Privacy Policy

Effective Date: January 1, 2022

Who We Are

Name WOOP Design Studio s.r.o.
Registered Office Address Veleslavínova 339/16, 301 00 Plzeň, Czech Republic
Identification Number 07885687
Website https://woop.design/
Phone Number +420 605 959 999
Email info@woop.design

What are the purposes of personal data processing?

The main reason for processing personal data is to provide our products and services.
We engage in the following activities: graphic design services, marketing services, website and e-shop creation, management, and operation.

Specific processing purposes:

  • Service provision, goods sales
  • Research, development, product and service improvement
  • Direct marketing to clients
  • Sending personalized marketing messages and satisfaction surveys on websites or in stores.
  • Indirect marketing
  • Internal business and administrative functions
  • Client account management

What are the legal bases for processing?

The processing of personal data for the purposes listed above is carried out on the basis of the following legal grounds:

  • Conclusion or performance of a contract
  • Fulfillment of a legal obligation
  • Legitimate interests of the controller or a third party

If any processing is based on your consent, such consent is always voluntary and freely given, and we will not compel you to grant such consent in any way. We will not perform processing without your consent. You may withdraw your consent at any time, and we will cease processing based on it. However, the withdrawal of consent does not affect processing already carried out.

If processing is based on legitimate interests, you have the right to object to such processing on grounds relating to your particular situation. It is our duty to assess whether there are sufficient grounds on our part to continue processing and to inform you accordingly.

What data do we process?

We primarily process data that we need to offer and provide our products or services, comply with legal obligations, and protect your or our interests.

Categories of personal data processed:

  • Basic identification data
  • Contact details
  • Sociodemographic data
  • Information and communication technology data
  • Geolocation data
  • Behavioral data of individuals
  • Unique identifiers

Unless otherwise stated, the above data are necessary for the purposes listed above, and without providing them, it is not possible to establish a contractual or similar relationship with us. If some data are voluntary, we will inform you.

Where do we obtain data from?

We obtain personal data:
• Directly from data subjects (customers, employees, etc.)
• From publicly available sources (public registers, social networks, etc.)
• Commercial registers and data sources (providers of information products and services)
• Our own activities (internal functions, IT systems)
• Other persons (relatives, persons acting on behalf of the data subject, etc.)

How do we work with data?

We perform processing both manually and automatically using various applications and software, especially those that help us carry out our activities and without which we would practically not be able to provide our services.

Automated individual decision-making and profiling

Automated individual decision-making is data processing that has significant consequences for you (e.g., non-conclusion of a contract) and in which no human directly participates. It therefore exclusively uses automated means (applications, software, algorithms, etc.). Profiling means automated data processing for the purpose of evaluating certain personal aspects of a person (work performance, economic situation, health, behavior, preferences, or location tracking).

We do not perform automated individual decision-making.

In cases where automated decision-making would have significant consequences for you (e.g., leading to the non-conclusion of a contract, rejection of payment, change in terms of the agreed service, etc.), you have the right to have such a decision reviewed, to express your opinion on it, and possibly to challenge it.

We do not perform profiling.

To whom may we transfer data?

Personal data may be processed by the following recipients:

  • Contractual partners providing services and supplies necessary for our operations
  • Providers of specialized services
  • Providers of website or application analytics and monitoring
  • Providers of advertising services on the web or in applications (including remarketing)

Should there be any changes in our company and we transfer our business or other activities, in whole or in part, to another entity, then personal data related to these activities would be part of such a transfer. The same would apply if we were forced to make such changes in accordance with legal regulations.

Similarly, we may be obliged to provide certain data based on legal regulations to authorized public authorities or other entities specified by binding legal regulations.

Where may your data be processed?

Your personal data may be transferred for processing within the EU and the European Economic Area. In accordance with legal regulations, we may also transfer personal data to countries outside the EU/EEA, but only if adequate security is ensured and guarantees are provided that they will be handled in accordance with legal regulations.

For transfers, we use the following safeguards:

  • Safe country according to the European Commission’s adequacy decision
  • Approved certification mechanism along with binding and enforceable commitments of the controller or processor in the third country to apply appropriate safeguards

How long do we retain data?

We process personal data:

  • For the duration of the contract (service provision, order processing, goods delivery)
  • After the termination of the service or delivery of goods, for the protection of rights and legitimate interests, typically until the expiration of the limitation period
  • For the period required by legal regulations

What are your rights?

You can ask us for information about processing, correction of inaccurate data, deletion of data in case the purpose ceases or processing is unlawful, you have the right to restriction of processing, the right to object to processing based on legitimate interest, including direct marketing, the right to access data (a copy of data) and portability, and the right to lodge a complaint with the supervisory authority (Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz) or with your local data protection authority (you can find your authority here: https://edpb.europa.eu/about-edpb/board/members_en).

If you receive commercial communications from us, you always have the option to unsubscribe from these communications via the link contained in each such electronic message or by direct request sent to our contact points.

If requests related to the exercise of your rights are manifestly unfounded or excessive (especially if they are repetitive), we may charge a reasonable fee not exceeding the costs necessary to process the request, or refuse your request.

Contacts for requests and inquiries regarding personal data are listed in the header of this document.

What security measures do we apply?

To protect personal data, we have implemented the following measures:

  • Encryption, data security (especially sensitive data)
  • Access rights management, secure password policy
  • Security of devices, systems, network, websites
  • Detection and prevention of attacks and incidents
  • Backup, recovery plans, and crisis management
  • Software updates, patch management
  • Physical security