the purpose of the transferring thereof to another data controller
• Contact the Office for Personal Data Protection – in the case that you have doubts about compliance with the obligations associated with the processing of your personal data, you have the right to contact the Office for Personal Data Protection (www.uoou.cz)

If you think that your personal data are processed by us or by a processor authorised by us in contradiction with the purpose for which the data were provided to us, you have the right to raise an objection against the processing of personal data for the purpose of direct marketing, including profiling, as far as the direct marketing is concerned.

9. DECLARATION

You declare that if you are younger than 16, you have asked your legal guardian for the consent to the processing of your personal data.

You declare that the personal data provided are true, were provided freely, knowingly, voluntarily and on the basis of your own decision.

Additional information concerning the processing of personal data is provided for in the document Information Note on Processing of Personal Data. The current information concerning the processing of personal data, including the information about personal data recipients, is always stated here


Information note on processing of personal data

This is E.Mi – International s.r.o. company, IČO identification number 24214647, with registered office address U božích bojovníků 89/1, Žižkov, 130 00 Praha 3, entered in the Trade register at the Municipal Court in Prague under file number C 189332. We have put together this information note for you, our customers, to let you know how we collect, process, use and protect your personal data and your privacy.

Your personal data are handled in compliance with the legislation in force, namely with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”), Act No. 127/2005 Coll. on Electronic Communications, as amended, and Act No. 480/2004 Coll., on certain Information Society Services, as amended.

We would like to use this opportunity to inform you about processing of personal data that occurs when you visit the E.Mi – International company’s website https://emischool.com, and about other cases of processing of personal data connected to E.Mi – International activities that lead to processing of personal data of other persons (e.g. our nail art school clients etc.)

1. Processing of protocol files

1.1. When you access our website, we process protocol files related to access to our website in order to protect our legitimate interest to protect our website and improve its function.

1.2. The protocol files are therefore processed without your consent and can be stored for up to 10 years after you visit the website.

1.3. We arrange the processing of protocol files ourselves, or we use a third party’s services. The following data are being processed:

• Confirmation/rejection to provide consent for processing of personal data
• Registration and authorization
• Personal data
• Username and password
• E-mail and phone number
• Order details
• IP addresses
• Date and time of access
• Cookies

2. Processing of personal data for marketing purposes

2.1. If you would like to become a part of our loyalty program or would like us to inform you about new products and promotional deals, we will process your personal data based on your consent. The processed data will always include the following information: name, surname, date of birth, address, e-mail address. We can customize and target the content of these offers and other advertising based on the provided data and other data for content customization and targeting obtained from your behavior on the website or from our other offers.

2.2. We will only process your data after receiving your consent.

2.3. The data you provide will be processed for the duration of the consent, which is 10 years. We will either process your personal data ourselves or use the services of a third party.

2.4. The consent to allow the processing of personal data is completely voluntary and can be withdrawn at any moment. You can withdraw your consent by (un)checking the box in your personal user account.

2.5. If you do not provide us with consent to process and store your personal data, the following will become impossible: receiving advertising messages, creating an account at our website, placing orders, receiving postal, promotional, or system messages etc.

3. Processing of personal data related to purchase of goods via our e-store

3.1. If your purchase goods at our website at https://emischool.com, we will process the following personal data: name, surname, e-mail address, phone number, delivery address, payment method, and the content of your basket.

3.2. The above-mentioned data will be processed in order to fulfill a sales contract, deliver the ordered goods, and to protect our rights and interests protected by the law consisting of protection against potential litigations arising from concluded sales contracts.

3.3. These personal data will be processed for 10 years after concluding the contract.

3.4. We will either process personal data of our customers ourselves or use the services of a third party. In cases where clients request for the goods to be delivered to the address stated in the order, the clients’ personal data (their name, surname, phone number and delivery address) will be shared with the shipping company.

3.5. We process e-mail addresses of customers who successfully place an order at our e-store in order to check that the customers were happy with the purchase. The applicable legal title for such processing of e-mail addresses is protection of our legitimate rights and interests consisting of getting feedback on the shopping process from our customers in order to improve our services and offer.

3.6. We will process the feedback ourselves or use the services of a contractual third party.

4. Use of cookies and website analytics

4.1. To improve our website, assess the number of visits, and optimize our marketing activities, our website uses cookies.

4.2. Cookies are small text files that are locally stored on the computer accessing the website via the computer’s internet browser. Cookies are not intended to and cannot be used to identify the website’s visitors. A list of all cookies that our company collects via our website and third-party websites can be found here.

4.3. If you do not agree with use of cookies, you can disable them in your browser’s settings. You can find instructions on disabling cookies here.

4.4. To analyze websites via cookies, we use Google Analytics by Google Inc., with registered offices at Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“).

4.5. How does analysis via Google Analytics work? First, the data on website usage obtained through collecting cookies is transferred to Google’s server based in USA, where the data is then analyzed. As a result of our website’s IP address anonymization settings, the IP address is shortened by Google before the data is transferred to Google’s USA-based server. The IP addresses are shortened in one of the EU or EEA member states. Transfer of full IP addresses to Google’s USA-based server and their shortening (anonymization) on the US territory happens very rarely.

4.6. Google will not associate the transferred data, including the anonymized IP addresses, with any other data.

4.7. Any person visiting our website can disable use of cookies and their analysis via Google Analytics by changing their internet browser settings, as was mentioned above, or by clicking the following link that will place a so-called opt-out cookie on their computer, preventing storing data about their visit of our website in the future, or by installing a browser plugin, available to download here. This plugin only works on a specific computer and in a specific browser it was installed in and must not be deleted or deactivated to ensure that Google Analytics services stay disabled.

5. Use of social plugins

Our website contains third-party social plugins that allow the visitors to share our website’s content with their friends and other contacts. Below is a list of the third parties involved:

• Facebook plugin operated by Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA;
• Youtube plugin operated by YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a subsidiary of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043;
• “VKontakte” Ltd, INN 7842349892, OGRN 1079847035179, with registered offices at 191024, St. Petersburg, ul. Khersonskaya, 12-14, A, office 1-H;
• “MAIL.RU” Ltd, INN 7743001840, KPP 771401001, OGRN 1027739850962, OKPO 52685881, with registered offices at 125167, Moscow, Leningradsky Prospect, 39, building no. 79;
• “YANDEX” Ltd, INN 7736207543, KPP 997750001, OGRN 1027700229193, OKPO 55187675, with registered offices at 119034, Moscow, ul.Lva Tolstogo, 16;
• “Jivoste” Ltd, INN 7725745476, OGRN 1127746026792, KPP 772501001, with registered offices at 115280, Moscow, Leninskaya Sloboda street, 19, office no. 21;
• “Google” Ltd, INN 7704582421, KPP 770501001, OGRN 1057749528100, OKPO 93279213, with registered offices at 212099, Moscow, Smolenskaya square 3, Smolensky Passazh business center.

6. Rights related to protection of personal data

6.1. When processing personal data, no decisions that could have legal consequence or otherwise significantly affect the entities whose personal data are being processed are made based on exclusively automated processing.

6.2. When we process your personal data, you are entitled to the following rights related to processing of your personal data when all legally required prerequisites are fulfilled:

• a) right to access to personal data consisting of obtaining, upon request, free access to information on what personal data is being processed;
• b) right of correction of your processed personal data;
• c) right of erasure of your processed personal data;
• d) right to have the processing of your personal data restricted;
• e) right to data portability;
• f) right to withdraw your personal data processing consent at any time, if the consent serves as legal basis for processing of personal data (e.g. for sending offers and other advertising and promotional information).

6.3. You have the right to raise an objection against your personal data processing if the legal basis for such processing lies in our legitimate interest.

6.4. You can exercise the rights listed above in writing or via e-mail using contact information below. You can also submit your complaint to a supervisory authority:

The office for personal data protection

Pplk. Sochova 27, 170 00 Praha 7

Phone number: 234 665 111

website: www.uoou.cz

6.5. Contact information: controller of personal data and the commissioner for personal data protection:

Controller of personal data

E.Mi - International s.r.o.

U božích bojovníků 89/1

130 00 Praha 3 – Žižkov

Phone number: +420 773 208 276

e-mail: post@emischool.com

6.6. We have established a position of the commissioner for personal data protection who can be reached at the following e-mail address: post@emischool.com

Date: 2018.05.25