Principles of personal data protection trading company PM COMMERCE s.r.o., Rybna 716/24, Praha.

IČ 11677511

email: sales@earmorshop.com,

(hereinafter referred to as the "Company")

as a controller and processor of personal data, as a user of the website www.armymarket.cz informs you about the collection of personal data described below and the principles of privacy protection, based on the Regulation of the European Parliament and Council (EU) 2016/679 of 27 April 2016, the so-called "GDPR Regulation."

I

Range of personal data processing In the event that you contact the Company via the website and show interest in its services, you may be asked to fill in your personal data, namely:

A) Name and surname
B) address
C) phone number
D) e-mail address

II

Purpose of processing

The information you provide to the Company is used exclusively to fulfil a legal (tax and accounting) or contractual (delivery of goods in case of concluding a purchase contract) obligation - see Article General Terms and Conditions, with which you agree when concluding a purchase contract. Failure to provide the required personal data listed in the article will result in the failure to conclude a purchase agreement. the world of the army and airsoft, to the extent of your consent. You may revoke this consent at any time without giving a reason, by written or electronic communication to the Company's contact details. Disagreement with sending the newsletter, its revocation or failure to provide an email address does not affect the conclusion of the purchase agreement and is not a condition for its conclusion. All personal data is processed legally and transparently and only reasonable, relevant and necessary data are required in relation to the purpose. In case of your questions, we will be happy to tell you more details.

III

Who has access to your personal data:

The company is a controller and processor of personal data, where personal data is primarily processed by its own employees. However, the Company may provide personal data to the following persons: - Providers of external accounting services in connection with the fulfilment of the Company's accounting and tax obligations - Providers of external web hosting and IT services in connection with operating the Company's shop in concluding contractual relations with you - Providers of external archiving and shredding services within the fulfilment of the Company's legal obligation to archive and shred documents according to the relevant legal regulations of the Czech Republic always exclusively to the necessary extent, for the necessary purpose, exclusively within the EU and EEA, while maintaining all data protection obligations. The company will also provide your personal data to public authorities within the framework of fulfilling legal obligations or in the case of fulfilling the supervisory and control function of the relevant public authority (Tax Office, CTIA, Office for Personal Data Protection, etc.). In cases of urgency, the Company is entitled to use your personal data to the extent necessary to protect its rights and legitimate interests, including disclosure to other persons, unless this is outweighed by your interest, rights and freedoms - for example, purchase contract, where the data can be provided to a law firm, courts, etc.

IV

Your personal data will be processed by the Company:

a) for the duration of contractual obligations between you and the Company

b) for the period when the Company is obliged to archive this data according to relevant legislation, but no longer than 10 years from the end of the tax period in which the fulfilment of the relevant contractual relationship takes place

c) email address only for as long as your consent to the sending of the Company's newsletter lasts>

V

Your rights arising from the processing of personal data

In relation to the processing of your personal data carried out by the Company, you have the following rights:

A) the right to object to the processing

B) the right to complain about the processing of personal data. Your rights are explained below so that you can have a clearer idea of ​​their content.

C) The right to access personal data with the Company, which means that you can always ask for confirmation if your personal data the data are or are not processed, for what purposes, to what extent, to whom they are made available, how long they will be processed, information on the right to rectification, deletion, restriction of processing or objection from where personal data were obtained profiling and sending a copy of your personal data, the first provision being free of charge, for further provision, if the conditions of the GDPR regulation are met, the Company may demand reasonable payment of administrative costs.

D) The right to rectification of personal data, which means that the Company may be requested to correct or supplement personal data if they are inaccurate or incomplete.

E) The right to delete personal data, which means that the Company must delete your personal data if

   - are no longer required for the purposes for which they were collected or otherwise processed

   - there is no reason to process them

   - you object to the processing and there are no overriding reasons for processing

   - the processing is unlawful or obligation.

F) The right to rectification of personal data, which means that the Company can be requested to correct or supplement personal data if they are inaccurate or incomplete.

G) The right to delete personal data, which means that the Company must delete your personal data if the following requirements are met:

   - they are no longer needed for the purposes for which they were collected or otherwise processed

   - there is no reason to process them

   - you object to the processing and there are no overriding legitimate reasons for the processing

   - processing is illegal

   - it imposes a legal obligation.

H) The right to restrict the processing of personal data, which means that until the settlement of any disputes concerning the processing of personal data, specifically if:

   - you deny the accuracy of your personal data

   - processing is illegal, but instead of deleting personal data, you only require restrictions on processing

   - the company no longer needs personal data for processing purposes, but you do

   - or if you have objected to the processing, then the Company may only have personal data stored and further processing is subject to your consent, or that such data is needed to determine, exercise or defend legal claims.

I) The right to revoke consent to processing personal data processed on the basis of such consent, which means that you can contact the Company at any time and inform it that you are withdrawing the relevant, previously granted consent. The Company will no longer process such personal data. This right does not apply in relation to personal data processed by the Company on the basis of another legal reason (by law or contractual obligation, etc.)

J) The right to the transferability of personal data, which means that you have the right to obtain your personal data that you have provided to the Company in a structured, commonly used and machine-readable format and, if technically feasible, you have the right to pass the data to another controller.

K) the right to object to the disclosure of personal data, which means that you may file a written or electronic objection to the Company against the processing of your personal data, on the basis of which the Company will not further process personal data unless it demonstrates serious legitimate reasons for their further processing.

You may exercise all your rights with the Company in writing or electronically in the Company's contact details in the header of this Privacy Policy. www.uoou.cz, email: posta@uoou.cz, the seat of the Office for Personal Data Protection, Lt. Col. Sochora 27, 170 00 Prague 7. More information on related issues, your rights and obligations of the Company can also be found on the website www.uoou.cz in the section "GDPR".

VI

Processing of children's personal data

The Company's website is not intended for children under 16 years of age. The Company does not process personal data of children under the age of 16.

VII

We use cookies

Cookies are short text files that the server places in your internet browser when loading a website. They record information about your behaviour (such as the pages you visit) and send it back to the appropriate server. This allows us to tailor the content of our site and marketing communication to your needs. Cookies are not directly linked to your name or e-mail address and are not associated in any way with your personal data. The data collected is completely anonymous.

Why we use cookies?

In order to make shopping in our e-shop as pleasant as possible for you, we use cookies to customize the offer of our e-shop based on your behaviour on the Internet. They also provide us with data on the use of our e-shop third-party software (eg Google, List,…) that handles cookies. They allow us to display our personalized offer/ads on various partner sites. The cookies of these companies are subject to their own privacy policy.

What if I do not agree with the provision of cookies?

You can place an order on our e-shop without cookies. You can either restrict or completely disable cookies in your browser settings - you can find instructions in the browser's help. However, this may limit some features of your favourite websites.

In the event that you need to explain, advise or discuss any further processing of your personal data, you can contact us at any time at the contacts listed in the header of this policy or published on the website www.armymarket.cz.

Valid From 25.5.2018