Personal data processing policy – GDPR

Below you will find the policy on the processing of buyers' personal data in the operation of the UJEP Bookstore published in accordance with Article 12 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Personal data controller
Jan Evangelista Purkyně University in Ústí nad Labem
Pasteurova 3544/1
400 96 Ústí nad Labem
ID: 44555601

Data Protection Officer
e-mail: poverenec@ujep.cz
phone: +420 475 286 350
mobile: +420 720 073 202

Processing of personal data
We process your personal data when operating this online shop. The legal grounds for processing are the performance of the purchase contract and the fulfilment of the legal obligation imposed by Act No. 563/1990 Coll., on Accounting, as amended.
On the basis of an order or registration made by you, we process your personal data as follows:
a) Name, Surname, Street, City, Postcode
b) Name and registered office of the legal entity, ID number, VAT number
c) Telephone number, e-mail
d) Title of goods, name of author

If you send us an enquiry via the contact form, we process your name and email address.
These data are necessary for the conclusion and performance of the purchase contract, if one or more data are not filled in, the goods cannot be delivered. We use the data exclusively for order processing, invoicing and delivery of the goods. We do not use the personal data provided to send newsletters.
Only authorized university employees have access to your personal data. We only provide access to your personal data to other persons if we are required to do so by law, if it is necessary for the performance of the purchase contract (e.g. for the delivery of your order) or if these persons provide services to ensure the proper operation of the online shop (maintenance and administration of information systems). We only provide data to these persons if we have entered into a contract with them for the processing of personal data, so they are bound by the same obligations in relation to personal data as the University itself. We do not pass on personal data to any third parties for marketing purposes.
The data is provided for the duration of the purchase contract until the mutual settlement of rights and obligations and after that for statistical and accounting purposes for a period of 10 years.

You may exercise the following rights in relation to the personal data processed by the University:
the right of access to personal data - you have the right to ask us to confirm whether we are processing your personal data and if so, what personal data it is, for what purpose we are processing it, to whom we are transferring it, whether we are transferring your personal data to third countries, how long we are keeping your personal data, where we obtained your personal data from or whether there is automated processing or profiling;
the right to rectification - you have the right to have inaccurate or incomplete personal data rectified;
the right to erasure (right to be forgotten) - you have the right to request that we erase all your personal data; however, this right does not always apply as there are cases where the University needs to process personal data in order to properly perform its tasks (compliance with a legal obligation) or where erasure is not technically possible;
the right to restrict processing - you can exercise this right if you do not want us to process your personal data for other than necessary lawful reasons;
the right to data portability - you can request that we transfer your personal data to another data controller designated by you unless there is a legal obstacle to this;
the right to object and automated individual decision-making - you can object if you think we are processing your personal data unlawfully; you can also object directly to automated decision-making and profiling;
the right to lodge a complaint with the Office for Personal Data Protection - you can contact the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, website https://www.uoou.cz, anytime with a request, suggestion or complaint.
If you exercise a right in relation to the personal data processed, we will notify you of the resolution of your request within one month of receipt of the request. We may extend this period by two months in view of the complexity and number of requests we process.
You can exercise your rights in person with proof of identity or in writing with a handwritten or recognised electronic signature.
The place to exercise your rights is the Jan Evangelista Purkyně University in Ústí nad Labem, Pasteurova 1, 400 96 Ústí nad Labem or editors@journalmt.com.

Exercising your rights is free of charge. However, if your request is manifestly unfounded or unreasonable (e.g. the same request is repeated without justification), we may charge you a fee for processing your request.
For more information about data protection at the University, please visit www.ujep.cz.