By granting this consent to the processing of personal data, you consent to the processing of your data by Veselá Košťata s.r.o. Nové sady 988/2, 602 00 Brno, Czech Republic, ID No.: 177 32 034 (hereinafter referred to as the “Controller”) under the following terms and conditions.

Scope of the processing of your data

The Controller will process your personal data to the extent that you have provided it in connection with the Controller’s marketing activities, specifically with the subscription to email, printed, or telephone communications. For example, the Controller will process your name, surname, email, telephone number, home or business address, and your organization’s name.

Purpose of processing your data

The Controller will process your data for direct marketing (i.e., offering the Controller’s products and services), including sending you commercial communications within the meaning of Act No. 480/2004 Coll. on certain information society services and analyzing your behavior concerning these commercial communications to send you personalized service offers.

Legal basis for the processing of personal data

The legal basis for processing is this consent and the fact that your data is necessary to fulfill the individual direct marketing purposes for which you have subscribed. Personal data is processed under the General Data Protection Regulation — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 — (hereinafter referred to as “GDPR”).

The period for which your personal data will be processed

The Controller will process your data in connection with the above-mentioned direct marketing purpose for 2 years from the opening of the commercial communication sent by the Controller or from the last purchase made unless you withdraw this consent earlier. Withdrawal of support to the processing of personal data. You may revoke your voluntary consent to personal processing data at any time, free of charge, by sending an email to: info@vesela-kostata.cz. You can also withdraw your license directly from any commercial communication sent to you by email. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal. Withdrawal of consent also does not affect the processing of personal data that the controller processes on a legal basis other than consent.

Persons with access to your data

Your personal data will be accessible to the Controller, its employees, and, where applicable, third-party processors who provide appropriate safeguards, whose processing meets all the requirements of the GDPR, and who will adequately protect your rights and your personal data. These parties include, in particular, legal and marketing consultants and companies that send commercial communications and newsletters. However, these persons will only have access to this data for as long as necessary and to the extent necessary to provide the service and comply with legal requirements.

Contact details of the Controller

You can contact the Controller by email at info@vesela-kostata.cz or in writing at the address of the Controller’s registered office. The Controller is entitled to request proof of your identity to prevent unauthorized persons from accessing your personal data. Furthermore, all communications between you and the Controller may be monitored in order to improve the quality of the service and to keep a record of the Controller’s compliance with its legal obligations.

Your rights relating to the protection of your personal data

You have the right to withdraw your consent at any time, to correct or supplement your personal data, to request the restriction of processing, to object to or complain about the processing of your personal data, to request data portability, access to your personal data, to be informed of a data breach, erasure and other rights set out in the GDPR. Your rights and other information about personal processing data are detailed in the Controller’s Personal Data Processing Policy available on the Controller’s website, which the Controller follows.

Right to object

You have the right to object to the processing of your personal data if the Controller processes it for direct marketing purposes. You must submit your objection to the Controller. Suppose you object to the processing for direct marketing purposes. In that case, the Controller shall not further process the personal data to that extent unless it demonstrates compelling legitimate grounds for the processing which override your interests or rights and freedoms or for the establishment, exercise, or defense of legal claims. For more information on this right, see in particular Article 21 GDPR.

Right to lodge a complaint with the supervisory authority

You can complain about processing your personal data or the Controller’s failure to comply with its obligations under the GDPR with a supervisory authority at any time. The supervisory authority in the Czech Republic is the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7, www.uoou.cz.

Obligation to provide personal data. Consequences of failure to provide personal data

You provide your personal data completely voluntarily. You are under no obligation to provide it. If you do not provide your personal data, you are not subject to any sanctions. However, suppose you do not provide personal data to the Controller. In that case, the Controller will not be able to send you the individual commercial communications to which you subscribe above (e.g., without your email address, the Controller will not be able to send you company news and new products). However, it is entirely at your discretion whether or not you wish to receive these communications.