Crystal Caviar s.r.o., IČO: 28723279, registered office Dr. Milady Horákové 200, 407 77 Šluknov (hereinafter the “Administrator”) manages and processes the personal data of its customers who have subscribed to receive commercial communications (hereinafter “personal data subjects”). These Principles of Personal Data Processing (hereinafter the "Principles") inform data subjects about the circumstances of processing their personal data and the rights they have in relation to this processing.
The Administrator processes the personal data to send commercial marketing messages, if the data subject has given his consent to processing the personal data for this.
To send commercial messages on the basis of the Administrator's legitimate interest and / or sending commercial messages and for marketing and advertising purposes on the basis of the entity's consent, the Administrator processes the following personal data: name, surname, e-mail address or other data provided to him by the customer.
The data subject provides the personal data to the Administrator voluntarily and with consent.
The Administrator processes personal data for a period necessarily long and proportionate to these purposes or until the consent of the personal data subject is revoked.
If the personal data is processed with the consent of the data subject, the data subject has the right to revoke this processing consent at any time by sending an electronic message to info@crystalcaviar.eu or via a link in the commercial communication. Withdrawing consent does not affect the personal data processing carried out by the Administrator on the basis of another legal title, especially for carrying out a contract, providing a service or processing, based on the consent until it was revoked.
The Administrator does not share the personal data with anyone and does not provide it to any third parties. Recipients of personal data may only be processors of the Administrator who process personal data for the Administrator for the above purposes.
a) Personal data processors:
Personal data processing method
The Administrator and possibly its processors process personal data manually (in printed and electronic form) and electronically by automated means.
The data subject has the following rights:
a) Right of access to personal data
The data subject has the right to ask the Administrator to confirm whether the personal data about him is or is not processed and, if so, he has the right to obtain access to this personal data and to the following information.:
The data subject also has the right to request a copy of the processed personal data from the Administrator, if this does not adversely affect the rights and freedoms of other persons. The Administrator may charge a reasonable fee for additional copies at the request of the data subject, based on administrative costs. If the data subject submits the request electronically, the information will be provided in the electronic form which is commonly used, unless the data subject requests otherwise.
a) Rectification right
The data subject has the right to have the Administrator correct inaccurate personal data about him without undue delay. Taking into account the processing purposes, the data subject has the right to supplement incomplete personal data, including by providing an additional statement.
b) Right to erasure (right to be 'forgotten')
The data subject has the right to have the Administrator delete personal data about the data subject without undue delay, and the Administrator must delete the personal data without undue delay if one of these reasons is given:
c) The right to restrict processing
The data subject has the right to have the Administrator restrict processing if:
d) The right to the transferability of personal data
The data subject has the right to obtain personal data about him provided to the Administrator in a structured, commonly used and machine-readable format, and the right to transfer this data to another administrator without being prevented from doing so by the Administrator, provided that:
In exercising its right to data transferability, the data subject has the right to have the personal data transferred directly by the Administrator to another administrator, if technically feasible. The transferability of personal data right must not adversely affect the rights and freedoms of others
e) The right to object
If the personal data is processed for direct marketing purposes, the data subject has the right at any time to object to the processing of personal data about him or her for that marketing, including profiling (i.e. any form of automated personal data processing for use to evaluate certain personal aspects of the data subject) as far as this direct marketing is concerned. If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for this.
f) The right not to be the subject of an automated decision, incl. profiling
The data subject has the right not to be the subject of any decision based solely on automated processing, including profiling (i.e. any form of automated personal data processing consisting of its use to assess certain personal aspects of the data subject) , which has legal effects for him or significantly affects him in a similar way. This right does not apply if an automated decision is necessary to conclude or carry out a contract between the data subject and the Administrator or is based on the explicit consent of the data subject; in these cases, however, the data subject has the right to human intervention in the automated decision by the Administrator, the right to express his opinion and the right to challenge the automated decision.
g) The right to lodge a complaint with the Supervisory Authority
The data subject has the right to file a complaint against his personal data being processed by the Administrator at the supervisory authority, which for the Czech Republic is the Office for Personal Data Protection, Lt. Col. Sochora 27, 170 00 Prague 7.
E-mail: info@crystalcaviar.eu