GDPR

GDPR TERMS AND CONDITIONS
(“The Terms”)

Basic provisions

1. Personal data of donors provided to contributors to a Public Collection ("the Contributors") in the form of the sale of items, specifically handmade African products, with the aim of raising funds for the Empower Bolga charity project, an endowment fund, through the websites www.bolgabags.cz and www.bolgabags. com, are provided, collected, and processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
2. Contributors' personal data is provided, collected and processed solely for the purpose of ordering the selected product, confirming the terms and conditions of the Public Collection, and sending the order, in the form of an order, confirmation of the reservation conditions and sending the order; further for the purpose of processing the order, ensuring the delivery of the selected product and also for the purpose of any necessary communication between the Contributor and the operator of the Public Collection.
3. The personal data administrator is Empower Bolga, a foundation, ID No.: 21036080, with its registered office at Jiráskova 600, 537 01 Chrudim, represented by Mr. Jiří Blažek ("the Administrator").
4. Contact details of the Administrator: e-mail: jiri.blazek@empowerbolga.com.
5. Personal data means all information identifying the Contributor (natural person).

Sources of personal data processed

1. The Administrator processes personal data provided to it by the Contributor with their consent and obtained by the Administrator to ensure the purpose of the Public Collection.
2. The Administrator processes only the Contributor's identification and contact details necessary to achieve the purpose of the Public Collection and to create a Donation Confirmation for the Empower Bolga Foundation.
3. Personal data will not be published and will not be transferred to other countries.

Purpose of personal data processing:

1. The Administrator processes the Contributor's personal data for the following reasons:
   1. for the purpose of generating and processing the Contributor's order and delivering the selected item to the Contributor (name, address, email, telephone number); without the provision of personal data, the reservation and order cannot be processed
   2. for the purpose of fulfilling the rights and obligations arising from the relationship between the Contributor and the Administrator;
   3. for the purpose of issuing and delivering a Donation Confirmation to the Empower Bolga Foundation for the Contributor, which can be used to claim a deduction of the value of the gratuitous performance (donation) from the Contributor's tax base in accordance with the conditions set out in Act No. 586/1992 Sb., on Income Tax, as amended (Sections 15 and 20 of the same Act). 
2. The Administrator shall retain personal data for the period necessary to exercise the rights and obligations arising from the relationship between the Contributor and the Administrator, or for the period necessary to fulfil the order for the subject of sale and to issue and deliver the Confirmation of Donation to the Empower Bolga Endowment Fund.
3. After the expiry of the personal data retention period, the Administrator is obliged to delete the data.

Recipients and personal data processing persons:

1. The third party that receives the Contributor's personal data are the Administrator's subcontractors. The services of these subcontractors are unconditionally related to the successful sale of the selected product.
2. The Administrator's subcontractors are:
   • Webnode AG (electronic booking system);
   • Google, Inc. (website analysis).

Contributor's rights

Under the terms and conditions set out in the legal regulations, the Contributor has the right to:

1. access their personal data;
2. correct their personal data;
3. delete their personal data;
4. to object to processing;
5. to data transferability;
6. to withdraw consent to the processing of personal data in writing or electronically at the email address: info@bolgabags.cz;
7. to file a complaint with the Office for Personal Data Protection if they believe that their right to personal data protection has been violated.

Personal data security

1. The Administrator declares that they have taken all appropriate technical and organizational measures necessary to secure the Contributor's personal data.
2. The Administrator has taken technical measures to secure personal data storage, in particular securing access to computers with passwords, using antivirus software, and performing regular maintenance on computers.

Final provisions

1. By confirming the order of the selected product on the website www.bolgabags.cz and www.bolgabags.com, the Contributor confirms that they have read and fully accept the terms and conditions of personal data protection.
2. The Contributor expresses their consent to these Rules at the same time as confirming or sending the order for the selected product. 
3. The Administrator is entitled to change these Rules at any time. The new version of the Rules must be published on the website used to implement charitable projects.
4. These Rules come into effect on April 28, 2025.