AffilMaster Personal Data Processing Terms and Conditions

company:AFFILMASTER ONLINE s.r.o.
registered office:Vojtěšská 211/6, 110 00 Praha 1
company ID: 17972582
E-mail:support@affilmaster.com
registered in the Commercial Register maintained by the Municipal Court in Prague under file number C 379517
  1. Introductory provisions
    1. For the purposes of these terms and conditions on the processing of personal data, the following terms shall have the following meanings:
      1. Regulation” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such authorities and repealing Directive 95/46/EC (General Data Protection Regulation), as amended;osobních údajů a o volném pohybu těchto úřadů a o zrušení směrnice 95/46/ES (obecné nařízení o ochraně osobních údajů) v platném znění;
      2. “Terms” means these terms and conditions on the processing of personal data; and
      3. “General Terms and Conditions” means the terms and conditions for the provision of the AffilMaster.
    1. All capitalised definitions in the General Terms and Conditions have the same meaning in these Terms and Conditions.
    2. These Terms and Conditions form an integral part of the General Terms and Conditions, although they are set out in a separate document.
    3. All general provisions of the General Terms and Conditions are fully applicable to the legal relations between the User and the Operator under these Terms and Conditions.
  2. Provisions on the processing of personal data
    1. The Operator hereby informs the User, within the meaning of the Personal Data Protection Act, that it collects and processes personal data about him/her, which are provided in the context of the registration or use of the Services (in particular the e-mail address), to the extent necessary for the performance of the Operator’s obligations. The User consents to the processing of the data provided by him/her (i.e. collection, storage on information carriers, disclosure, modification or alteration, retrieval, use, transmission, dissemination, storage, classification or combination, blocking and disposal).
  3. Providing consent to the processing of personal data
    1. By registering or concluding the Agreement and using the Services, the User grants the Operator explicit consent (i) to the processing of his/her personal data for the purposes set out in these Terms and to the extent provided when registering or using the Services, and for further marketing purposes (i.e. offering products and services) for a period of time until the purpose for which the personal data was processed in accordance with the Personal Data Protection Act has passed; (ii) to the sending of commercial communications by electronic means in accordance with Act No. 480/2004 Coll, on certain information society services and on amendments to certain acts, as amended; and (iii) that the personal data communicated by him/her will be used to the full extent for the purposes mentioned above and processed also through a processor authorized by the Operator
    2. The Operator is entitled to process personal data for the entire period from the establishment of the Registration or for the duration of the Contract. The User acknowledges that withdrawal of consent to the processing of personal data will mean immediate termination of the Agreement by the Operator and cancellation of the Registration. Upon withdrawal of consent to the processing of personal data, the Operator will terminate the processing of personal data within a reasonable period of time that corresponds to technical and administrative possibilities.
  4. Purpose of processing personal data
    1. The User’s personal data is processed for the purpose and for the reasons set out below: (i) to enable the proper and timely provision of the Services by the Operator to the User and the proper and timely use of the Services by the User, (ii) to enable the correct and optimal use and configuration of the Website in accordance with the User’s settings, (iii) to perform general customer administration of the Operator in relation to Users, (iv) sending communications about the Website and other products and services (including the Services) of the Operator to Users so that the User is informed in particular about the extension of the scope of the Services and to enable the User to use such extended Services in a simple and timely manner, (v) providing advertising directly tailored to the User so that the User is not harassed to a reasonable extent by such advertising in which the User is not interested, (vi) investigating violations of the Terms, (vii) generating anonymous statistics about Users for the purpose of developing the Website, the Services or providing statistical information to a third party, (viii) registering the User on other social websites owned by the Operator and enabling the User to use other services of the Operator.
    2. The aforementioned use of personal data is limited to the extent necessary so that the processing of personal data is minimized.
    3. Personal data are processed by the Operator on the basis of the consent provided by the User, which the User expresses during Registration or later when changing these Terms.
  5. Scope of processing of personal data
    1. By registering or using the Services, the User gives the Operator consent to obtain and archive (for the duration of the Agreement and the following three years) information used to access the Website, Register, use the Services, i.e. in particular information, settings and administrative data uploaded to the Website, such as username and password, User settings, history and records, time, date and URL of all pages visited via the Website, Internet search history, technical information regarding the Internet browser. During the Registration process, the User provides certain personal information to the Operator. If the User decides to provide additional personal data about himself or makes such data available to the Operator, he hereby gives the Operator permission to treat the additional personal data provided.
    2. The Website uses cookies to identify Users, to remember language preferences and to facilitate navigation on the Website. The User agrees to this. It is possible to disable cookies in the browser, but some pages of the Website will not function properly in this case.
    3. The User acknowledges that his/her personal data may be processed by third parties in accordance with the Personal Data Protection Act, namely companies from the Operator’s group, in order to provide technical and administrative support, as well as entities in a contractual relationship with the Operator, in particular to ensure the fulfilment of rights and obligations arising from these Terms and Conditions. The Operator shall transfer the User’s personal data to processors only after concluding a contract for the processing of personal data, for the above-mentioned purposes, to the extent necessary and only if the processor proves that it has sufficient technical security to prevent unauthorised access, loss or other unauthorised handling of personal data, unless otherwise provided by generally binding legal regulations.
    4. The User agrees that advertising and other commercial communications will be displayed on the Website by the Operator when accessing the Website or during the use of the Services.
    5. By registering, the User agrees that data may be accessed from countries outside the Czech Republic with the understanding that countries outside Europe may have lower standards of personal data protection than the Czech Republic.
  6. Obligations of the Operator when processing personal data
    1. The operator is obliged to collect and store personal data via electronic media in a secure database. Only authorized persons of the Operator may have access to personal data. Data backups are made to a separate disk and server and can only be accessed by authorised persons of the Operator.
    2. The access of the Operator, its managers, employees, collaborators (self-employed persons) and other similar entities to the personal data and other data of the User is severely limited and all the aforementioned entities are bound by the obligation of confidentiality to the standard extent.
    3. The operator shall reasonably ensure that the personal data is updated, i.e. it shall reasonably ensure that any personal data which it discovers to be inaccurate is deleted or corrected without delay.
    4. The Operator is obliged to reasonably ensure, regardless of the agreed period for processing personal data agreed in these Terms and Conditions, that personal data is processed only for the strictly necessary period that corresponds to the purpose of processing personal data.
    5. Other obligations of the Operator directly result from Article 8 of these Terms and Conditions and other generally binding legal regulations, in particular the Regulation.
  7. Mandatory disclosures to Users in accordance with the Regulation
    1. The identity and contact details of the Administrator are set out in the header of these Terms and Conditions;
    2. The operator has not appointed a data protection officer;
    3. The purposes for which the personal data are processed and the legal basis for the processing are set out in Article 5;
    4. The processing of personal data is not based on Article 6(1)(f) of the Regulation;
    5. The possible recipients or categories of recipients of personal data are listed in Article 6;
    6. The controller does not intend to transfer personal data to a third country or an international organisation;
    7. The period for which personal data will be stored is set out in Article 4;
    8. The User is entitled to request from the Operator access to personal data concerning the User, their correction or deletion, or restriction of processing, and to object to processing, as well as the right to data portability;
    9. The user is entitled to withdraw consent to the processing of personal data at any time;
    10. The user is entitled to file a complaint with the Office for Personal Data Protection at any time;
    11. The provision of personal data is based on consent to the processing of personal data, and failure to provide consent will not allow the User to set up the Registration and conclude the Contract;
    12. The processing of personal data does not involve automated decision-making, including profiling.
  8. [Data subject’s right of access to personal data] In accordance with Article 15 of the Regulation, the Operator discloses to the User:
    1. The User has the right to obtain confirmation from the Operator as to whether or not the personal data concerning him/her is being processed and, if so, the right to access such personal data and the following information:
      1. účely zpracování;
      2. the categories of personal data concerned;
      3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
      4. the intended period for which the personal data will be stored or, if this cannot be determined, the criteria used to determine that period;
      5. the existence of the right to request from the Operator the rectification or erasure of personal data concerning the data subject or the restriction of their processing or to object to such processing;
      6. the right to lodge a complaint with the Office for Personal Data Protection;
      7. all available information about the source of the personal data, unless it is obtained from the data subject;
      8. whether automated decision-making, including profiling, takes place.
  9. [Right to rectification] In accordance with Article 16 of the Regulation, the Operator informs the User:
    1. The User has the right to have the Operator correct inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the User has the right to have incomplete personal data completed, including by providing an additional declaration.
  10. [Right to erasure] (“right to be forgotten”)] In accordance with Article 17 of the Regulation, the Operator informs the User:
    1. The User has the right to have the Operator delete the personal data concerning the User without undue delay, and the Operator is obliged to delete the personal data without undue delay if one of the following reasons applies:
      1. the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
      2. the personal data are no longer necessary for the purposes for which they were collected or otherwise processedThe user withdraws the consent on the basis of which the data were processed and there is no further legal basis for the processing;;
      3. The user objects to the processing and there are no overriding legitimate grounds for the processing;
      4. personal data have been unlawfully processed;
      5. personal data must be erased to comply with a legal obligation under Union or Member State law to which the Operator is subject.
  11. [Right to restriction of processing] In accordance with Article 18 of the Regulation, the Operator informs the User:
    1. The User has the right to have the Operator restrict processing in any of the following cases:
      1. The User denies the accuracy of the personal data for the time necessary for the Operator to verify the accuracy of the personal data;
      2. the processing is unlawful and the User refuses the deletion of the personal data and instead requests the restriction of its use;
      3. The Operator no longer needs the personal data for processing purposes, but the User requires it for the establishment, exercise or defence of legal claims;
      4. The user has objected to the processing of
  12. [Notification obligation regarding rectification or erasure of personal data or restriction of processing] In accordance with Article 19 of the Regulation, the Operator shall communicate to the User:
    1. The controller shall notify the individual recipients to whom the personal data have been disclosed within a reasonable period of time of any rectification or erasure of personal data or restriction of processing, except where this proves impossible or involves a disproportionate effort. The Operator shall inform the User of these recipients if the User so requests.
  13. [Right to data portability] In accordance with Article 20 of the Regulation, the Operator informs the User:
    1. The User has the right to obtain the personal data concerning him/her that he/she has provided to the Operator in a structured, commonly used and machine-readable format, and the right to transfer this data to another controller, without the Operator preventing this, if the processing is based on consent or if the processing is carried out by automated means.
  14. [Right to object] In accordance with Article 21 of the Regulation, the Operator informs the User:
    1. The user has the right to object at any time to the processing of personal data concerning him or her for reasons relating to his or her particular situation. The Operator shall no longer process personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests or rights and freedoms of the User or for the establishment, exercise or defence of legal claims. The User has the right to object at any time to the processing of personal data concerning him/her for marketing purposes, which includes profiling, insofar as it relates to such direct marketing.
  15. [Automated individual decision-making, including profiling] In accordance with Article 22 of the Regulation, the Operator discloses to the User:
    1. The user has the right not to be subject to any decision based solely on automated processing, including profiling, which has legal effects on him or her or similarly significantly affects him or her.
  16. Effectiveness of the Privacy Policy
    • These Terms and Conditions come into force and effect on 01.02.2023