INFORMATION ON THE PROCESSING OF PERSONAL DATA OF CUSTOMERS
within the meaning of Art. 13 of the GDPR
__________________________________________________________________________
- THE CONTENT AND PURPOSE OF THE DOCUMENT
1.1.This document contains information regarding the protection of personal data provided by visitors to the www.camellia-tea.eu website by our clients and those interested in our services and products.
1.2The purpose of this document is to inform you (data subjects) of your rights and to provide clear information on how personal data will be handled.
1.3 We appreciate your trust in providing us with your personal data and therefore we process personal data in accordance with Act No. 101/2000 Coll., on the protection of personal data, as amended, and Regulation (EU) 2016/679 , i.e. General Data Protection Regulation, which came into force on 25 May 2018 and is commonly known as GDPR. Clicking on the regulation number in the previous sentence will take you directly to the text of the regulation and will also take you to the exact wording of the legal provisions that we refer to in this text below.
1.4. The content that awaits you in this document:
- Content and purpose of the document
2. Personal Data Controller – who are we and how can you contact us?
3. What personal data do we process and how do we obtain it?
4. For what purposes do we process personal data, for how long and what entitles us to do so?
5. Information about your data protection rights
6. Other important information for exercising your rights
__________________________________________________________________________
- PERSONAL DATA CONTROLLER
WHO ARE WE AND HOW CAN YOU CONTACT US?
AG FOODS Group a. s.
ID 05651531
Škrobárenská 506/2, 617 00 Brno
company registered in the Commercial Register kept by the Regional Court in Brno, insert B 7823
e-mail: info.cz@agfoods.eu, phone: +420 518 777 011,
Web: http://www.agfoods.eu
__________________________________________________________________________
- WHAT PERSONAL DATA DO WE PROCESS AND HOW DO WE OBTAIN IT?
3.1. We process the data you provide us with. In specific cases, this may include, in particular, the provision of data by filling in one of the forms on the website, entering data into the user account set up on our website, providing data in the preparation of contracts and related documents and in connection with the implementation of contracts (i.e. in connection with the delivery of goods, provision of services), in personal contact, by telephone, in writing, by e-mail or by other means of communication (text messages, messages in applications such as Skype, FB messenger).
3.2. We also process data that you yourself publish on the internet and in particular on social networks (e.g. Facebook, Instagram, Linkedin) and data from public registers (in particular for the inclusion or checking of your identification data in contracts).
3.3. If we need your consent to process certain personal data for specific processing purposes, we will only process such data for that purpose with your consent.
3.4. You provide us with the data voluntarily in principle, only in some cases we would not be able to deliver the ordered goods without providing the data (e.g. if we are to send them to a specific address and you do not provide it). You are only obliged to provide us with data where this is directly required by law.
3.5. Personal data may fall into the category of “ordinary personal data” or it may be
specific categories of data, i.e. sensitive data, where the law sets stricter conditions for processing.
3.6. Common personal data we process:
First name, last name, title, address, ID number, phone number, email, IP address, cookies, information about the goods and services you ordered, information about what goods you purchased from us, photos from our live meetings/educational events you attended, videos from these events.
3.7. We do not process any special categories of personal data.
__________________________________________________________________________
- FOR WHAT PURPOSES WE PROCESS PERSONAL DATA, FOR HOW LONG
AND WHAT QUALIFIES US TO DO SO?
4.1. Processing of personal data for the purpose of concluding a contract and fulfilling contractual obligations
In order for us to conclude a contract with you and deliver the goods you have ordered and to conduct related communication with you, we process the following common personal data: name, surname, title, address, registration number, telephone number, e-mail.
The legal title (authorisation) for the processing of this data is directly for the performance of contractual obligations under the contract concluded between us. Such an obligation may be, for example, to deliver the ordered goods. This does not have to be a contract concluded in a traditional printed form, signed in person. It can be, for example.
a contract concluded verbally, over the phone or by completing and submitting the order form on the website and our confirmation of such order.
For this purpose, we process personal data for the duration of the contractual relationship between us. After the end of the contractual relationship, some data is then retained for the purposes of compliance with legal obligations or for legitimate interest purposes, as you will read in the following sections of this document.
4.2. Processing of personal data for the fulfilment of accounting and tax obligations
and other legislation
In order to comply with the obligations arising from applicable legislation, especially in the field of accounting, tax law and archiving, we process the following data: name, surname, title, address, registration number, VAT number.
The period of time for which the data is processed is determined directly by the relevant legal regulations that oblige us to process it.
4.3. Processing of personal data for the purposes of our legitimate interests or those of a third party
A legitimate interest can cover a wide range of situations. Therefore we inform you
the legitimate interests for which we process personal data:
- The legitimate interest is the protection and proof of our rights and legal claims, in particular those arising from contracts concluded or damages caused. For these purposes, we process personal data for a period of 4 years after the end of the contractual cooperation or our last contact, if no contract has been concluded. This time limit is set in relation to the limitation periods for claims, taking into account that the
we do not have to learn about any claim brought before the court immediately at the time it is brought by the other party. For these purposes, data from contracts and our communications with each other are stored. - Furthermore, direct marketing is a legitimate interest. For sending commercial communications, we will process the following personal data of our clients: name, surname, address, e-mail. You can always stop receiving commercial communications to your email by simply clicking on the link provided in the email. If we use the classic printed form or a phone call or one of the communication applications such as skype, messenger to send you our offer or information about our news, we will also respect this if you let us know that you do not want further contact.
4.4. Processing of personal data on the basis of your consent
If you give us your consent, we will process your personal data to send you our product offers. We will need your consent for this processing if you are not our client. In addition, if you give us further consent, we will also process your personal data to send you offers of services/products from our business partners.
Before you give us your consent, we will inform you of what data and for which specific purpose the consent will apply. You can withdraw your consent at any time. However, if we also process some of your personal data on the basis of another legal title, we will continue to process your personal data for these purposes even after your consent has been withdrawn, as consent is not required for these specific purposes.
4.5. Disclosure of personal data to others
We are assisted by other persons who act as processors to ensure that we meet some of our contractual or legal obligations. In particular, this includes cooperating accountants, law firm(s), data storage and software application providers and others. We have written contracts with processors agreeing to data protection obligations to keep your data safe.
The processor of this data is mainly the parent company AG FOODS Group a.s., Škrobárenská 506/2, 617 00 Brno, ID 05651531.
Personal data will also be disclosed to the relevant administrative authorities if we are obliged to do so by law (i.e. in particular in the case of an inspection in which the relevant authority is entitled to require the submission of personal data).
__________________________________________________________________________
- INFORMATION ABOUT YOUR OTHER DATA PROTECTION RIGHTS
5.1. Right of access to personal data
This is the right to confirm whether we are processing your personal data and, if so, to access that data and information about its processing.
5.2. Right to rectification of personal data
This is the right to have inaccurate personal data concerning you corrected without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing an additional declaration (in which you provide complete data).
5.3. Right to erasure of personal data (right to be forgotten)
In the cases provided for by law or the GDPR, you have the right to request that we delete your personal data without undue delay (the GDPR lists the grounds in Article 17, including exceptions where deletion is not carried out).
5.4. Right to restriction of processing
In the cases provided for in Art. 18 GDPR, you have the right to request that we restrict the processing of your personal data.
5.5. Right to data portability
Under the conditions set out in Art. 20 GDPR, you have the right to obtain your personal data and transfer it to another controller. If technically feasible, you have the right to request a direct transfer to another administrator.
5.6. Right to object
Where we process personal data for legitimate interest purposes, you have the right to object to such processing and we will then no longer process the data unless our legitimate interest overrides your interests or rights and freedoms. If the legitimate interest is direct marketing, then objection always results in the termination of further processing for direct marketing purposes.
5.7. Right to lodge a complaint with the supervisory authority
If you believe that your data protection rights are being violated, you have the right to file a complaint with the Data Protection Authority. Further information about the Authority and data protection can be found directly on the Authority’s website www.uoou.cz
__________________________________________________________________________
- OTHER IMPORTANT INFORMATION FOR EXERCISING YOUR RIGHTS
6.1. If you have any further questions about the processing of your personal data by us, you can contact us at tikaro@tikaro.cz. You can also directly exercise your rights as described in section 6 by sending a message to this email or by sending a written request to our address at the beginning of this document. Please note that in order to verify that the request is indeed made by you, we may contact you afterwards to verify your identity and request in a reasonable manner. The same applies to any telephone and similar communications.
6.2. The latest version of this document can always be found on www.camellia-tea.eu. This text is effective from 1.12.2023.