Personal data controller
Czech version is available here
Kateřina Pavlová (Kinsukira), IČO: 01125494, with its registered office
Uralská 689/7, 160 00, Prague 6 – Bubeneč, registered in the Trade Register (hereinafter referred to as the “Controller”), declares that all personal data processed by the Controller are strictly confidential. The Controller handles them in accordance with national and European Union legislation applicable in the field of personal data protection.
The Controller collects, stores and uses your personal data within the meaning of Act No. 110/2019 Coll. on the processing of personal data (hereinafter referred to as the Act on the Processing of Personal Data), or Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR Regulation”). The individual purposes for which the controller processes personal data are further defined.
The controller also collects this personal data through its website at www.kinsukira.com (hereinafter referred to as the “website”).
The controller issues these principles so that you are sufficiently informed about what personal data the controller processes, for what purpose, for how long, who will have access to your personal data and what rights you have. These principles apply to all personal data collected by the controller, whether they were collected for the purpose of fulfilling a contractual relationship, legal obligation, legitimate interest, or consent granted.
Processed data
The controller is authorized to process the following personal data.
Name and surname, e-mail, postal address, billing address, delivery address, telephone number, bank details, or for a company, company name, ID number, VAT number, registered office or place of business, delivery address.
Purpose: Performance of the contractual relationship and Registration on the e-shop
Data arising from the duration of the contract – purchased goods, all communication and documents that you provide to us as a client in connection with the performance of the contract.
The retention and processing of personal data is for the purpose of fulfilling the contract and legal obligations for a period of 10 years from the implementation of the last part of the performance under the contract, unless another legal regulation or ongoing judicial or administrative proceedings require the retention of contractual documentation for a longer period.
The individual purposes of processing are the following:
• performance of the contractual relationship means: the relationship between you and the administrator arising from an order, registration, on the basis of a concluded contract, on the basis of an application and participation in a competition, etc.;
• sending commercial communications means: sending commercial offers, via electronic mail (e-mail), via short text messages or via telephone call;
• accounting and tax purposes means: accounting records within the meaning of accounting and tax legislation;
• personnel, payroll agenda means: concluding employment contracts, processing wages, social and health insurance contributions according to Act No. 262/2006 Coll., Labor Code, No. 582/1991 Coll. on the organization and implementation of social security, No. 48/1997 Coll., on public health insurance and on amendments and supplements to certain related acts;
• statistical purposes means: anonymized survey of website traffic, monitoring the number of page views, time spent on the website, type of device from which you access the website. We collect data so that we can improve the quality of the services provided and offer clients relevant content;
• advertising display means: displaying advertisements on websites based on statistically determined customer preferences;
• legitimate interest means: effective defense in the event of a dispute; the period of processing personal data in such a case is 4 years from the expiry of the warranty period for the goods and is extended by the period for which the dispute is ongoing. We want to continuously improve the quality of our services and, if necessary, provide new and better services; we want to prevent the obstruction of such activities; therefore, activities that contribute to the fulfillment of this goal are our legitimate interest. A legitimate interest is also processing for the purposes of preventing fraud (e.g. assessing the risk of concluding a contract), direct marketing (e.g. offering relevant services to existing customers), transferring personal data within a group of companies for internal administrative purposes, reporting crimes and transferring personal data to the competent authority, ensuring network and information security. This list is only exemplary;
• fulfillment of other legal obligations means: providing information to law enforcement agencies, providing information to other public authorities, and the like.
We process your personal data for the period strictly necessary to ensure all rights and obligations arising from mutual legal transactions, at least for the period of processing the order, performing the transaction, providing the service, etc., and for the period for which the administrator is obliged to store personal data in accordance with generally binding legal regulations or for the period for which you have granted the administrator consent. Otherwise, the processing period results from the purpose for which the personal data is processed or is given by legal regulations.
Personal data is processed by the administrator both manually and automatically. The administrator is authorized to process some information automatically, for example to create statistical information about the traffic to its websites.
Based on the concluded purchase contract, we are authorized to send you newsletters. We do not intend to overwhelm you with annoying e-mails; we carefully select the content that we send at large time intervals. If you are not interested in receiving this information from the administrator, you can unsubscribe from the newsletters at any time.
Personal data processed based on consent
If we have obtained your consent to process personal data, this was done for one of the following purposes:
• use of your photos;
• another purpose specified in the consent.
Cooperation with third parties in the processing of personal data
To ensure the high quality of our services, we may also use external partners (primarily in the field of production - printing of products, platforms for operating e-shops and marketing) who help us with the processing of personal data. These partners (sub-processors) process personal data exclusively on the basis of our instructions and in accordance with applicable legal regulations.
When selecting these partners, we ensure that they meet all personal data protection requirements under the GDPR and ensure an adequate level of protection of your personal data. Even though we use the services of these sub-processors, we remain fully responsible for the processing of your personal data.
A list of our current sub-processors is available upon request.
Data subject rights
As a data subject, you have the following rights that arise for you from legal regulations and that you can exercise at any time. These are:
• the right to access personal data, according to which you have the right to obtain information from the controller about whether the controller is processing your personal data. The controller is obliged to provide you with this information without undue delay. The content of the information is given by the provisions of Article 15 of the GDPR. The controller has the right to request reasonable compensation for the provision of information not exceeding the costs necessary to provide the information;
• the right to rectification or erasure of personal data, or restriction of processing, according to which you have the right to have personal data that is inaccurate or incorrect corrected. If your personal data are no longer necessary for the purposes for which they were collected or are being processed unlawfully, you have the right to request their deletion. If you do not want to request the deletion of personal data, but only temporarily restrict their processing, you can request the restriction of processing;
• the right to request an explanation if you suspect that the processing of personal data by the controller is in breach of legal regulations;
• the right to contact the Office for Personal Data Protection in case of doubts about compliance with the obligations related to the processing of personal data;
• the right to data portability, i.e. the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format, for more details see Art. 20 GDPR;
• the right to object to the processing of personal data which is processed for the purpose of fulfilling a task carried out in the public interest or in the exercise of public authority or for the purpose of protecting the legitimate interests of the controller. The controller shall terminate the processing without undue delay unless it demonstrates that there is a legitimate interest/reason for the processing which overrides your interest, rights or freedoms;
• the right to withdraw consent to the processing of personal data at any time, if you have granted the controller consent to the processing of personal data.
Cookies
Cookies are short text files that a website sends to your browser. They allow the website to record information about your visit, such as the language you have chosen, and so on, so that your next visit to the site can be easier and more enjoyable. Cookies are important because without them, browsing the Internet would be much more difficult. Cookies enable us to make better use of our website and to tailor its content to your needs; they are used by almost every website in the world. Cookies are useful because they increase the user-friendliness of a repeatedly visited website.
The administrator may use the following types of cookies on the website:
• Session (i.e. temporary) cookies allow us to link your individual activities while browsing this website. These files are activated when you open your browser window and deactivated when you close your browser window. Session cookies are temporary and all these files are deleted when you close your browser.
• Permanent cookies help us to identify your computer when you visit our website again. Another advantage of permanent cookies is that they allow us to adapt our website to your needs.
• In accordance with the provisions of Section 89, paragraph 3 of Act No. 127/2005 Coll., on electronic communications, as amended, we would like to inform you that our website uses cookies for its operations, i.e. that we process your cookies, including permanent ones.
• Internet browsers usually include cookie management. As part of your browser settings, you can probably manually delete individual cookies, block them or completely prohibit their use. For more information, use the help of your internet browser. If you do not allow the use of cookies, some functions and pages may not work as they should.
• We use cookies to personalize content and ads, provide social media functions and analyze our traffic. We share information about how you use our website with our partners operating in the field of social media, advertising and analytics. By using the website, you agree to the linking of the following services:
• Google Analytics - we use this service to obtain statistical information, while Google may also retain the obtained data for its own purposes in accordance with the Privacy Policy available at http://www.google.com/intl/cs/policies/privacy;
• In order to display targeted advertising within advertising and social networks on other websites, we transfer data about your behavior on the website to these advertising and social networks; however, we do not transfer your identification data to them.
Provision to third parties
In order for us to be able to properly offer you our goods in the e-shop and deliver them to you, your personal data may be further disclosed to other entities:
• the operator providing the technical solution and support of the e-shop
• the operator providing the printing and production of goods
• the operator of the accounting system and the cloud storage on which the accounting system is securely stored
• the provider with whom the administrator has electronic mail,
• credit card companies, payment service providers for the purpose of processing payments and banks based on your order, fulfilling the purchase contract
• carriers for the purpose of delivering the products or services you ordered and resolving complaints, including withdrawal from the contract
• third parties, e.g. legal representatives, courts for the purpose of enforcing or concluding any contract with you;
• public authorities (e.g. the police).
• possibly other providers of processing software, services and applications, which the seller does not currently use.
Information and questions
The data subject can obtain further information about the rights and obligations in the protection of personal data on the website www.uoou.cz.
These principles are valid from November 1, 2025.