1.1 This document together with the Cookie Policy (see below) provides for the information on the processing of personal data, including rights related to the processing of personal data of the users of the web application enabling the selection and configuration of products, as well as the creation and sending of non-binding orders for configured or other products, which is located on the website: czconfigurator.com/us/ (the “Configurator””).
1.2 Personal data in relation to the Configurator are processed in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).
1.3 Ghost Products, Inc., with its registered office at 110 E. Southern Ave, MESA, AZ 85210, USA ,], ID No.10951428, registered in Arizona, (the “Seller”) is a service provider of the Configurator within the territory of USA (excluding California, New York, New Jersey, Hawaii, Maryland, and Connecticut). The purposes and means of the processing of personal data of the Users are determined by the Seller (if the date are not processed on the basis of the consent granted to the Operator under Article Ghost Products, Inc.1.4 of this Privacy Policy above).
1.4 Česká zbrojovka a.s. with its registered office at Svat. Čecha 1283, 6688 01Uherský Brod, Czech Republic, email address: [email protected], ID No. 463 45 965, registered in the Commercial Register of the Regional Court in Brno, Section B, Insert No. 712 (the “Operator”), ensures the technical operation of the Configurator and does not have any influence on determination of the purposes and means of the processing of personal data of the users of the Configurator (the “Users”), unless the personal data of the Users are processed on a basis of a consent granted to the Operator (Article 6(1)(a) of the GDPR) for marketing purposes. Only in such cases, the Operator acts as a data controller.Česká zbrojovka a.s. with its registered office at Svat. Čecha 1283, 6688 01Uherský Brod, Czech Republic, email address:
1.5 Based on the above, the Distributor acts as a data controller in relation to the data processed in Configurator (if the date are not processed on the basis of the consent granted to the Operator under Article 1.4 of this Privacy Policy above) and the Operator acts as a data processor of the Seller pursuant to separate data processing agreement.
1.6 For the transfer of data, the Seller has concluded the standard contractual clauses with the Operator on the basis of Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to GDPR.
2.1 The personal data of the Users are processed in the Configurator as follows:
Categories of personal data | Purpose | Legal basis | Data controller |
Identification data (name, surname, address), Contact data of the User (e-mail and phone contact) Data on configuration of products by the User (selected customization of the firearm) | Processing is necessary in order to take necessary steps in relation to a purchase of products via Configurator. Provision of personal data is required in order to enter into the contractual relationship with the Seller. | Art. 6(1)(b) of the GDPR | Seller |
Identification data (name, surname, address) | Processing is necessary for compliance with a legal obligation (e.g., accounting laws or applicable firearm legislation). Provision of personal data is a legal requirement. | Art. 6(1)(c) of the GDPR | Seller |
Contact data of the User (e-mail and phone contact) and Identification (name, surname, address) for sending mail | Sending a commercial communication and informing the User about the other sale offers in respect of the similar products and/or services based on the legitimate interest of the Seller selected by the User legislation). If the User has not initially opted-out of receiving marketing. | Art. 6(1)(f) of the GDPR | Seller |
Data on configuration of products by the User (selected customization of the firearm) E-mail address of the User | Saving the results of the configuration of products in the Configurator. Provision of personal data is required in order to save the results of the configuration of products in the Configurator. | Art. 6(1)(b) of the GDPR | Seller |
Identification data (name, surname, address) and E-mail address | Sending a commercial communication and informing the User about the other sale offers based on the consent of the User. Granting a consent is voluntary and is not a legal requirement, a contractual requirement nor a requirement necessary to enter into any agreement. | Art. 6(1)(a) of the GDPR | Operator |
Operating data (Cookies) | Setting up a website and improvement of functions of the Configurator via processing of cookies (the text of the Cookie Policy is available below). If the legal basis is a consent, granting a consent is voluntary and is not a legal requirement, a contractual requirement nor a requirement necessary to enter into any agreement | Art. 6(1)(f) of the GDPR (essential cookies) OR Art. 6(1)(a) of the GDPR (other cookies) | Operator |
2.2 Automated decision-making including profiling is not applicable in relation to data processing in relation to the Configurator. The Operator also does not use the data for profiling or analysis purposes.
3.1 The personal data of the Users are only made available to the authorised employees of the Seller, Operator and the service providers involved in the technical operation of the Configurator or marketing operations (hosting and maintenance service providers and newsletter providers).
3.2 The personal data of the Users may be anonymised and on the basis of these anonymised data aggregated reports may be generated and sent primarily to companies in the group of the Operator and the Seller for statistical purposes.
3.3 In statutory cases, certain personal data may be disclosed to public authorities on the basis of applicable legislation.
4.1 Personal data will be stored securely in electronic or paper form. Personal data may be processed manually or by automated means.
4.2 Personal data will be processed and stored for the period of time stipulated in generally binding legal regulations or for the period of time for which the User has granted their consent to the processing of the data.
4.3 Overview table showing the retention period of personal data:
Category of data Purpose | Retention period |
Identification data of the User, Contact data of the User, Data on configuration of products by the User Processing in order to take necessary steps in relation to a purchase of products via Configurator. | For the period of 5 years unless the applicable laws provide for a shorter period. |
Contact data of the User Processing is necessary for compliance with a legal obligation. | For the period stipulated pursuant to the applicable laws. For instance, for tax and accounting purposes, the legislation sets a minimum retention period of 5 years. |
Operating data Setting up a website and improvement of functions of the Configurator via processing of cookies | For the period of the granted consent and/or until the consent was revoked by the User. If Operating data are processed based on legitimate interest of the Operator, then for the period necessary to fulfil the purpose of the processing. |
Identification data of the User and Contact data of the User Sending a commercial communication and informing the User about the other sale offers based on the consent of the User. | For the period of the granted consent and/or until the consent was revoked by the User. |
Identification data of the User and Contact data of the User Sending a commercial communication and informing the User about the other sale offers in respect of the similar products and/or services based on the legitimate interest of the Seller. | For the period of 5 years unless the applicable laws provide for a shorter period. |
Data on configuration of products by the User and Contact data of the User Saving the results of the configuration of products in the Configurator. | For the period of 30 days following a day on which the last save of the configuration of products was performed by the User. |
5.1 The data subject shall have rights in relation to the processing of personal data which arise under the law and which he or she may exercise at any time with any Controller. These are the right (a) to withdraw consent to the processing of personal data, (b) to access personal data, (c) to have inaccurate personal data rectified and incomplete personal data completed, (d) to have personal data erased if they are no longer necessary in relation to the purposes for which they were collected or otherwise processed or if it is established that they have been unlawfully processed, (e) to restriction of the processing of personal data, (f) to data portability, and (g) the right to object, upon recognition of which the processing of personal data will be terminated, unless it is demonstrated that there are compelling legitimate grounds for the processing which override the interests or rights and freedoms of the data subject, in particular where the ground is the possible exercise of legal claims.
(a) Right to withdraw consent to the processing of personal data: if your personal data are processed on the basis of your consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal. You can withdraw your consent by using the contact details specified in Articles 5.3 and 5.4 of this Privacy Policy or the hyperlink embedded in the footer of the marketing communication.
(b) Right to access personal data: you have the right to obtain information about whether your personal data are being processed and the right to access your personal data.
(c) Right to have inaccurate personal data rectified and incomplete personal data completed: if you believe that your personal data processed are inaccurate or incomplete, you have the right to request their rectification and completion. The rectification or completion will be carried out without undue delay, but always taking into account the technical possibilities.
(d) Right to erasure: if you request erasure of your personal data, your personal data will be erased if (i) they are no longer necessary in relation to the purposes for which they were collected or otherwise processed, (ii) the processing is unlawful, (iii) you object to the processing and there are no overriding legitimate grounds for the processing of your personal data, or (iv) if such processing is imposed by a statutory obligation.
(e) Right to restriction of the processing of personal data: if you request a restriction of processing, your personal data will be made inaccessible, temporarily deleted or stored, or other processing operations will be carried out that are necessary for the proper exercise of the asserted right.
(f) Right to data portability: if you want your personal data which are processed on the basis of your consent or on the basis of taking a pre-contractual measure, to be transferred to you or to a third party, you can exercise your right to data portability. If the exercise of such a right may adversely affect the rights and freedoms of third parties, your request will not be granted.
(g) Right to object: you have the right to object to the processing of personal data that are processed for the purposes of protecting the legitimate interests of the data controller. If the data controller does not demonstrate a compelling legitimate interest in the processing that overrides the interests or rights and freedoms of the Users, they will terminate the processing without undue delay on the basis of the objection. If the essence of the Users’ objection is against the sending of commercial communication, please use the link at the end of the last commercial communications (newsletter) you received from the data controller to unsubscribe from commercial communications and the processing of personal data for that purpose.
5.2 In the event of repeated or manifestly unfounded requests to exercise the rights referred to above, the data controller may, in accordance with Article 12(5)(a) of the GDPR, charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the action requested. You will be informed of that procedure.
5.3 or an email address of the Seller info.configuratorzcustom.cz or the registered of office of.The point of contact in relation to the processing of personal data in the Configurator is the registered office of the Seller
5.4 The point of contact in relation to the data processing based on the consent of the User granted to the Operator (see Article 1.4 of this Privacy Policy above) is the registered office of the Operator or an email address of the Operator [email protected].
5.5 You may also use the contact details under Articles 5.3 and 5.4 of this Privacy Policy to exercise your rights or to obtain further information regarding the standard contractual clauses as set out in Article 1.6 of this Privacy Policy. The Seller and the Operator reserve the right to reasonably verify the identity of the data subject exercising the aforementioned rights.
5.6 The Seller and the Operator may unilaterally amend or supplement this Privacy Policy at any time. In the event of substantial changes to this Privacy Policy affecting the rights of data subjects or the processing of their data, such changes will be communicated to data subjects in good time and in an appropriate manner.
5.7 This Privacy Policy forms an integral part of the purchase contract concluded by and between the User and the Seller via the Configurator.
6.1 This Privacy Policy becomes valid and effective from 5th September, 2022
6.2 This Privacy Policy was last updated on 5th September, 2022.
1.1 This document governs the cookies policy of Česká zbrojovka a.s. with its registered office at Svat. Čecha 1283, 6688 01Uherský Brod, Czech Republic, email address: [email protected], ID No. 463 45 965, registered in the Commercial Register of the Regional Court in Brno, Section B, Insert No. 712 (the “Operator”), applicable to users - natural persons who browse, read or enter their data on the website https://www.czconfigurator.com/us/ (the “Website”) or provide their data to the Operator through third party websites (the “Policy”).
1.2 The purpose of this Policy is, inter alia, to duly inform the Website users about the use of cookies, the possibility of granting consent to the use of cookies, and the possibility of disabling the use of cookies.
1.3 This Policy, together with the Privacy Policy (see above), describe how the data of the Website users are obtained, collected, processed and used, and how the Operator obtains and processes information about the Website users by means of cookies.
2.1 For the purposes of this Policy, ‘cookies’ mean cookie files and other similar technologies (such as pixel tags, web beacons or device identifiers) that may automatically collect information when you visit the Website. Information collected in this way may include browser type, operating system, referring URL, information about activities on the Website, and the dates and times of individual visits to the Website. Cookies thus help to provide, protect and improve the services offered.
2.2 Cookies in particular:
(a) serve for efficient navigation on the Website, personalisation, saving preferences and generally improving the user’s experience of the Website; and
(b) allow to distinguish whether a particular user has visited the Website in the past or is a new visitor and to assist in recording statistics about visitors to the Website.
2.3 Operators will only use some of the cookies if a visitor to the Website has granted their consent to the use of cookies in accordance with Clause 5.1 of this Policy.
2.4 The specific purposes for which cookies are used are set out below in Clause 4 of this Policy.
3.1 In general, cookies can be divided on the basis of a number of criteria:
(a) According to who creates and processes cookies, cookies can be divided into:
(i) first party cookies, which are created directly by websites or scripts on the same domain. They are most often used to provide the basic functionality of the Website;
(ii) third party cookies are created by other websites. These websites own some content on the website you visit, such as advertisements, images or videos.
(b) According to their durability, cookies can also be divided into:
(i) session cookies are temporary and are stored on the device only until the user finishes working with the web browser, and are deleted after closing it. These cookies are essential for the proper functionality of the website or associated applications;
(ii) permanent cookies are used for easier and more convenient navigation on the website (e.g. easier and faster navigation). These cookies remain in the browser for a longer period or until they are manually deleted. The length of this period may depend on the selected web browser settings.
(c) According to their intended use, cookies can be divided into:
(i) strictly necessary cookies (essential), which are necessary for the operation of the website. These include, for example, cookies that allow the user to log into secure parts of the website. These cookies do not collect information about users that could be used for marketing purposes or to remember what websites users have visited in the Internet environment;
(ii) performance/statistical cookies are used to improve the functioning of the website. These cookies collect information about how visitors use the website, e.g. which websites visitors go to most often and whether they receive error messages from the website. Performance cookies allow us to record and count the number of visitors to the website, which allows us to track how visitors use the website. These cookies do not collect personally identifiable information about the user. The information collected by these cookies is aggregated and anonymous;
(iii) functional cookies facilitate the control and improve the functions of the website. They are used to activate specific website functions (e.g. video playing) and to set them according to the user’s preferences (e.g. language). Functional cookies are also used to remember preferences for the next time the user visits the website. However, they do not collect information that can identify the user;
(iv) targeted and advertising cookies (profiling) are used to track preferences and to send advertising messages in accordance with those preferences.
4.1 The following types of cookies are used on the Website:
Name | Purpose | Expiry |
Targeting cookie SID | The purpose of the cookie is to provide ad delivery or retargeting and fraud prevention. | 1 year |
langAbbr | The purpose of the cookie is to store the user’s localization and mutation preference. | 99 days |
ageVerified | The purpose of the cookie is to state that the client has confirmed the age. | 99 days |
nette-samesite | The purpose of the cookie is to provide security for cross-site request forgery attack. | During a session |
Analytics Google: (_gat, _gid, _gat) | This cookie anonymously collects statistical data about how visitors behave on the Website. To disable the cookie, click here. | 1 day up to 2 years |
Hotjar: (_hj*) | This cookie creates a user ID that is unique to the Website. It also ensures that data from subsequent visits to the Website is assigned to the same user ID. | 365 days |
4.2 Further information about our cookies and an up-to-date list of cookies is available within individual web browsers, most often in the Developer Tools section.
5.1 which process personal data requires the user’s consent, which the user grants by ticking the designated checkbox contained in the cookie bar (available HERE), If the user does not grant their consent to the use of cookies, the Operator will not use cookies on the Website in relation to the user that are not necessary for the functioning of the Website (i.e. essential cookies). Essential cookies can be disabled in the settings of the browser used. Please note that if you use your browser settings to disable essential cookies, you may not be able to access the Website or certain parts of the Website, or the Website may not function properly.The use of cookies
5.2 Users may change their browser settings at any time and reject/remove or allow the use of cookies. The specific procedure differs from browser to browser, so please refer to your browser’s help for further information. For the most common browsers these are:
(a) Chrome
(b) Firefox
(c) MS Internet Explorer / Edge
(d) Safari
(e) Opera
5.3 Rejecting or removing cookies may lead to the Website or some of its services not functioning properly and may have an adverse effect on your user experience. Areas of the Website that could use third party content and related cookies will not be available.
6.1 In order to manage the Website or to carry out marketing activities on behalf of the Operator, the Operator may share information obtained through cookies with third parties. Personal data may be provided to the following categories of recipients:
(a) IT companies administering the Website;
(b) Other companies from the business group of the Operator.
7.1 Many third-party applications allow users to block or manage cookies. Users can also delete cookies that were previously stored on their device by deleting their browsing history or through third party applications.
7.2 For more information about applications that allow users to block or manage cookies and other useful information about cookies, please see, for example, the following websites:
(a) www.aboutcookies.org;
(b) www.allaboutcookies.org;
(c) www.youronlinechoices.eu.
7.3 If you have any questions about cookies, you can contact us by e-mail at [email protected].
8.1 The Operator may unilaterally amend or supplement this Policy at any time. In the event of any amendment to this Policy, the Operator shall notify the users of such amendment in sufficient time and in an appropriate manner so that the users have an objective opportunity to familiarise themselves with such amendment.
8.2 This Policy comes into force and effect on 5th September, 2022.
8.3 This Policy was last updated on 5th September, 2022.
