Information on the Processing of Personal Data
By attending events organized by the Controller, visitors agree to the taking of photographs and audio and audiovisual recordings of themselves. These photographs, audio, and audiovisual recordings may be used by the organizer for any advertising, promotional, and similar purposes free of charge.
NISA AIR, s.r.o., ID No.: 62242661, registered office at Bezděčín 136, 293 01 Mladá Boleslav, registered in the Commercial Register maintained by the Municipal Court in Prague under file No. C 131758 (hereinafter referred to as the "Controller"), hereby informs customers, if they are natural persons, as data subjects, that their personal data will be processed as follows:
1) For the purpose of fulfilling the Controller's legal obligations, the following personal data of the customer will be processed:
Name and surname or company name, residential or business address, identification number, tax identification number, date of birth, possibly personal identification number, scope and subject of performance, and other mandatory data according to relevant legal regulations
These personal data will be processed mainly to fulfill obligations arising from relevant legal regulations (e.g., in the field of accounting). Personal data may be transferred to third parties, in particular state authorities, if required by law. Personal data will be processed for the period necessary to fulfill legal obligations applicable to the Controller.
2) For the purpose of fulfilling a contract in which the customer is a contractual party, the following personal data of the customer will be processed:
Name and surname or company name, residential or business address, delivery address, identification number, tax identification number, date of birth, possibly personal identification number, email address, phone number, bank details, and other data provided by the customer for this purpose
These personal data will be processed mainly for the purpose of processing the customer's order and enforcing rights and fulfilling obligations arising from the contract. Customer personal data may be transferred to the Controller's contractual partners, especially transport companies, for the purpose of delivering goods. The Controller processes personal data necessary for fulfilling the contract, including related rights (e.g., warranty claims), for the duration of the contractual rights and obligations. These personal data will also be processed to take necessary measures before concluding a contract at the customer's request. The data will be processed for negotiation purposes until the contract is concluded or negotiations are terminated.
3) For the purpose of the Controller's legitimate interests, the following personal data of the customer will be processed:
Name and surname or company name, residential or business address, email address, phone number, identification number, tax identification number, date of birth, possibly personal identification number, scope and subject of performance, and other data provided by the customer for this purpose
These personal data will be processed mainly to enforce possible claims of the Controller and to contact customers who have concluded a contract through offers of goods or services from the Controller. The personal data of the customer will be processed for the period necessary to fulfill the Controller’s legitimate interests.
The Controller informs the customer that if the customer is a legal entity, the Controller will process the personal data of a natural person acting on behalf of this legal entity, for the purposes and to the extent specified above, including name, surname, job position, email address, and phone number. The Controller may also process personal data on behalf of the Controller through a processor (e.g., in connection with technical support, consulting, security of the Controller’s property, etc.). The Controller will disclose the identity of processors upon request.
The processing of personal data of all customers complies with Act No. 101/2000 Coll., on the Protection of Personal Data, as amended (hereinafter the "Act"), and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, effective from 25 May 2018 (hereinafter the "Regulation").
The customer has the right to request access to their personal data from the Controller, meaning they have the right to request confirmation of data processing and information on the processing process. The customer also has the right to data portability. If personal data are inaccurate, the customer may request correction, and if incomplete, they may request supplementation. The customer may object to processing, request deletion, or restriction of processing only for reasons provided by law or the Regulation.
4) Personal data protection conditions when purchasing in the e-shop:
The specified personal data must be processed to fulfill orders and contractual obligations if a purchase contract is concluded between you and the seller. Such processing is allowed under Article 6(1)(b) of the Regulation – processing is necessary for contract fulfillment.
The seller also processes these data for record-keeping and potential future enforcement and protection of the contractual rights and obligations. Personal data will be retained for the legally required period after the last contractual fulfillment unless a longer retention period is required by another legal regulation. Such processing is permitted under Article 6(1)(c) and (f) of the Regulation – processing is necessary to fulfill legal obligations and for the Controller’s legitimate interests.
The collection of cookies for the purposes mentioned above may be considered personal data processing. Such processing is based on a legal reason – the Controller’s legitimate interest, and is permitted by Article 6(1)(f) of the Regulation.