Information on the processing and protection of personal data

The information below is provided in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

I. Basic information

Controllers identity
BOHEMIA SEKT s.r.o, registered office at Smetanova 220, Starý Plzenec, Czech Republic, postal code 332 02, Company ID No. 45358711, registered in the Commercial Register at the Regional Court in Pilsen, File No. C 26443,

(hereinafter referred to as the “Controller”)

Purpose of personal data processing

Personal data are processed for the purpose of informing the data subject about social and marketing events organised or co-organised by the Controller (hereinafter “informing the data subject”).

Categories of personal data processed

The following categories of personal data are processed for the purpose of informing the data subject:

(a) personal identification and address data (name, surname, title, contact address); and

(b) electronic contact details (telephone, e-mail address).

Legal basis for processing

Consent to the processing of personal data for the purpose of informing the data subject shall be the legal basis for the processing of personal data [Art. 6(1)(a) of the General Data Protection Regulation].

Recipients of personal data

The Controller may entrust a processor with the processing of personal data, provided the processor has entered into a contract for personal data processing with the Controller and provides sufficient guarantees for the protection of personal data. The Controller does not intend to transfer personal data to a third country outside the European Union.

Personal data storage period

Personal data will be stored for a period of 10 years from the date on which consent to their processing was granted.

II. Information on data subject rights related to the processing of personal data

Right to withdraw consent

The data subject shall have the right to withdraw his or her consent to the processing of personal data at any time. The withdrawal of consent shall not affect the lawfulness of the processing based on consent before its withdrawal. The data subject may withdraw his or her consent by sending the following message “I withdraw my consent to the processing of my personal data” to info@bohemiasekt.cz or by any other method of exercising the rights related to the processing of personal data (see below).

Right of access to personal data

The data subject shall have the right to obtain from the Controller confirmation whether or not personal data concerning him or her are being processed and, where this is the case, access to the personal data and the following information:

(a) the purpose of the processing;

(b) the categories of personal data concerned;

(c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;

(d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

(e) the existence of the right to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;

(f) the right to lodge a complaint with a supervisory authority (i.e. the Office for Personal Data Protection);

(g) where the personal data are not collected from the data subject, any available information as to their source;

(h) the existence of automated decision-making, including profiling, and information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

The Controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the Controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.

Right to rectification

The data subject shall have the right to obtain from the Controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure (“right to be forgotten”)

The data subject shall have the right to obtain from the Controller the erasure of personal data concerning him or her without undue delay and the Controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

(a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

(b) the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing;

(c) the data subject objects to the processing for direct marketing purposes;

(d) the personal data have been unlawfully processed;

(e) the personal data have to be erased for compliance with a legal obligation in European Union or Czech law;

(f) the personal data have been collected in relation to the offer of information society services [Art. 8(1) of the General Data Protection Regulation].

The abovementioned right of erasure shall not apply to the extent that processing is necessary:

(a) for compliance with a legal obligation which requires processing by European Union or Czech law or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;

(b) for the establishment, exercise or defence of legal claims.

Right to restriction of processing

The data subject shall have the right to obtain from the Controller restriction of processing where one of the following applies:

(a) the accuracy of the personal data is contested by the data subject, for a period enabling the Controller to verify the accuracy of the personal data;

(b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;

(c) the Controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Method of exercising the rights

The aforementioned rights relating to the processing of personal data may be exercised by the data subject at any time by means of a request delivered to the address of the Controller (Smetanova 220, Starý Plzenec, postal code 332 02, Czech Republic) or by e-mail sent to info@bohemiasekt.cz. A request under the previous sentence may also be made by telephone at +420 377 197 111. If the Controller has reasonable doubts concerning the identity of the natural person making the request, the Controller may request the provision of additional information necessary to confirm the identity of the data subject.

Right to object

If the Controller does not take action on the request of the data subject, the Controller shall inform the data subject without delay and at the latest within one month of receipt of the request of the reasons for not taking action. The data subject has the possibility to lodge a complaint with a supervisory authority (i.e. the Office for Personal Data Protection) and seek a judicial remedy.