Data Protection Consent
Personal data controller
The personal data controller is: Poppy Beans sro, with its registered office at Kigginsova 1493 / 10a.
Personal data processor
The processor of personal data is: Poppy Beans sro, with its registered office at Kigginsova 1493 / 10a.
Any employee of the administrator is also entitled to process personal data.
1. Consent text
Check the box before sending the order
in accordance with Article 6 (1) (a). (a) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter " GDPR Regulation ”), which entered into force on 25 May 2018,
I agree to the collection, storage and processing of my personal data by me provided to the administrator.
2. What data will be processed
Name and surname, or business name,
residence (street, number / number, city, postal code, state) or registered office,
date of birth,
email address,
phone number,
bank account number,
IP address ,
3. For what purposes will personal data be processed and stored
<ு Personal data, which are:
name and surname, or business name ,
place of residence (street, no. / no. o, city, postal code, state) or registered office,
e-mail address,
telephone number,
bank account number,
IP address,
will be collected, stored, and processed by the administrator for the following purposes:
for sending business and marketing offers and administrator notifications,
for providing to third parties, which are Zásilkovna sro Lihovarská 1060/12190 00 Prague 9, for these persons to use them for the following purposes:
Execution of your order and exercise of rights and obligations arising from the contractual relationship between you and the administrator; when ordering, personal data are required, which are necessary for successful processing of the order (name and address, contact), the provision of personal data is a necessary requirement for concluding and fulfilling the contract, without providing personal data it is not possible to conclude the contract or perform it. / p>
4. Period of retention of personal data
The controller will retain personal data for as long as is strictly necessary. The controller will keep personal data for a maximum of 12 months.
5. How will personal data be processed and stored?
Personal data will be processed:
by machine (automated) through computers and computer programs;
6. Data subject's rights, information and access to personal data
As a data subject, I have the right to access to my personal data , the right to correct or delete it , or processing restrictions . I have the right to request information on what personal data is being processed and I have the right to request an explanation regarding the processing of personal data .
I also have the right to object to processing , as well as the rights to data portability (ie the right to obtain personal data concerning me, which I have provided to the controller, in a structured, commonly used and machine-readable format, see below. Article 20 of the GDPR Regulation).
I have the right to revoke the consent at any time , without prejudice to the lawfulness of the processing based on the consent given before its revocation, if the processing is based on Article 6 paragraph 1 (a) (a) or Article 9 (2) (a) (a) the GDPR Regulation. This means that I do not have such a right, in particular where the processing is necessary to fulfill a legal obligation that applies to the controller (in particular obligations relating to LVTČ).
As a data subject, I am informed that the consent I can revoke the provision of data by filling out the form on the website at https://poppybeans.cz/pages/kontakt or by sending an e-mail to prazirna@poppybeans.cz.
As a data subject, I have the right to request information on the processing of my personal data, and the administrator is obliged to provide this information to me without undue delay. The content of the information is determined by the provisions of Article 15 of the GDPR Regulation. The controller has the right to demand a reasonable payment for the provision of information, not exceeding the costs necessary to provide the information.
As a data subject, I have the right to contact the controller or the Office for Personal Data Protection in case of doubts about compliance with obligations related to personal data processing .
The administrator declares that there is no automated decision-making in the processing, including profiling , referred to in Article 22 (1) and (4) of the GDPR. </p>
The controller declares that personal data are not processed for the purposes of scientific or historical research or for statistical purposes.
The administrator declares that it will process personal data:
by machine (automated) via computers and computer programs;
7. Final provisions
As a data subject, I declare that I am aware of my rights under Chapter III of the GDRP Regulation.
I declare that all information provided is accurate and true and is provided voluntarily .
The controller declares that it will collect personal data to the extent necessary to fulfill the purpose and will process them only in accordance with the purpose for which they were collected.
This consent is free and informed expression of the will of the data subject, the content of which is the data subject's consent to the processing of personal data.