Menu

Principles of personal data protection and processing

Crystal Caviar s.r.o., IČO: 28723279, registered office Dr. Milady Horákové 200, 407 77 Šluknov (hereinafter the “Administrator”) manages and processes the personal data of its customers who have subscribed to receive commercial communications (hereinafter “personal data subjects”). These Principles of Personal Data Processing (hereinafter the "Principles") inform data subjects about the circumstances of processing their personal data and the rights they have in relation to this processing.

1. Purposes of personal data processing

The Administrator processes the personal data to send commercial marketing messages, if the data subject has given his consent to processing the personal data for this.

2. Extent of personal data

To send commercial messages on the basis of the Administrator's legitimate interest and / or sending commercial messages and for marketing and advertising purposes on the basis of the entity's consent, the Administrator processes the following personal data: name, surname, e-mail address or other data provided to him by the customer.

3. Voluntarily providing personal data

The data subject provides the personal data to the Administrator voluntarily and with consent.

4. Personal data processing time

The Administrator processes personal data for a period necessarily long and proportionate to these purposes or until the consent of the personal data subject is revoked.

If the personal data is processed with the consent of the data subject, the data subject has the right to revoke this processing consent at any time by sending an electronic message to info@crystalcaviar.eu or via a link in the commercial communication. Withdrawing consent does not affect the personal data processing carried out by the Administrator on the basis of another legal title, especially for carrying out a contract, providing a service or processing, based on the consent until it was revoked.

5. Personal data recipients

The Administrator does not share the personal data with anyone and does not provide it to any third parties. Recipients of personal data may only be processors of the Administrator who process personal data for the Administrator for the above purposes.

a) Personal data processors:

  • DARK SIDE a.s., ID: 24194409, Jankovcova 1037/49, 170 00 Praha 7

Personal data processing method

The Administrator and possibly its processors process personal data manually (in printed and electronic form) and electronically by automated means.

6. Rights of the data subject

The data subject has the following rights:

a) Right of access to personal data

The data subject has the right to ask the Administrator to confirm whether the personal data about him is or is not processed and, if so, he has the right to obtain access to this personal data and to the following information.:

  1. the purposes of processing;
  2. the categories of personal data concerned;
  3. recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or in international organizations;
  4. the planned time for which the personal data will be stored or, if this cannot be determined, the criteria used to determine this period;
  5. that the right to request the Administrator to correct or delete personal data about the data subject or restrict its processing, or to object to this processing exists;
  6. the right to lodge a complaint with the Supervisory Authority;
  7. all available information about the source of the personal data, if not obtained from the data subject.

The data subject also has the right to request a copy of the processed personal data from the Administrator, if this does not adversely affect the rights and freedoms of other persons. The Administrator may charge a reasonable fee for additional copies at the request of the data subject, based on administrative costs. If the data subject submits the request electronically, the information will be provided in the electronic form which is commonly used, unless the data subject requests otherwise.

a) Rectification right

The data subject has the right to have the Administrator correct inaccurate personal data about him without undue delay. Taking into account the processing purposes, the data subject has the right to supplement incomplete personal data, including by providing an additional statement.

b) Right to erasure (right to be 'forgotten')

The data subject has the right to have the Administrator delete personal data about the data subject without undue delay, and the Administrator must delete the personal data without undue delay if one of these reasons is given:

  1. the personal data is no longer needed for the purposes for which it was collected or otherwise processed;
  2. the data subject withdraws the consent on the basis of which the personal data was processed and there is no other legal reason for the processing;
  3. the data subject objects to the processing of personal data for direct marketing purposes;
  4. the personal data has been unlawfully processed;
  5. the personal data must be deleted to meet a legal obligation laid down in the law of the European Union or the Czech Republic;
  6. the personal data has been collected in connection with providing information society services on the basis of a consent given by a child.

c) The right to restrict processing

The data subject has the right to have the Administrator restrict processing if:

  1. the data subject denies the accuracy of the personal data for the time necessary for the Administrator to verify the accuracy of the personal data;
  2. the processing is unlawful and the data subject refuses to delete the personal data and calls instead for restrictions on its use;
  3. the Administrator no longer needs to process the personal data but the data subject requires it to determine, enforce or defend legal claims.

d) The right to the transferability of personal data

The data subject has the right to obtain personal data about him provided to the Administrator in a structured, commonly used and machine-readable format, and the right to transfer this data to another administrator without being prevented from doing so by the Administrator, provided that:

  1. the processing is based on a consent to process personal data or the processing of the personal data is for the purpose of concluding and carrying out a contract with the data subject; and at the same time
  2. the processing is automatic.

In exercising its right to data transferability, the data subject has the right to have the personal data transferred directly by the Administrator to another administrator, if technically feasible. The transferability of personal data right must not adversely affect the rights and freedoms of others

e) The right to object

If the personal data is processed for direct marketing purposes, the data subject has the right at any time to object to the processing of personal data about him or her for that marketing, including profiling (i.e. any form of automated personal data processing for use to evaluate certain personal aspects of the data subject) as far as this direct marketing is concerned. If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for this.

f) The right not to be the subject of an automated decision, incl. profiling

The data subject has the right not to be the subject of any decision based solely on automated processing, including profiling (i.e. any form of automated personal data processing consisting of its use to assess certain personal aspects of the data subject) , which has legal effects for him or significantly affects him in a similar way. This right does not apply if an automated decision is necessary to conclude or carry out a contract between the data subject and the Administrator or is based on the explicit consent of the data subject; in these cases, however, the data subject has the right to human intervention in the automated decision by the Administrator, the right to express his opinion and the right to challenge the automated decision.

g) The right to lodge a complaint with the Supervisory Authority

The data subject has the right to file a complaint against his personal data being processed by the Administrator at the supervisory authority, which for the Czech Republic is the Office for Personal Data Protection, Lt. Col. Sochora 27, 170 00 Prague 7.

7. Administrator contact

E-mail: info@crystalcaviar.eu