(in accordance with Regulation (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016)
Below you will find information on the nature of the data collected during your visit or use of our website www.phycomania.com and how this data is used, processed, and transmitted.
Responsible entity in the sense of data protection law:
Phycomania s.r.o.
Krakovská 583/9
110 00 Praha 1
Czech Republic
Email: support@phyco.support
Data Protection Officer of the responsible entity:
Francisco Manuel Machado Fernandes
Avenida General Humberto Delgado, n18, 7B,
2745-280 Queluz
Portugal
Email: support@phycomania.com
Customers are invited to contact the Data Protection Officer designated above to exercise their rights regarding the use, collection, or processing of their personal data.
PHYCOMANIA, as the responsible entity under data protection guidelines, commits to protecting the personal data and privacy of its customers and to treating them with complete confidentiality. The collection, storage, modification, transmission, blocking, deletion, and use of personal data are governed by current legal provisions, particularly the General Data Protection Regulation (GDPR); Regulation (EU) 2016/679.
Customer data is protected against any unauthorized access attempts, accidental or intentional manipulation, destruction, or loss, through technical and organizational security measures implemented by PHYCOMANIA.
The legislator requires personal data to be processed lawfully, fairly, and in a manner understandable to the data subject ("lawfulness, fairness, transparency"). To this end, we present below some legal definitions that we also use in this document:
"Personal Data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "Data Subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
"Restriction of Processing" means the marking of stored personal data with the aim of limiting their processing in the future.
"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
"Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
"Filing System" means any structured set of personal data which are accessible according to specific criteria, whether centralised, decentralised, functional or geographical in nature.
"Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.
"Recipient" means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
"Third Party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
"Consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Lawfulness of Processing
Processing of personal data is lawful only if, and to the extent that, it is based on a legal ground. The legal grounds for processing, pursuant to Article 6(1)(a)-(f) of the GDPR, can be defined as follows:
The data subject has given consent to the processing of their data for one or more specific purposes;
Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract;
Processing is necessary for compliance with a legal obligation to which the Controller is subject;
Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
Processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Here is information on the collection of personal data carried out when you use our website.
When you visit our website for informational purposes, PHYCOMANIA only collects personal data that the client's browser transmits to PHYCOMANIA's server. If the client wishes to view PHYCOMANIA's website, the company will collect the data below; these are the data technically necessary to display the site and ensure its stability and security:
After a technical evaluation, this data is immediately deleted. According to Art. 6 para. 1 sentence 1 point f of the GDPR, this data collection serves to protect our legitimate interests, which lie in the correct presentation of our online offers, outweighing our interests in the context of a balance of interests, and compliance with the EU General Data Protection Regulation in terms of security and confidentiality.
In addition to the data mentioned above, cookies or similar technologies, such as pixels (hereinafter generally referred to as "cookies"), are used on your computer when you visit our website. Cookies are small files installed on your device by your browser for the purpose of saving certain information, or image files like pixels. During your next visit to our site from the same device, the information saved in the cookies will either be sent back to our website ("first-party cookie") or to another site to which the cookie belongs ("third-party cookie").
Thanks to the saved and returned information, the visited website recognizes that you have previously accessed and viewed it using your device's browser. We use this information to optimize the design and display of the website according to your preferences. Only the cookie on your device is identified. Any other storage of personal data will only be possible with your express consent or when absolutely necessary to allow you to use and evaluate the service offered.
This website uses the following types of cookies, their scope and functionality are explained below:
We will inform you which types of cookies are set and used in each case for the tools we employ.
(1) Strictly Necessary Cookies (Type A)
Strictly necessary cookies ensure functionalities without which you cannot use our sites as intended. These cookies are used solely by us, making them proprietary cookies. This means that all information recorded in these cookies is returned to our website.
Strictly necessary cookies are used, for example, to allow you, as a logged-in user, to remain logged in while accessing sub-pages of the site without needing to re-authenticate for each new page.
The use of strictly necessary cookies on our website is exempt from your consent. For this reason, it is not possible for you to disable or enable strictly necessary cookies. However, you have the option to request a general blocking of cookies in your browser at any time (see below).
The legal basis for this processing is Art. 6 para. 1 sentence 1 point b of the GDPR.
(2) Functionality and Performance Cookies (Type B)
Functional cookies allow our website to store information you have already provided (such as your registered name or language selection) and to offer you improved and more personalized functionalities based on this information. These cookies collect and record information anonymously only, so they cannot track your movements on other websites.
Performance cookies collect information about how you use our websites with the aim of improving their presentation, content, and functionality. These cookies help us determine, for example, which sub-pages of our site are visited and what content particularly interests users. We record, among other things, the number of times a page is clicked, the number of sub-pages accessed, the time spent on our site, the order of pages viewed, the search terms that led you to us, the country, region, and, if applicable, the city from which access occurs, as well as the proportion of mobile devices connected to our sites. We also record movements, "clicks," and mouse movements on pages to understand which parts of the site are of particular interest to users. We consequently adapt the content of our site to better meet the needs of our users and to optimize our offerings. The IP address of your computer, transmitted for technical reasons, is automatically anonymized and in no way allows conclusions to be drawn about a particular internet user.
You have the option to object to the use of functionality and performance cookies at any time by configuring your cookie settings accordingly.
The legal basis for this data processing is Art. 6 para. 1 sentence 1 point b of the GDPR.
(3) Consent-Based Cookies (Type C)
Cookies that are neither strictly necessary (Type A) nor functionality or performance cookies (Type B) are used only with your consent.
We also reserve the right to use information obtained through cookies from an anonymized analysis of our website visitors' behavior. We are convinced that you, as a user, benefit from this, in the sense that we display advertising or content, based on your browsing behavior, which we believe is more relevant to your interests; consequently, you will see fewer ads or content of lesser interest.
Marketing targeting cookies originate from external marketing companies (third-party cookies); they are used to collect information about the websites visited by the user in order to create targeted advertising for the user.
Reject Marketing Targeting Cookies
You can also manage cookies used for online advertising purposes with the help of tools developed in many countries as part of self-regulation programs, for example: https://www.aboutads.info/choices/ in the United States or http://www.youronlinechoices.com/uk/your-ad-choices in the EU.
You can revoke your cookie consent at any time.
The legal basis for this data processing is Art. 6 para. 1 sentence 1 point b of the GDPR.
(4) Managing and Deleting All Cookies
You can also configure your internet browser to generally prevent the installation of cookies on your device or to request permission each time. Once cookies are set, nothing prevents you from deleting them at any time. You will find instructions for these settings in your browser's help function.
Please note that a general deactivation of cookies may limit the functionalities of our website.
You can browse our website without providing any personal information. Each time you connect to our site, usage data is transmitted to us or to our IT service provider by your browser and recorded in log data (also known as server log files). This recorded data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the provider originating the request.
The legal basis for this processing is Art. 6 para. 1 p. 1 point f of the GDPR, based on a legitimate interest in ensuring the proper functioning of our website and improving our offerings.
When you contact PHYCOMANIA by email or via the contact form, the information you provide (your email address, your first and last name, if applicable) will be saved by PHYCOMANIA to respond to your request. PHYCOMANIA deletes the accumulated data as soon as its retention is no longer necessary, meaning once your request has been processed. Otherwise, processing will be restricted if legal obligations require data retention.
The legal basis for this processing is Art. 6 para. 1 p. 1 point a of the GDPR, concerning the consent provided by the customer.
When ordering products, the following personal data is saved during the registration process required to place an order:
PHYCOMANIA uses this data exclusively for the purpose of contract execution and communication with the customer, where applicable. This includes contractual phases such as initiation, conclusion, processing, warranty (if applicable), and termination. This data will be retained until the contract ends. If retention periods exist for commercial and tax data, the storage period can extend up to 10 years.
The legal basis for this processing is Art. 6 para. 1 p. 1 point b of the GDPR for contract execution. The legal basis for any other retention under commercial or tax law is necessity, pursuant to Art. 6 para. 1 p. 1 point c of the GDPR.
PHYCOMANIA discloses its customers' personal information only for the necessary duration and for the purposes of contract execution or protecting its legitimate interests. PHYCOMANIA uses external service providers (order processors) for contract execution. Separate data processing agreements are concluded with these providers to ensure the protection of customers' personal data.
For the purpose of delivery, the customer's first name, last name, email address, and phone number are transmitted to the shipping company. This data transfer occurs solely within the scope of fulfilling the contractual relationship with you as a customer.
The legal basis for this processing is Art. 6 para. 1 p. 1 point b of the GDPR.
For the payment process, the customer's payment data, including their first name, last name, address, email address, and phone number, will be transferred to the respective payment service provider.
This data is processed for the purpose of establishing the contractual relationship with you as a customer or based on your duly given consent. The legal basis is Art. 6 para. 1 p. 1 point b of the GDPR.
PHYCOMANIA uses its customers' personal data to send them a newsletter, if applicable, provided the customer has given prior authorization for this use.
The only data required for sending the newsletter is the email address. Providing other separately identified information is voluntary, and this information will be used to communicate with the customer personally. Upon confirmation, PHYCOMANIA records the customer's email address for the purpose of sending them the newsletter.
Customers may withdraw their consent to receive the newsletter at any time by unsubscribing. This withdrawal can be expressed by clicking the link included in each newsletter email or by sending an email to support@phycomania.support.
PHYCOMANIA evaluates user behavior when sending newsletters. To perform this evaluation, the emails sent contain web beacons or invisible pixels, which are single-pixel GIF files installed on the PHYCOMANIA website. For these evaluations, data provided by users and web beacons are associated with the email address and a user ID. This data is collected in a completely anonymous manner, meaning that identifiers are not linked to the user's other personal data, and any direct personal reference is excluded. Users can object to this tracking at any time by clicking the specific link provided in each email or by informing PHYCOMANIA through another communication channel. This information will be retained as long as the user remains subscribed to the newsletter. After unsubscribing, PHYCOMANIA keeps this data for purely statistical and anonymous purposes.
The processing of this data is based on the consent provided by the customer, with the legal basis being Art. 6 para. 1 p. 1 point a) of the GDPR.
We use social application plugins (hereinafter referred to as: plugins) from social networks such as Facebook, YouTube, and Instagram.
We use what is known as the two-click solution. This means that when you visit our site, no personal data is initially transmitted to these plugin providers. You can identify the plugin provider by the marking on the grayed-out button, located above the first letter of the name or its logo. We offer you the option to communicate directly with the provider of this plugin via this button. Only when you click this button, thereby activating it, does the plugin provider receive the information that you have accessed the corresponding page on our online offer. By activating this plugin, your data is transmitted to the respective plugin provider and stored there (in the United States if the provider is American). Since the plugin provider primarily collects data via cookies, we recommend deleting all cookies in your browser's security settings before clicking the grayed-out button.
We have no influence over the data collected or the data processing operations. We are unaware of the scope of this data collection, the purposes of its processing, or its retention period. Furthermore, we have no information regarding the deletion of data collected by the plugin provider.
The plugin provider retains the data collected on your user profile and uses it for advertising, market research, and/or the conceptual design of its website. This type of evaluation is carried out specifically (including for users who are not logged in) to display tailored advertising and to share your activity on our website with other social network users. You have the right to object to the creation of these user profiles by contacting the relevant plugin provider to exercise your rights. Through these plugins, we offer you the opportunity to interact with social networks and other internet users to improve our offerings and make them more attractive to you, the user.
Data transfer occurs whether or not you have an account with the plugin provider, and the data remains stored there. If you log in to the plugin provider's site, the data we collect is directly associated with your account with that provider. For example, if you click on the activated button and the link to the page, the plugin provider also saves this information to your user account and shares it publicly with your contacts. We advise you to log out regularly after a social media session, but especially before activating the button, as this helps prevent data from being associated with your profile at the plugin provider.
For more information on the purposes and scope of data collection and processing by the plugin provider, please refer to the plugin provider's statement, available below. You will also find additional information on your rights in this matter, as well as settings options to protect your privacy:
The legal basis is Art. 6 para. 1 p. 1 point a of the GDPR, based on your consent, and the provisions of Art. 6 para. 1 p. 1 point f of the GDPR, which aim to protect PHYCOMANIA's legitimate interests, particularly in terms of optimizing its offerings.
We have integrated various tools from different companies on our website to enable us to evaluate your user behavior or to create links to other sites. To this end, we have separately concluded data processing agreements with the companies listed below to ensure the protection of your personal data.
We collaborate with the following providers:
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users interact with the site. The information generated by these cookies about your use of the website is generally transmitted to a Google server in the United States and stored there. If IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or other signatory countries to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of this website's operator, Google will use this information to evaluate your activity on the site, compile reports on website activity, and provide other services related to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
You have the option to refuse the use of cookies by selecting the appropriate settings in your browser; however, please note that if you do so, you may not be able to use all the functionalities of this site. You can also prevent Google from collecting data generated by the cookie regarding your use of the site (including your IP address) and prevent Google from processing this data by downloading and installing the browser plugin available at: http://tools.google.com/dlpage/gaoptout?hl=pt.
This website uses Google Analytics with the "_anonymizeIp()" extension. This means that IP addresses are processed in an abbreviated form, allowing for the exclusion of personal references. If the data collected about you contains a personal reference, it will be immediately excluded, and the personal data will be promptly deleted.
We use Google Analytics to regularly analyze and improve the usage of our website. The statistics obtained allow us to enhance our offerings and make them more attractive to your interests as a user. In the exceptional case where this personal data is transferred to the United States, Google has adhered to the EU/USA Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Third-party provider information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User Terms:
http://www.google.com/analytics/terms/de.html, Présentation de la Politique de Protection de la vie privée : http://www.google.com/intl/de/analytics/learn/privacy.html, et Politique de Protection de la vie privée : http://www.google.de/intl/de/policies/privacy.
This website also uses Google Analytics to perform a cross-sectional analysis of internet user traffic, using your user ID. You have the option to deactivate the cross-sectional analysis of your usage from your customer account under the tab "My Data"; "Personal Data".
The use of Google Analytics is based on your consent within the meaning of Art. 6 para. 1 p. 1 point a of the GDPR. The maximum retention period for cookie settings via this website is 12 months.
PHYCOMANIA uses the technical platform and services of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland ("Facebook") for the information services offered here.
According to the ECJ, there is joint responsibility within the meaning of Art. 26 of the GDPR between Facebook and the administrator of a Facebook fan page regarding personal data processed via the Facebook fan page. For this reason, Facebook and PHYCOMANIA have agreed to share this responsibility; this agreement can be viewed on this site.
PHYCOMANIA provides you with the following information regarding the processing of information on our Facebook Fan Page:
(1) Responsible Parties
The processing of your personal data on a PHYCOMANIA Facebook fan page is carried out under the joint responsibility of:
Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland
(2) Data Processing
When you connect to a Facebook fan page, your device's IP address is transmitted to Facebook. Facebook states that this IP address is depersonalized and deleted after 90 days, at least for a German IP address. In addition, Facebook records other information about the devices used by its users, such as the internet browsers used. If necessary, Facebook is able to assign IP addresses to individual users. If you log into your Facebook account while viewing our fan page, a cookie associated with your Facebook ID is installed on your device. Through this cookie, Facebook can track your access to our fan page and how you used it. Facebook uses these information to present content or advertisements tailored to your interests.
If you object to this, you must log out of your Facebook account or deactivate the "stay logged in" function. We also recommend deleting cookies on your device, then closing and restarting your browser. This process helps erase information that Facebook intends to use to link with you.
However, if you wish to use the interactive features of our fan page, you must log back into Facebook with your Facebook login credentials. This allows Facebook to re-establish the link with you.
Regarding how Facebook uses data derived from visiting Facebook pages for its own purposes, whether activities on the Facebook page are assigned to individual users, how long Facebook retains this data, and whether data related to a Facebook page visit is or is not transmitted to third-party partners, this is not explicitly stated by Facebook nor brought to our knowledge. For this reason, as a user of our fan page, we can only refer you to Facebook's data protection statements.
The data collected about you in this context is processed by Facebook and may be transferred to other countries outside the European Union.
Facebook generally describes the nature of the information the social network receives and how it uses it in its recommendations regarding data usage. You will also find information on how to contact Facebook and settings options for ads. The data usage policy can be viewed by clicking on the link below: http://de-de.facebook.com/about/privacy
The full version of Facebook's Data Usage Policy is available via the website:
https://de-de.facebook.com/full_data_use_policy
Facebook's privacy policy contains further information on data processing:
https://www.facebook.com/about/privacy/
Opt-out options can be configured by clicking on: https://www.facebook.com/settings?tab=ads and on http://www.youronlinechoices.com
Facebook Inc., the parent company of Facebook Ireland Ltd., is certified under the EU/US Privacy Shield and therefore commits to complying with the obligations of community law regarding data protection. You can find additional information on Facebook's position regarding the Privacy Shield on the website: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
As the administrator of the Facebook fan page, it is impossible for us to assess the transmission of users' personal data for further processing to third countries like the United States, as well as the potential risks you expose yourself to as a user.
(3) Statistical Function
Facebook also provides a range of statistical data for SBS-Legal as the fan page administrator within the framework of the statistical function (called "Insights"). These statistics are generated and made available by Facebook. As the fan page administrator, we have no influence over this generation; we are not precisely able to prevent this function. In the "Statistics" function, the following information is presented to us for the categories "Fans", "Subscribers", "People Reached", and "Interactions", each for a duration to be determined:
Page activity such as "page views", "page previews", "page actions"; "Reach" activity (ability to reach an audience) such as "Likes", people reached, and recommendations; Post activity such as post interactions, video views, comments, content sharing.
Furthermore, we receive statistical information about Facebook groups associated with our fan page. In accordance with Facebook's terms of use, which every user accepts when creating a Facebook profile, we can also identify subscribers and fans of the page and view their profiles and other shared information.
Facebook provides further information on this topic via this link:
http://de-de.facebook.com/help/pages/insights.
PHYCOMANIA uses this data, made available in aggregated form, to make posts and activities on the fan page more attractive to users, such as scheduling content and publication dates. The legal basis for this data processing is Art. 6 para. 1 p. 1 point f of the GDPR, specifically our legitimate interest in optimizing our offering.
(4) Retention Period
We retain the information provided by Facebook as long as you have not deemed it necessary to delete or depersonalize it.
If you object to this processing in the future, please disconnect your user profile from our fan page by using the functions "Unlike this page" and/or "Unfollow this page".
(5) Your Rights as a Data Subject
We suggest you address your requests for information or any other questions about your rights, as listed at the end of this document, directly to Facebook, as Facebook alone has full and complete access to user data. If, by chance, your request is sent to us, we will process it as customary and forward it to Facebook.
Our offering is primarily aimed at adults. Individuals under the age of 18 must refrain from submitting personal information to us without the consent of their parents or legal guardians.
Individuals concerned by data processing have the right to:
-Information or confirmation regarding the processing of your data
-Correction or deletion of your data
-Restriction of processing
-Objection to processing
-Data portability
-Revocation of your consent for future effect
-Complaint to the data protection supervisory authority
We hope this information has helped you exercise your rights. We are at your disposal if you would like further information on Phycomania's privacy policy.
Privacy Policy, version of 01.07.2022

