I. Personal data administrator

The administrator of personal data within the meaning of Art. 4 point 4 GDPR1 is

PR INTERNATIONAL TRADE LIMITED NUMBER: 3326768 ul. UNIT 2A, 17/F, GLENEALY TOWER NO.1 GLENEALY CENTRAL HONG KONG 999077 HONG KONG Hongkong SAR

Contact details of the data controller:

e-mail address: shop@cityofsneakers.com

Administrator pursuant to Art. 32 section 1 GDPR complies with the principle of personal data protection and applies appropriate technical and organizational measures to prevent accidental or unlawful destruction, loss, modification, unauthorized disclosure or unauthorized access to personal data processed in connection with the business.

Providing personal data by the customer is voluntary, but necessary in order to take advantage of the data administrator's offer.

The data controller processes personal data in the form of identification data (name and surname and company name), address data, tax identification number, date of birth, contact details (telephone number, e-mail address) and identification data of the contact persons indicated by the customer.

II. Purpose and basis for processing personal data

The administrator processes personal data for the following purposes:

concluding and implementing sales contracts with customers, based on the concluded contract (Article 6(1)(b) of the GDPR);
providing services electronically via the website (e.g. providing the possibility of registering and having a customer account of the Online Store, providing the ability to place orders online), based on a concluded contract (Article 6(1)(b) of the GDPR) or the legitimate interest of the data controller (Article 6(1)(f) of the GDPR);
handling the complaint process, based on the obligation imposed on the data controller in connection with applicable law (Article 6(1)(c) of the GDPR); accounting related to the issuance of settlement documents, pursuant to the provisions of tax law, including the Act of September 29, 1994 on accounting and the Act of March 11, 2004 on tax on goods and services (Article 6(1)(c) of the GDPR);
archiving data for the purpose of establishing, pursuing or defending against claims, which is the legitimate interest of the data controller (Article 6(1)(f) of the GDPR);
direct marketing of own products and services, which is the legitimate interest of the data controller (Article 6(1)(f) of the GDPR) or is based on the consent of the data subject (Article 6(1)(a) of the GDPR);
contact by telephone or via e-mail, in particular in response to inquiries addressed to the data controller, which is the legitimate interest of the data controller (Article 6(1)(f) of the GDPR);
sending technical information regarding the functioning of the website and services used by the customer, which is the legitimate interest of the data controller (Article 6(1)(f) of the GDPR).

III. Data recipients. Transfer of data to third countries

The recipients of personal data processed by the data controller may be subcontractors - entities whose services the data controller uses to process data, e.g. accounting offices, law firms.
The recipients of personal data may also be postal operators, couriers or other transport companies through which the data administrator delivers products to customers.
Personal data may be transferred to an entity based outside the European Economic Area, i.e. to Google LLC as the provider of the Google Analytics and Google AdWords services, based on appropriate legal safeguards, which are standard contractual clauses for the protection of personal data approved by the European Commission.
IV. Personal data storage period

The data controller stores personal data for the duration of the contract concluded with the data subject and after its expiry for purposes related to pursuing claims related to the contract, fulfilling obligations arising from applicable legal provisions, but for a period not longer than the limitation period in accordance with the provisions of law. Civil Code

The data administrator stores personal data contained in settlement documents (e.g. invoices) for the period of time specified in the provisions of the Goods and Services Tax Act and the Accounting Act.

The data administrator stores data processed for marketing purposes until the data subject withdraws consent to data processing, but for no longer than 10 years.

The data controller stores personal data for purposes other than those indicated in section. 1-3 for a period of 3 years, unless consent to data processing has been withdrawn earlier and data processing cannot be continued on a basis other than the consent of the data subject.

V. Rights of the data subject

Every person whose personal data is processed by the administrator has the right to access their content