Art. I. Introductory provisions

The following information relates to the processing of personal data of visitors and/or customers of these websites (hereinafter referred to as the "Data Subject") carried out by DUKLA LTD. Contact details: Address: 19a Russell Parade Golders Green Road, London NW11 9NN, Telephone: +44 208 458 1175, e-mail: mail@dukla.co.uk ("Operator"). The processing and protection of this personal data is governed by the provisions of Act no. 18/2018 Coll., on the protection of personal data as amended (hereinafter referred to as the "Act"), in conjunction with the provisions of Regulation of the European Parliament and of the Council (EU) no. 2016/679 of April 27, 2016, General Data Protection Regulation (hereinafter referred to as the "Regulation").

Art. II. Processing of personal data when sending an order

Personal data of the Affected Person, which the Operator processes for the purpose of processing orders and fulfilling obligations arising from the contract concluded remotely (via these pages) between the Affected Person and the Operator, are: first and last name, postal and email address and telephone number of the Affected Person.

The legal basis for the processing of this voluntarily provided data is the fulfillment of rights and obligations arising from the above-mentioned contract, which would otherwise be impossible to conclude and fulfill, i.e. process and deliver the Data Subject's order.

Personal data will be processed for the duration of the statutory obligations of the Operator arising from generally binding legal regulations, in particular from the Civil Code, the Act on Consumer Protection in the Sale of Goods or the Provision of Services on the basis of a contract concluded at a distance or a contract concluded outside the Seller's premises, the Act on Archives and registries, the Accounting Act and the VAT Act, i.e. some of the data mandatorily stated on the Operator's tax documents for at least 10 years.

The chosen delivery service provider for order delivery or the accounting service provider for accounting of tax documents may be entrusted with the processing of the Personal Data of the Affected Person.

When processing the Personal Data of the Affected Person, there will be no automated decision-making or profiling, while the Operator does not intend to provide personal data to a third country, international organization or third parties, with the exception of an intermediary.

Above all, the affected person has the right to demand from the Operator access to his personal data, their correction or deletion, or restriction of processing, the right to object to the processing, as well as the right to file a complaint with the Office for Personal Data Protection, if the Operator and/or intermediary proceeds with the processing of personal data data in violation of the Regulation and/or the Law.

The possibility of purchasing goods and/or services offered on these websites is not primarily intended for visitors under the age of 16.

Art. III. Processing of personal data when signing up for the newsletter

Personal data of the Affected Person, which the Operator will process for the purpose of sending information about its products, services, news and promotions (newsletter), are: Email address of the Affected Person, first and last name.

The legal basis for the processing of this voluntarily provided data in the case of Affected Persons who are not existing customers of the Operator is the consent of the Affected Person pursuant to § 13 par. 1 letter a) of the Act in connection with section Art. 6 par. 1 letter a) Regulation, which can be revoked at any time by clicking on the active link located at the end of each newsletter or based on a written request sent to the Operator's email address.

The legal basis for the processing of this voluntarily provided data in the case of affected persons who are customers of the Operator is the legitimate interest of the Operator consisting in direct marketing and the further sale of goods and services, while the subscription to the newsletter aimed exclusively at the direct promotion of the Operator's goods and services can be revoked at any time by clicking to the active link located at the end of each newsletter or based on a written request sent to the Operator's email address.

Personal data will be processed for the duration of the interested person's interest in sending the Operator's newsletter.

An intermediary who ensures or can ensure the management of newsletter campaigns for the Operator, or who provides the Operator with a technical solution for the right of newsletter campaigns or who has access to the Operator's CRM systems, may be entrusted with the processing of the Personal Data of the Affected Person.

When processing the Personal Data of the Affected Person, there will be no automated decision-making or profiling, while the Operator does not intend to provide personal data to a third country, international organization or third parties, with the exception of an intermediary.

Above all, the affected person has the right to request from the Operator access to their personal data, their correction or deletion, or restriction of processing, the right to object to the processing, the right to transfer data to another operator, if the data was processed in an automated manner at the request of the affected person, as well as the right file a complaint with the Office for the Protection of Personal Data if the Operator and/or intermediary proceeds in the processing of personal data in violation of the Regulation and/or the Law.

The newsletter is not primarily intended for visitors under the age of 16.

Art. IV. Processing of personal data when commenting on products and/or entering questions and suggestions

Personal data of the Affected Person, which the Operator processes for the purpose of publishing his/her comment on a specific product or service or for the purpose of answering a question or suggestion submitted by the Affected Person, are: name and surname, email address of the Affected Person.

Personal data that will be provided to the Operator as part of the online help desk service or as part of a special contact form will not be published and are used exclusively for the purpose of answering the question or initiative of the Person concerned. The personal data that the Affected Person provides to the Operator in connection with a question or comment about a specific product or service using a special form designed for that, may be published in the description of the given product or service.

The legal basis for the processing of this data is the consent of the concerned person in accordance with § 13 par. 1 letter a) of the Act in connection with section Art. 6 par. 1 letter a) of the Regulation, which can be revoked at any time based on a request addressed to the Operator.

Personal data will be processed for the duration of the Data Subject's interest in publishing the evaluation of his purchase and/or question, if such a question is published for specific products or services, or until the Data Subject answers the question or suggestion sent via the online help desk or contact form.

When processing the Personal Data of the Affected Person, there will be no automated decision-making or profiling, while the Operator does not intend to provide personal data to a third country, international organization or third parties, with the exception of an intermediary that mediates a technical solution for entering comments (e.g. Facebook) or operation of the online help desk.

Above all, the affected person has the right to request from the Operator access to their personal data, their correction or deletion, or limitation of processing, the right to object to processing, the right to transfer data to another operator, as well as the right to file a complaint with the Office for Personal Data Protection, if the Operator and/or the intermediary proceeds in the processing of personal data in violation of the Regulation and/or the Law.

The form for adding comments and/or entering a question or suggestion is not primarily intended for visitors under the age of 16.

Art. V. Processing of personal data during registration on the Operator's website

Personal data of the Affected Person, which the Operator processes for the purpose of establishing a user account of the Affected Person and providing services intended for registered users, are: Name and surname, postal and email address and telephone number of the Affected Person.

The legal basis for the processing of this data is the contract for the free provision of services associated with registration, which consist in creating a user account in the e-shop, in obtaining the possibility to manage orders in an online environment, in obtaining the possibility to make future purchases without the need to repeatedly enter contact data, in obtaining the possibility to follow the history of purchases. The person concerned therefore has the option of choosing to use these pages and send orders without registration or as a registered user with the option of using the above services.

When using the services associated with registration, a user account protected by a login name (or email address) and password will be created for the person concerned. The Affected Person is responsible for securing the login name and password against loss and misuse.

The operator may cancel the user account if the affected person does not use this account for more than 1 year or if he/she grossly violates his/her obligations arising from the conditions of its use.

Personal data will be processed for the duration of the interested person's interest in using the services associated with the user account, i.e. for the duration of the contract for the free provision of these services.

When processing the Personal Data of the Affected Person, there will be no automated decision-making or profiling, while the Operator does not intend to provide personal data to a third country, international organization or third parties.

Above all, the affected person has the right to request from the Operator access to their personal data, their correction or deletion, or restriction of processing, the right to object to processing, the right to transfer data to another operator, if the personal data were processed in an automated manner at the request of the affected person, as well as the right to file a complaint with the Office for the Protection of Personal Data if the Operator proceeds with the processing of personal data in violation of the Regulation and/or the Law.

The services associated with the user account are not primarily intended for visitors under the age of 16.

Art. VI. Processing of personal data when evaluating purchases on price comparators

Personal data of the Affected Person, which the Operator will process for the purpose of publishing the purchase evaluation entered by the Affected Person in anonymized form, are: name or nickname, email address and purchase evaluation of the Affected Person.

An intermediary who provides the Operator with a technical solution for obtaining evaluations of purchases, and who publishes these evaluations for the Operator himself, may be entrusted with the processing of the Data Subject's personal data, primarily the operator of the internet price comparator indicated in the Data Subject's order.

The legal basis for the processing of this data is the legitimate interest of the Operator, which consists in verifying customer satisfaction for the purpose of improving the Operator's services for other customers.

Personal data will be processed for the duration of the interested person's interest in publishing the evaluation of his purchase.

When processing the Personal Data of the Affected Person, there will be no automated decision-making or profiling, while the Operator does not intend to provide personal data to a third country, international organization or third parties with the exception of the Intermediary.

Above all, the affected person has the right to demand from the Operator access to his personal data, their correction or deletion, or restriction of processing, the right to object to the processing, as well as the right to file a complaint with the Office for Personal Data Protection, if the Operator and/or intermediary proceeds with the processing of personal data data in violation of the Regulation and/or the Law.

The purchase evaluation form is not primarily intended for visitors under the age of 16.

Art. VII. Information on the use of cookies and the storage of IP addresses

What are cookies and how do they work?

Cookies are small files that are sent and stored on the computer, mobile phone or tablet of the person concerned by the websites that the person visits. Cookies are stored in the folder of the relevant internet browser used by the person concerned when viewing websites. On repeated visits to these websites, the internet browser of the affected person reloads the saved cookies and sends them back to the website or element that created the original cookie. This usually ensures the proper functionality of these websites.

How does the Operator use cookies?

The operator uses cookies for the purpose of ensuring the proper functionality of these websites (so-called essential cookies), cookies for analytical purposes in order to constantly improve the settings of these websites, and cookies for the purpose of displaying advertising - this is also where the legal interest of the operator of these pages lies , which is the legal basis for processing cookies. The data that the Operator processes on the basis of cookies are anonymous and are not linked to any specific person.

How can the use of cookies be set and disabled?

Cookies can be managed by any affected person in their internet browser. Different Internet browsers have different procedures for disabling or enabling cookies, which are usually found in the Options or Tools menu. Directly in the Internet browser, the Data Subject has the opportunity to manage cookies related to basic functions, website improvement, customization and advertising. However, disabling cookies may make the use of some basic functions of these websites impossible.

How long does the Operator keep the obtained information?

How long the Operator keeps the obtained data always depends on the respective type of cookies. The validity of session cookies expires immediately after closing the Internet browser. Permanent cookies, including locally accessible objects, can be valid for several months.

Use of IP address and other tools/h4>

Third-party tools that use the IP address of the Data Subject and/or cookie files may be placed on these websites and that:

The Operator will use for the purpose of addressing the Affected Person with an offer of its products and services after the Affected Person leaves this website, based on the Operator's legitimate interest, which consists in the sale of products and services that the Affected Person expressed interest in when visiting its website pages. Such a tool can be e.g. Facebook plugin, which connects the affected person with their profile on the Facebook social network, while more information about its use is provided on the following pages: https://www.facebook.com/about/privacy/;

The Operator will use it for the purpose of measuring the traffic and use of its website, based on the Operator's legitimate interest, which consists in the continuous improvement of these websites. Such a tool can be, for example, Google Analytics, Google Double Click and Google Tag Manager, which enable the analysis of the way these websites are used, while more information about their use is provided on the following pages: https://policies.google.com/privacy.

Most of the data that the Operator obtains with the help of the above-mentioned tools are completely anonymous (e.g. so-called masked IP addresses). Nevertheless, the Operator reminds that the Affected Person can exercise the rights described in Art. II. of these policies.