Protection of personal data 




MS KART s.r.o.

with its registered office at Žernovická 1272, Prachatice Post Code 383 01

Reg. No: 25170368

registration: Business register at the Regional Court in České Budějovice under file no.: C 7556


Business company MS KART s.r.o. (hereinafter referred to as "MS KART Company"), as a personal data administrator, informs by this way its customers, business partners, users of the web page and e-shop as well as other entities whose personal data we are processing, about the processing of personal data and privacy policy in the MS KART Company


In the text below you will learn in particular:

  1.          what personal data we will process;
  2.          for what purposes and how we will process your personal data;
  3.          to whom your personal data may be transmitted;
  4.          for how long we will process your personal data and
  5.          what rights you have in relation to the protection of your personal data.


We declare that we process personal data in accordance with the basic principles of personal data processing, namely:

  • we process personal data in relation to data subjects fairly, lawfully and transparently;
  • we collect personal data only for specific, explicitly declared and legitimate purposes and we do not process them in a way incompatible with these purposes (further processing for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes is not considered incompatible with the original purposes);
  • we process only such personal data that are reasonable, relevant and limited to the necessary extent in relation to the purpose for which they are processed;
  • we process only such personal data that are accurate and, where necessary, updated; for this purpose we shall always take all reasonable measures to ensure that personal data which are inaccurate with regard to the purposes for which they are processed are deleted or corrected without delay;
  • we will store personal data in a form that allows to identify data subjects for no longer than necessary for the purposes for which they are processed;
  • we process personal data in a way to ensure that personal data are properly protected, including appropriate technical or organizational measures against unauthorized or unlawful processing and accidental loss, destruction or damage;
  • we are responsible for complying with all the above principles and in accordance with applicable generally binding regulations, in particular European Parliament and Council Regulation (EU) 2016/679 dated 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter "GDPR").


In case you need to explain, advise or discuss any further processing of your personal data, you can contact us at any time by e-mail


1) Extent of personal data processing

We process the data you have provided to us, or data legitimately obtained from publicly available public registers. The data we usually process in our society, can be in particular:

  1.          your name and surname / business name,
  2.          address or registered office,
  3.          date of birth, identification number and tax identification number,
  4.         telephone number
  5.          e-mail address


In some of our premises (especially stores or warehouses), camera records can also be acquired and subsequently processed for reasons of Company property protection or security; The location of the cameras is always indicated in the information space by the information board / pictograph, and the records, if acquired, are continuously and immediately (always as soon as possible, after 30 days at the latest) erased.

We use cookies on our website, which are used here for:

  • basic functionality of the website;
  • measuring the our website audience and creating anonymous statistics on the audience and visitor behavior on the website;
  • collection of cookies for the purposes set out above could in some circumstances be considered as processing of personal data. However, such processing (if the processing of personal data is concerned) is possible without the consent of the data subject, on the basis of a legitimate reason - the Company's legitimate interest as administrator;
  • our website can also be used in a mode that does not allow collecting data about the behavior of visitors of our website - this mode can be set within the settings of your Internet browser. Cookies necessary for the functionality of our website will only be stored for as long as is necessary for the operation of the website.
  • if a visitor of our website raises objections to the processing of the technical cookies necessary for the operation of the website, then the full functionality and compatibility of the website cannot be guaranteed.
  • cookies that are collected for the reason of measuring site audience and generating statistics concerning audience and behavior of visitors on the website are considered in a bulk and anonymous form that does not allow individual identification. Such collected cookies may be further used by others, such as Google Analytics, etc.


2) Purpose of processing

We use the data you provide to us for the following purposes:

  • negotiations to conclude a contract with you or the person for whom you are acting as well as for the performance of the concluded Contract and performance of the obligations related to the Contract;
  • fulfillment of the Company's legal obligations (arising from relevant generally binding legal regulations, eg accounting, etc.);
  • protect the Company's legitimate interests (eg, Company debt collection, direct marketing).


For these purposes, we may process personal data even without your consent.

The provision of personal data necessary for the performance of the Contract and the provision of personal data for the purpose of answering your questions or information requested by us is our contractual requirement, and failure to do so may result in the non-conclusion of a contract or failure to answer your questions. The same applies to the Company's legal obligations.

With your permission, if you have granted it to us (unless it is a direct marketing of a legitimate interest of the Company, where explicit consent is not necessary), we may use your personal data to send you business communications, ie to notify you of events, publications, performances or services we provide and which, in our opinion, may interest you.

You may refuse the processing of your personal data for the purpose of sending business communications at any time and this will not affect our other relationships. Just send us an e-mail with the appropriate request to or to another address from which you received a business message from us.


3) Who has access to your personal data

We will process at MS KART Company your personal data as an administrator. We do not trade your personal data and do not pass them to third countries in the sense of the GDPR. We may pass your personal data to our subcontractors for the purposes outlined above to process them for us. In particular, the following entities may be provided with personal data for that purpose:

  • accounting / tax advisor
  • external law office;
  • processors who provide the Company with server, web or IT services;
  • subcontractors of the Company involved in the performance of the contract with you or the person on behalf of which you are acting / which you are representing;
  • transportation company;
  • intermediaries / processors of your payments.


4) Duration of personal data processing

In the case of personal data provided in connection with a contractual relationship, we will process such data for the duration of such contractual relationship and thereafter for as long as necessary, in particular with regard to the statutory limitations of mutual claims or liability for defects of up to 10 years after its expiry, or for the period necessary to fulfill its archiving duties under applicable law, such as the Accounting Act, the Archives and Records Act or the Value Added Tax Act. We will process personal data provided by you under your consent for the period specified therein, but not until such consent is revoked by you.


5) Your rights arising from the processing of personal data

You have the following rights in relation to the processing of your personal data:

  1.          right of access to personal data;
  2.          right to repair;
  3.          right to be deleted ("right to be forgotten");
  4.         right to limit the data processing;
  5.          right raise an objection to the processing; and
  6.          right to file a complaint against the processing of personal data.


Your rights are explained below to allow you to get better understanding of their content.

The Company has no legal obligation to appoint a Data Protection Officer as to the GDPR. You can exercise all your rights by contacting us in writing by letter or by e-mail to

You can file a complaint with the supervisory authority, which is the Office for Personal Data Protection (

The right of access means that you can request our confirmation at any time, whether personal data concerning you are processed or not, and if so, for what purpose, to what extent, to whom they are made available, how long we will process them, whether you have the right to repair, erase, limit processing or raise objection, from where we obtained personal data and whether your personal data are processed automatically, including profiling, if any. You also have the right to obtain a copy of your personal data, with the first provision being free of charge, and the Provider may require reasonable reimbursement of the administrative costs for additional provision.

The right to repair means that you may at any time ask us to correct or supplement your personal data if it is inaccurate or incomplete.

The Right of Deletion means we must delete your Personal data if (i) it is no longer needed for the purposes for which it was collected or otherwise processed, (ii) the processing is unlawful, (iii) you raise objection against the processing and there are no overriding grounds for processing, or (iv) this imposes a legal obligation on us.

The Right to Restrict Processing means that until we resolve any dispute regarding the processing of your personal data, we must restrict the processing of your personal data so that we can only store them and possibly use them to determine, exercise or defend legal claims.

The right to raise objection means that you may raise objection against the processing of your personal data we process for direct marketing or for legitimate interest.

If you raise objection to processing for direct marketing purposes, your personal data will no longer be processed for that purpose.