Register with us (including newsletter subscription) here and receive a 5% discount on all laboratory tests and 10% on all dietary supplements
You will receive the discount code via email.
Proceed to cart
Customer support:+420 731 007 192info@genx.cz
    Currency
    CZK
    Language
    English
    Home / Privacy policy conditions

    Privacy policy conditions

    PRINCIPLES OF PERSONAL DATA PROTECTION

    for the business company GenX Laboratory s.r.o.

    INTRODUCTORY PROVISIONS

    GenX Laboratory s.r.o., with its registered office at Pitterova 2855/9b, Žižkov, 130 00 Prague 3, ID: 17793190. The Company is registered in the Commercial Register kept by the Municipal Court in Prague under file No. C 376802 (hereinafter referred to as the "Company"), email info@genx.cz, tel. +420 731 007 192, www.genx.cz is the controller of personal data within the meaning of Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation") and generally binding legal regulations.

    Contact details of the data protection officer:

    • Name: Jan Krajíček
    • Address: 28. Října 1497/17, Český Těšín, 737 01
    • Address: Pitterova 2855/9b, Žižkov, 130 00 Prague 3
    • Email: jan.krajicek@genx.cz
    • Phone: +420 731 007 192

    SOURCE AND CATEGORY OF PERSONAL DATA, LEGAL BASIS, AND PURPOSE

    The Company processes personal data obtained in accordance with:

    • operating the Company's online store and offering and selling the Company's products and services;
    • cooperation with subjects.

    The data subject provides the Company with the following personal data by creating a user account and by submitting an order within the Company's online store: name and surname, residential address, delivery address, email address of the subject (or email), telephone number, IP address, date of birth, method of payment and payment details, and in the case of ordering a service and providing a sample for testing in accordance with the service provided by the Company, also health-related data (hereinafter collectively referred to as "personal data").

    In connection with submitting an order through the online store and/or creating a customer account, the data subject provides the Company (by ticking the appropriate declaration) consent to the processing of their personal data for marketing purposes and sending personal messages. Providing consent is voluntary and can be revoked at any time. Providing this consent is not a condition for the provision of products or services by the Company.

    Personal data is processed fairly, lawfully, and transparently exclusively for the purposes defined above and in accordance with the Regulation.

    The legality of processing personal data provided by the data subject is based, among other things, on Act No. 563/1991 Coll., on accounting (billing data), Act No. 89/2012 Coll., the Civil Code (performance of a purchase contract, contract for the provision of services, protection of legitimate interests of the seller), or Act No. 235/2004 Coll., on value-added tax, Act No. 99/1963 Coll., the Civil Procedure Code, and Act No. 141/1961 Coll., the Criminal Procedure Code (identification data of the data subject), or other relevant legal regulations.

    The data subject is obliged to provide their personal data (when registering, when ordering from the online store, when concluding a contract) correctly, currently, completely, and truthfully and is obliged to inform the Company without undue delay of any changes in their personal data.

    PERIOD OF RETENTION OF PERSONAL DATA

    The Company declares that personal data is retained for the time necessary to fulfill the purpose for which the personal data are processed, depending on the specific purpose and legal basis for processing personal data.

    The Company retains personal data for a period of 3 years from the settlement of the last order or for a period respecting all legal limits.

    For marketing purposes (including commercial communications) of the Company's products and services, the Company retains personal data for a period of 2 years from the termination of the contract/settlement of the last order or until consent is revoked.

    RECIPIENTS OF PERSONAL DATA

    The Company hereby informs that recipients of personal data may be, in addition to the Company as the controller, entities to whom the Company provides personal data based on legal regulations, as well as other processors - especially companies providing payroll, personnel software, companies providing logistics activities, companies providing IT security and data encryption, any other suppliers, Czech Post, couriers, any other cooperating persons. The Company ensures that the recipients comply with the necessary level of protection of personal data in accordance with the Regulation and these principles.

    Personal data is not transferred to third countries.

    METHOD OF PROCESSING, PROFILING

    Personal data will be processed electronically in an automated manner or in printed form in a non-automated manner.

    The Company does not carry out profiling or automated decision-making.

    The Company declares that it has adopted all technical and organizational measures to ensure the protection of personal data.

    RIGHTS OF DATA SUBJECTS

    Data subjects have the following rights:

    • Right to withdraw consent - the data subject may withdraw their consent by using either electronic form via the Company's email, written form sent by postal delivery to the Company's registered office address, or in person at the Company's registered office address. The withdrawal of consent does not affect the lawfulness of processing personal data carried out by the Company based on such consent.
    • Right of access in accordance with Article 15 of the Regulation - the data subject has the right to obtain confirmation as to whether personal data concerning them are being processed, to information, and to access to the visual recording capturing the data subject, for the period during which the recording is retained.
    • Right to rectification under Article 16 of the Regulation - the data subject may request the correction of inaccurate personal data and request additional clarification.
    • Right to erasure (right to be forgotten) pursuant to Article 17 of the Regulation - the data subject may request erasure, and the Company is obliged to comply with the request if the conditions laid down in the Regulation are met (e.g., personal data are no longer necessary for the purposes of processing).
    • Right to restriction of processing under Article 18 of the Regulation - in specified cases, the data subject has the right to request that the Company restrict the processing of their personal data.
    • Right to data portability under Article 20 of the Regulation - in cases provided for by the Regulation, the data subject has the right to receive the processed personal data in a structured, commonly used, and machine-readable format and the right to transfer this data to another controller, without hindrance from the Company. However, this right only applies to personal data obtained based on consent or a contract.
    • Right to object under Article 21 of the Regulation - the data subject has the right to object to the processing of personal data based on legitimate interests, especially if the Company does not have a convincing legitimate reason/interest in processing.
    • Right to lodge a complaint - the data subject may lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, if they believe that their personal data are being processed in breach of the Regulation. More information can be 

      found here: https://www.uoou.cz/chci-podat-stiznost-na-spravce-nebo-zpracovatele/ds-4454/archiv=0&p1=2611.

    SENDING COMMERCIAL COMMUNICATIONS

    The data subject agrees to receive information related to the Company's goods, services, or business to their email address, and further agrees to receive commercial communications from the Company at their email address.

    FINAL PROVISIONS

    The data subject confirms familiarity with these principles within the scope of the online store or reservation system by ticking the appropriate declaration.

    The Company is entitled to change these principles at any time. The Company will publish the new version of these principles on its website.

     

    In Prague on 19.10.2023