Privacy Policy

General Information

EDS is a controller of your personal data within the meaning of the Regulation and the Act, i.e. collects, retains and uses (and otherwise processes) your personal data in connection with its business activities (individual purposes of personal data processing are specified below).

Without your consent, we are entitled to process only such personal data that are necessary for the performance of the Contract and other contracts concluded with you, or for the fulfilment of our legal obligations, or for the purposes of legitimate interests. In other cases, we only process your personal if you have provided us with your consent to the processing of your personal data.

Our processing of personal data is both manual and automated. Automated processing of personal data is used in order to perform the Contract, in particular, to ensure internal processes within EDS and its contractual partners that are necessary for the provision of Services. Automated processing of personal data is also used if consent to sending marketing communications is granted.

The Policy thus describes the purposes and methods of personal data processing, informs about individual categories of processed personal data, their potential recipients, retention periods and your rights in relation to personal data protection.

Purposes for processing personal information

EDS may process your personal data for the following purposes:

• Performance of the Contract, or other contracts (in particular, the performance of the Contract under which the User is entitled to use the Services);

• Fulfilment of legal obligations (in particular, obligations under accounting and tax legislation, i.e. transfer of personal data to financial authorities or to other public authorities in accordance with applicable legal regulations);

• Protection of the controller’s legitimate interest (protection of EDS’s rights and interests protected by law, e.g. protection against misuse, detection of online frauds related to payment means, prevention and settlement of payment deficiencies);

• Sending commercial communication (EDS may send commercial communications by email, SMS/MMS or postal service providers);

• Handling Users’ requests (e.g. using the possibility to contact EDS via the Application); and

• Sending personalised commercial communications (exclusively with your consent, we may send relevant commercial communications based on voluntarily provided data and your previous behaviour).

Individual Groups of Processed Data

1. Personal Data Processing Related to Websites

   In connection with your activities and depending on the scope of your activities, the Application may process the following personal data:

   Data of Data Subjects	Purposes of processing:
   First name and surname	performance of the Contract, fulfilment of legal obligations, protection of the controller’s legitimate interest, handling Users’ requests, sending commercial communications
   Date of birth	performance of the Contract, handling Users’ requests
   Gender	performance of the Contract, handling Users’ requests
   Payment data	performance of the Contract, fulfilment of legal obligations, protection of the controller’s legitimate interest, handling Users’ requests
   E-mail	performance of the Contract, fulfilment of legal obligations, protection of the controller’s legitimate interest, handling Users’ requests, sending commercial communications
   Phone number	performance of the contract, fulfilment of legal obligations, protection of the controller’s legitimate interest, handling Users’ requests, sending commercial communications
   Profile data/content provided or uploaded by the User	performance of the Contract, protection of the controller’s legitimate interest, handling Users’ requests
   Device details	performance of the Contract, fulfilment of legal obligations, protection of the controller’s legitimate interest, handling Users’ requests, sending commercial communications

2. Processing of Special Categories of Personal Data

   In certain cases, we may also process “special” categories of your personal data within the meaning of Article 9 of the Regulation based on your explicit consent, in accordance with the Terms and this Policy, to improve the quality of services provided to you.

   The use of EDS services is not subject to the data below, therefore, if you enter these data into the Application or the Website, you explicitly agree with their processing.

   Data of Data Subjects	Purposes of processing:
   Sexual preferences (including information on sex life and sexual orientation)	handling User’s requests, personalisation of offers

3. Sharing location data¹

   In certain cases, we may also process your location data based on your consent in accordance with the Terms and this Policy.

   The use of EDS services is not subject to the data below, therefore, if you enter these data into the Application or the Website, you agree with their processing.

   Data of Data Subjects	Purposes of processing:
   User Location	handling User’s requests, performance of the Contract

4. Cookies

   In addition to the aforementioned personal data, the Application or the Website may use cookies to identify Users, remember language preferences and facilitate navigation in the Application. Cookies are small text files that are stored by websites to your computer or mobile device when you start using the Website or Application. Cookies can be disabled in your internet browser or mobile device, however, some sections of the Application or Website may not consequently work properly. The terms of using third-party cookies, specifically Google cookies, can be found here.

   In addition to cookies, we also process your IP address and records options selected in the Application in order to perform the Contract, or to protect the legitimate interest (see point 4 of the Policy).

Methods of Personal Data Processing

During the Registration, we collect personal data through the form in the «Registration» and «Profile» sections of the Application. EDS thus has access to your first name, surname, date of birth, gender, email address and IP address. Without processing these personal data, the Registration may not be completed (your Profile may not be created).

In addition, you can also enter non-mandatory information at any time: date of birth, phone number, gender, sexual preferences (including data on your sex life and sexual orientation).

When entering these data, you are aware of their processing or, if so stated, you grant your consent to their processing. You may withdraw your consent to personal data processing at any time. In that case, we will stop processing these data, unless there is another legitimate reason for their processing. You may change or delete your data in your Profile settings.

The information that we collect and that is necessary for us to be able to respond to your requests are marked with an asterisk in the collection forms. If you do not fill in these mandatory fields, we will not be able to respond to your requests.

If you decide to contact our customer service through the means located or referred to in the Application or by other means that EDS makes available, information that you have already provided in or through the Application may be used.

Finally, when you use the Application or browse any links on our Website, servers of EDS or their processors automatically recognise the IP address of your device (it is a number that identifies any Device connected to the Internet).

We only send you commercial communications based on your consent granted by ticking the relevant field in the «Registration» section. If you have already used any of the Services, we have a legitimate interest in sending commercial communications if you originally did not refuse their sending. You may object to such sending at any time by unsubscribing from the relevant commercial communication using the link at the footer of the commercial communication.

In addition to the above personal data, we also process statistical information to learn how Users or visitors use the Website, including the history of using the Services.

Data Recipients

Particularly for the purposes mentioned above, EDS transfers personal data obtained through the Application or Website to the following partner companies, which act as processors or other controllers of personal data:

When using services of personal data processors, EDS conclude relevant data processing agreements if they are processors of personal data. Personal data may be transferred to companies with their registered offices in countries which do not provide an adequate level of protection according to the Regulation. In these cases, EDS concludes standard contractual clauses for the transfers of personal data approved by the European Commission with the recipients in order to ensure an adequate level of personal data protection.

Duration of Personal Data Processing

We will process your personal data for as long as we provide you with services, or for the duration of the Contract, or as long as necessary to fulfil archiving obligations according to applicable legal regulations of the Czech Republic, such as the Accounting Act, the Archiving Act or the Value Added Tax Act.

We may continue to process your personal data after the termination of the Contract based on our legitimate interest, i.e. to protect our legal claims, for as long as necessary, but no longer than three (3) years, unless a special legal regulation stipulates a longer period.

We will process the personal data related to your Profile, including the data contained therein, in order to manage your Profile and send offers of our goods and services until you cancel it.

We will process the personal data that we process based on your consent until you withdraw your consent. To withdraw your consent, send an email with the request to privacy@glamino.com.

You may also refuse the processing of your personal data for the purposes of sending commercial communications without affecting our mutual relationships. You may unsubscribe from further commercial communications by clicking on the link at the footer of the commercial communication, or send us an email with the request to privacy@glamino.com.

Security and Confidentiality of Personal Data

Personal data will be secured in such a manner and using such technical and organisational means so as to fully secure personal data protection in accordance with the Regulation, the Act and regulations governing personal data protection.

With regard to the state of technology, especially that commonly used in telecommunication networks, EDS cannot guarantee the confidentiality and authenticity of emails sent by or received from EDS.

Personal data are processed electronically in an automated manner or in a printed form in a non-automated manner by authorised EDS employees and employees of authorised processors.

Personal data are stored on secured servers in the relevant IT systems. EDS has adopted appropriate technical and organisational measures to prevent loss or destruction of personal data, unauthorised access of persons to data, their modification or distribution.

Access to your Profile is only possible after entering your personal password. It is essential that you do not disclose your login information to third parties. EDS does not assume the responsibility for any misuse of passwords.

Rights of Data Subjects

In connection with personal data processing, you have the rights listed below that you may exercise at any time under the terms stipulated in Articles 15 through 21 of the Regulation.

These include the right (i) to access personal data; (ii) to rectify inaccurate data or complete incomplete data; (iii) to erase personal data if it is no longer needed for the purposes for which it has been collected or processed, or if it has been collected illegally; (iv) to restrict data processing; (v) to data portability, (vi) to object to the data processing which will therefore be terminated, unless there are serious legitimate grounds for the processing which outweigh your interests, rights, and freedoms, especially if the reason is an enforcement of legal claims, and (vii) to contact the Office for Personal Data Protection (www.uoou.cz) to lodge a complaint. If you have granted consent to personal data processing, you may withdraw it at any time.

Right to access personal data: if you want to know whether EDS processes your personal data, you have the right to obtain information on whether your personal data are processed and, if so, you have the right to access your personal data;

Right to rectify inaccurate data or complete incomplete data: if you believe that EDS process inaccurate or incomplete personal data about you, you have the right to request rectification and completion of the data. EDS will rectify or complete the data without undue delay, but always taking into account technical possibilities;

Right to erasure: if you ask for erasure, EDS will erase your personal data if: (i) they are no longer needed for the purposes for which they have been collected or otherwise processed; (ii) the processing is unlawful; (iii) you raise objections to the processing and there are no prevailing legitimate reasons for the processing of your personal data; or (iv) EDS is required to erase the data under legal regulations. EDS will not comply with your request if any of the circumstances under Article 17 (3) of the Regulation prevents it from doing so;

Right to restriction of personal data processing: if you request restriction of processing, EDS will make your personal data inaccessible, temporarily erase or store them, or perform other processing activities needed for the proper exercise of the right;

Right to data portability: if you want EDS to transfer your personal data that EDS processes based on your consent or data that are necessary for the performance of the Contract to a third entity, you may exercise your right to data portability. If the exercise would adversely affect rights and freedoms of other persons, EDS will not be able to comply with your request;

Right to object: you have the right to raise an objection to the processing of personal data that are processed for the purposes of performing a public service task or in the exercise of public authority or for the purposes of protecting EDS legitimate interests. If EDS does not prove that there is a serious legitimate reason for the processing which takes precedence over the interest or rights and freedoms of the customer, EDS will terminate the processing based on the objection without undue delay.

In the event of repeated or apparently unjustified requests for the exercise of the above rights, EDS is entitled to charge an appropriate fee for the exercise of the right, or to refuse the exercise. We would inform you about the procedure in advance.

You may exercise the above rights through the EDS customer service:

• By mail at: Rybná 716/24, Staré Město, 110 00 Prague 1, Czech Republic;

• By e-mail at: support@glamino.com, or

• If it concerns the consent to receiving commercial communications, through the link at the footer of the commercial communication sent by EDS

EDS reserves its right to verify the identity of the person requesting the exercise of rights in accordance with Article 12 (6) of the Regulation.

If you have any questions, please contact EDS Customer Service using the contact details above.