The careful handling of your personal data is our highest priority. We value your trust and assure you that we handle your personal data very carefully.
Purple Next ensures that personal data is collected, processed and used solely for the purpose specified herein.
Consents, e.g. the use of e-mail addresses and telephone numbers can, of course, be revoked at any time with effect for the future.
Purple Next s.r.o, reg.n.: 08105103, reg. office: Masarykova 409/26, Brno-město, 602 00 Brno, Czech Republic, is responsible for the processing of personal data. This privacy statement applies to all processing operations that Purple Next performs with regard to personal data of customers, interested parties and other visitors to the website https://purple-next.com/.
Contact details:
info@purple-next.com
We process personal data that we receive from our (potential) customers or other affected persons as part of our business relationship. In addition, we process – insofar as necessary for the provision of our services – personal data that we legitimately gain from publicly available sources (e.g. the internet) or which we obtain from registration forms on our or other websites.
Relevant personal data (if collected) are:
Device Information(if collected) are:
In addition, this may include order data, data from the fulfilment of our contractual obligations (e.g. turnover data from the transactions), advertising and sales data (including advertising scores), documentation data (e.g. recording of telephone conversations) as well as other data comparable to the mentioned categories.
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR):
a)For the performance of contractual obligations (Article 6 (1) b GDPR)
The processing of data is carried out to provide and mediate our services, as part of the execution of our contracts with our customers or to carry out pre-contractual actions, which are carried out on request. The purposes of data processing are primarily based on the specific agreement. Further details on the data processing purposes can be found in the relevant contract documents and terms and conditions.
b)For legitimate interests (Article 6 (1) f GDPR)
If necessary, we process your data beyond the actual performance of the contract for the protection of legitimate interests of us or third parties.
Examples:
c)With your consent (Article 6 (1) a GDPR)
If applicable you may give us consent to the processing of personal data for specific purposes (e.g. extended use of e-mail address for advertising measures and the sending of newsletters, sharing your personal data with other controllers), the legality of this processing may be based on your consent.
A given consent can be revoked at any time. The revocation of consent does not affect the legality of the data processed until the revocation.
d)Due to legal requirements (Article 6 (1) c GDPR) or in the public interest (Article 6 (1) e GDPR)
In addition, as a service provider, we are subject to various legal obligations, i.e. legal requirements as well as supervisory requirements. The purposes of the processing include identity and age checks, prevention of fraud and money laundering, the fulfilment of reporting obligations towards public authorities as well as the evaluation and management of risks within the company.
Information that we receive from you helps us to customise our services and offers and to continually improve them. We use this information to perform our services. We also use your information to communicate with you about services, products, services, and marketing opportunities (see communications below by e-mail), as well as to update our records and maintain your customer profile and to recommend services that might interest you. We also use your information to improve our product offering and our platform, to prevent or detect misuse of our website or to enable third parties to carry out technical, logistical or other services on our behalf.
We collect the following information:
Within Purple Next, those departments gain access to your data, which need it to fulfil our contractual and legal obligations. Our service providers and vicarious agents may also receive data for these purposes if they maintain business confidentiality. These are companies in the categories: IT services, logistics, printing services, telecommunications and consulting as well as sales and marketing.
With regard to the transfer of data to recipients outside of our company, it should first be noted that as a service provider we commit ourselves to secrecy about all customer-related facts and valuations from which we become aware. In principle, we may only disclose information about you if statutory provisions require it, if you have given your consent or if we are authorised to provide information. Under these conditions, recipients of personal data may be:
A transfer of data to countries outside the European Union takes place, as far as
Furthermore, a transfer of data to authorities in third countries is provided in the following cases:
Cookies are textual information (ASCII text) stored on your hard drive via your browser (e.g. Microsoft Explorer or Mozilla Firefox). If you visit the website again, which has passed the cookie to your browser, you will be recognised here and individually addressed.
We process and store your personal data as long as it is necessary for the performance of our contractual and legal obligations. It should be noted that our business relationship is a continuing obligation, which is designed for years.
If the data is no longer required for the performance of contractual or legal obligations, these are regularly deleted, unless their – temporary – further processing is necessary for the following purposes:
Each data subject has the right of access under Article 15 of the GDPR, the right of rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR.
There is a right of appeal to a competent data protection supervisory authority.
You may revoke your consent to the processing of personal data at any time.
Please note that revocation only works for the future. Processing that took place before the revocation is not affected.
As part of our business relationship and possibly pre-contract relationship, you must provide the personal information that is required to collect, perform, and terminate a business relationship and to perform the associated contractual obligations or that we are required to collect by law. Without this information, we will generally be unable to neither provide you with a presentation of our services nor conclude or execute the contract with you.
In particular, if certain services are provided according to the money laundering regulations, we are obliged to identify you prior to the establishment of the business relationship on the basis of your identity document and to record the name, place of birth, date of birth, nationality, address and identity card details. In order for us to be able to fulfil this legal obligation, you must provide us with the necessary information and documents in accordance with the Money Laundering Act and immediately notify us of any changes during the business relationship.
If you do not provide us with the necessary information and documents, we may not take up or continue your desired business relationship.
In principle, we do not use fully automated automatic decision-making pursuant to Article 22 GDPR to justify and implement the business relationship. If we use these procedures in individual cases, we will inform you about this separately, provided that this is prescribed by law.
You have the right to submit a complaint to the competent Data Protection Authority. https://edpb.europa.eu/about-edpb/about-edpb/members_en