Privacy Policy.
Personal Data Processing Notice (GDPR)
Information on the processing of personal data in accordance with the General Data Protection Regulation (GDPR) and Act No. 110/2019 Coll., on the processing of personal data.
Personal data controller
EXPRESS DELI s.r.o.
To exercise your rights in relation to personal data, you can contact us by email at the address listed in the Contacts section, or by post at the above address.
Purposes and legal basis for processing personal data
We process personal data for the purpose of ensuring the functionality of the website. The reason for this is the legitimate interest of the controller.
Legitimate interests of the controller
Our legitimate interests include:
Providing internet content
Creating and processing forms and contracts
Categories of personal data
In most cases, we process personal data that you have provided to us in a form or contract. We may also process data from publicly available records and sources.
Rights of data subjects and obligations of the controller
As a data subject, you have the following rights in relation to the processing of personal data:
- If you have given your consent to the processing of personal data, you have the right to withdraw this consent within the meaning of Article 7(3) of the GDPR;
- Right to information within the meaning of Articles 13-14 of the GDPR;
- Right of access to personal data within the meaning of Article 15 of the GDPR;
- Right to rectification within the meaning of Article 16 of the GDPR;
- Right to erasure within the meaning of Article 17 of the GDPR;
- Right to restriction of processing within the meaning of Article 18 of the GDPR;
- Right to data portability within the meaning of Article 20 of the GDPR;
- Right to object within the meaning of Article 21 of the GDPR;
- Right not to be subject to any decision based solely on automated processing, including profiling within the meaning of Article 22 of the GDPR.
You have the right to access your personal data. This means that, upon request, you have the right to obtain information (confirmation) from us as to whether or not your personal data is being processed and, if so, you have the right to obtain this personal data and, at the same time, you have the right to obtain the following information:
- purposes of processing,
- categories of personal data concerned,
- recipients or categories of recipients to whom the personal data have been or will be disclosed,
- planned period for which the personal data will be stored,
- any available information on the source of the personal data, if not obtained from the data subject,
If you believe that we are processing inaccurate data, you can exercise your right to rectification. If you notify us that you require rectification of your personal data, we are obliged to address your request.
In other words, the right to erasure represents our obligation to destroy your personal data if at least one of the following conditions is met:
- personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
- you withdraw your consent and there is no other legal basis for processing,
- you object to the processing and there are no overriding legitimate grounds for the processing,
- the personal data has been processed unlawfully,
- the personal data must be erased to comply with a legal obligation,
- the personal data has been collected in relation to the offer of information society services referred to in Article 8(1) of the General Regulation.
The right to erasure therefore applies only in the specified cases, i.e. when the given circumstance arises.
The right to erasure is not an absolute right that would give you the opportunity to request the erasure of personal data at any time and in any situation. For example, you cannot request the destruction of all personal data under this right, as we are subject to obligations to retain certain personal data.
You have the right to restrict the processing of personal data if:
- you dispute the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
- we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise, or defense of legal claims;
- you intend to exercise your right to object to the processing of personal data.
- The essence of the right to portability (this right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller) is the possibility, under certain conditions, to obtain the personal data you have provided to us in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller, where technically feasible.
Common conditions for applying the right to portability:
- the processing must be based on consent to processing or a contract,
- the processing is carried out by automated means.
- The exercise of the right to portability must not adversely affect the rights and freedoms of others.
If the processing of personal data is based on consent, you have the right to withdraw this consent.
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. The supervisory authority is the Office for Personal Data Protection (ÚOOÚ) – www.uoou.cz, Pplk. Sochora 27, 170 00 Prague 7. In the event of an infringement of your public subjective rights, you may also contact the court.
