PROCESSING AND PROTECTION OF PERSONAL DATA

If you are our customer, news subscriber or website visitor, you entrust us with your personal data. We are responsible for their protection and security. Please familiarize yourself with the protection of personal data, policies and rights that you have in connection with the GDPR (Personal Data Protection Regulation).

Who is the administrator?

The administrator of the internet shop www.eshop.cesky-cerny-cesnek.cz, is a natural person Josef Strach registered in the Trade Register,

with its registered office at Na Kanadě 403, 691 56 Hrušky in the Czech Republic

identification number: 49132440

Steuernummer: CZ6612061291

registered in the Trade Register, for the sale of goods through an online store located at the Internet address www.strachovacokolada.cz.

I process your personal data as an administrator, ie I determine how personal data will be processed and for what purpose, for how long and I select any other processors who will help us with the processing.

Contact information

If you want to contact us during processing, you can contact us by e-mail josef@strachovacokolada.cz.

We declare

We declare that, as the administrator of your personal data, we comply with all legal obligations required by applicable legislation, in particular the Personal Data Protection Act and the GDPR, and therefore that,

we will process your personal data only on the basis of a valid legal reason, in particular a legitimate interest, performance of the contract, legal obligation or consent granted,

we fulfill the information obligation according to Article 13 of the GDPR before the commencement of the processing of personal data, we will enable you and we will support you in exercising and fulfilling your rights under the Personal Data Protection Act and the GDPR.

Scope of personal data and processing purposes

We process personal data that you entrust to us yourself, for the following reasons (to fulfill these purposes):

Provision of services and performance of the contract

We personally need your personal data in the range: invoicing data, e-mail, telephone or correspondence address to fulfill the contract (eg sending access to the e-shop, approving and correcting your orders, delivery of ordered goods.

Bookkeeping

If you are a customer, we urgently need your personal data (invoicing data) in order to comply with the legal obligations for the issuance and registration of tax documents.

Marketing - sending newsletters

We use your personal data (e-mail and name), which you click on in the e-mail, for the purpose of direct marketing - sending business messages. If you are our customer, we do so out of a legitimate interest, as we reasonably assume that you are interested in our news, for a period of 5 years from the last order.

If you are not our customer, we send you newsletters only on the basis of your consent, for a period of 5 years from the grant.

In both cases, you can revoke this consent by using the unsubscribe link in each e-mail you send, or by replying to the newsletter with the text NO.

Cookies

When browsing our website, we record your IP address, how long you stay on the page and from which page you come. We perceive the use of cookies to measure website traffic and adjust the display of websites as our legitimate interest of the administrator, as we believe that thanks to this we can offer you even better services.

Cookies for targeting advertising will be processed only with your consent.

You can disable the use of cookies on your computer in your internet browser.

Security and protection of personal data

We protect personal data as much as possible using modern technologies that correspond to the level of technical development. We protect them as if they were our own. We have adopted and maintain all possible (currently known) technical and organizational measures that prevent the misuse, damage or destruction of your personal data.

Transfer of personal data to third parties

Our personal data is accessible to our employees and co-workers, who are bound by confidentiality and trained in the security of personal data processing.

We handle most processing operations ourselves and do not need 3rd parties.

To ensure some specific processing operations, which we are unable to provide on our own, we use the services and applications of processors who specialize in the given processing and are in accordance with the GDPR.

They are providers of the following platforms and services:

Facebook - FB.

Czech Post, DPD - transport companies

It is possible that in the future we will decide to use other applications or processors to facilitate and improve processing. However, we promise you that in such a case, when choosing, we will place at least the same demands on the processor for security and quality of processing as for ourselves.

Data transfer outside the European Union

We process data exclusively in the European Union.

Your rights in relation to the protection of personal data

You have a number of rights regarding the protection of personal data. If you want to exercise any of these rights, please contact us via e-mail: josef@strachovacokolada.cz. You have the right to the information that is already filled in this information page with the principles of personal data processing.

Thanks for the right toYou can request access at any time and I will tell you within 30 days what your personal data is being processed and why.

If something changes for you or you find your personal data out of date or incomplete, you have the right to add and change personal data.

You can exercise the right to restrict processing if you believe that we are processing your inaccurate data, that you believe that we are processing illegally, but that you do not want to delete all data, or that you have objected to the processing.

You can limit the scope of personal data or the purposes of processing. (For example, by unsubscribing from a newsletter, you limit the purpose of processing to sending business messages.)

Right to delete (be forgotten)

Your next right is the right to delete (be forgotten). We do not want to forget you, but if you wish, you have the right to do so. In such a case, we will delete all your personal data from our system as well as from the system of all sub-processors and backups. We need 30 days to secure the right to delete.

In some cases, we are bound by a legal obligation, and for example I have to register the issued tax documents for the period stipulated by law. In this case, we will delete all such personal data that is not bound by another law. We will inform you by e-mail about the completion of the deletion.

Complaint to the Office for Personal Data Protection

If you feel that we are not handling your data in accordance with the law, you have the right to contact the Office for Personal Data Protection at any time with your complaint. We would be very happy if you first inform us of this suspicion so that we can do something about it and correct any mistakes.

Unsubscribe from sending newsletters and business messages

We send you e-mails with news and events if you are our customer based on our legitimate interest.

If you are not yet a customer, we will send them to you only with your consent. In both cases, you can unsubscribe from our emails by pressing the unsubscribe link in each email you send or by replying to an email with the text NO.

Secrecy

We would like to assure you that our employees and co-workers who will process your personal data are obliged to maintain the confidentiality of personal data and security measures, the disclosure of which would jeopardize the security of your personal data. At the same time, this confidentiality continues even after the end of our contractual relations with us. Your personal data will not be passed on to any other third party without your consent.