Legal documents · Auctions
Personal Data Protection Terms
AUREA Numismatika a.s., with its registered office at Ostrovského 1332/4, 150 00 Prague 5, Company ID No. 04447646, is the controller of your personal data. We process personal data solely for the purposes of processing orders, communicating with you, fulfilling contractual obligations and sending information relating to the goods, services or business of the operator. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable Czech legislation.
1. Purpose and scope of processing
We process only the data you provide to us on registration, when placing an order or when contacting us (e.g. name, address, e-mail, telephone). We may also collect technical data (e.g. your IP address and cookie data) necessary for the proper functioning of our website. The information you have provided is protected against misuse; it is not traded or disclosed to other entities, and it is processed in accordance with the applicable personal data protection legislation.
2. Legal basis for processing
We process personal data on the basis of the performance of contractual obligations, the legitimate interests of the company and, where required, the consent of the data subject. All information you provide to us as a customer is processed in a manner that guarantees its protection and security.
3. Marketing communications
The user consents to receiving information relating to the goods, services or business of the operator at the electronic address provided. The user further consents to receiving commercial communications. We fulfil our information duty towards the user within the meaning of Article 13 GDPR in relation to the sending of commercial communications by means of a separate document. The customer also has the right to cancel their registration in the system at any time and thereby withdraw consent to receiving any information or commercial communications; in such a case the trader is not entitled to process the personal data any further.
4. Recipients of the data
We do not disclose your personal data to third parties, except where this is necessary to ensure delivery of the ordered goods (e.g. to transport companies), to fulfil contractual obligations, or where required by law.
Categories of recipients of personal data under Article 13(1)(e) GDPR:
- servers and technical facilities of our own infrastructure (operation of the website, the e-shop and the auction system)
- Zásilkovna s.r.o. – delivery of goods
- Česká pošta, s.p. – delivery of goods
- Fio banka, a.s. – payment transactions
- INTERNET CZ, a.s. (FORPSI) – operation of e-mail mailboxes
- SuperFaktura – issuing and keeping records of invoices
- traffic measurement tools (Google, Seznam) – only on the basis of your consent
5. Your rights
You have the right of access to your personal data, to their rectification, to restriction of processing or to object, and also the right to lodge a complaint with the competent supervisory authority. You also have the right to withdraw your consent to the processing of personal data at any time, in particular as regards marketing communications.
In connection with the processing of personal data you have in particular the right of access to the data, the right to a copy of the data processed, the right to rectification, to erasure, to restriction of processing, to data portability, and the right to object to processing based on a legitimate interest.
If you believe that we do not handle your data properly, you have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, or to pursue your claims before a court.
6. Contact
Any questions concerning the protection of personal data may be addressed to: info@aurea.cz.
7. Client identification and verification under the Anti-Money Laundering Act (AML)
As an auction house, we are an obliged entity under Act No. 253/2008 Coll. Before accepting a bid, or before concluding a transaction above the limit set by law, we carry out client identification and retain the relevant documents. We process in particular: first name and surname, date of birth, birth (personal identification) number, address, type and number of the identity document.
For what reason?
This is to fulfil our statutory obligation of client identification and verification. Without identification we cannot admit you to the auction or conclude a purchase contract with you.
On what legal basis?
This is processing on the basis of Art. 6(1)(c) GDPR – fulfilment of our legal obligation under Act No. 253/2008 Coll., on certain measures against the legalisation of proceeds of crime and the financing of terrorism.
How long will we process the personal data?
10 years from the end of the calendar month in which the last act of the transaction took place (Section 16 of Act No. 253/2008 Coll.).
9. Data protection officer and automated decision-making
We have no appointed data protection officer, and no decision-making takes place on the basis of automated processing or profiling.