PERSONAL DATA PROCESSING POLICY

Dear Sir or Madam,

this Information describes the manner in which we proceed when processing personal data collected through the website: https://hotpeppers.cz/en/home („Website“), as well as personal data collected through electronic mail (email) or other means of electronic communication. This Information has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC („GDPR“).

 

1. Data Controller

The controller is the person who alone or jointly with others determines the purposes and decides how personal data will be processed.
The controller of your personal data is:
FUN & ENJOY Production, s.r.o.
Company ID: 274 26 459
registered office: Václavské náměstí 831/21, 110 00 Prague 1
You may contact the controller using the following contact details:
•    email: info@hotpeppers.cz
•    phone: +420 603 400 400
•    business address: Václavské náměstí 831/21, 110 00 Prague 1

 

2. What Personal Data Do We Process?

We process the following personal data of yours:
1. basic identification data – first name and surname
2. contact data – telephone number and email address (which serves as your unique identifier for us)
3. information about the services we provide to you
4. information about mutual communication – information from emails, telephone call records or contact forms
5. billing and transaction data – in particular information appearing on invoices, agreed billing terms and received payments
6. location data – addresses that you provide to us for the performance of services
7. technical data – IP addresses, information concerning the operating system and browser type and end device, visited Website pages (identified through URL addresses), and other information concerning your activity on our Website, including information recorded and stored through cookies

 

2.1. Source of Personal Data

We obtained personal data directly from you, in particular from completed forms, mutual communication or concluded contracts.
In addition, personal data may also originate from publicly available sources, registers and records, for example from the commercial or trade register.
Based on your consent, where required by applicable legal regulations, we process your personal data including IP address, information concerning the operating system and browser type and end device, and visited Website pages (identified through URL addresses).

 

3. Processing of Personal Data

3.1 Processing of Personal Data When Using the Contact Form

If you enquire about our services, we will work with your contact data that you provide to us, mainly through the enquiry form. This includes: first name and surname, email address, while personal data may also include information about the services you are interested in.

For what reason?
We use this data to contact you for further arrangements regarding the provision of the ordered service.

On what legal basis?
This is processing based on Article 6(1)(b) GDPR – ensuring the conclusion and subsequent performance of the contractual obligation between the controller and you.

How long will we process the personal data?
If we do not establish further cooperation, we will process your data for no longer than ten years from our last communication. 

 

3.2 Processing of Personal Data in the Event of a Purchase

If you make a purchase from us and/or order the provision of a service, we will work with the data you fill in. This is mainly billing data: first name, surname, address, telephone number and email address. 

For what reason?
We need to process personal data in order to be able to perform our contract – to provide you with our service. Using the contact data, we will also communicate with you regarding the status of your order, any complaints, or your questions.
We will further process personal data to fulfil our obligations arising from the law (mainly for accounting and tax purposes, or for handling complaints and others).

On what legal basis do we process personal data?
This is processing based on Article 6(1)(b) GDPR – ensuring the conclusion and subsequent performance of the contractual obligation between the controller and you.

How long will we process the personal data?
For the duration of the provision of our service and subsequently for ten years from the last provision of the service.

 

3.3 Newsletters (Commercial Communications)

If you are a purchasing customer and did not prohibit us from doing so during the purchase, we will use your email address to send our news.

On what legal basis?
This is permitted by Section 7(3) of Act No. 480/2004 Coll., on Certain Information Society Services, as amended, unless you prohibited us from doing so during the purchase.

How long will we process the personal data?
For one year from your last purchase. You may unsubscribe from the mailing list at any time via the email address: info@hotpeppers.cz.
If you are not yet our customer and you express interest in receiving our newsletter, i.e. you grant us your consent to send you our newsletter, we will use your email address to send our news.

On what legal basis?
This is processing based on Article 6(1)(a) GDPR – granting consent to the processing of your data.

 

3.4 User Account

If you wish to use a user account, you must first register on our Website. You create the user account using your email address. You will then provide us with your first name and surname, telephone number, and delivery and billing address. 

Creating a customer account is voluntary; an event reservation and/or purchase on the Website may also be made without registration.

On what legal basis?
This is processing based on Article 6(1)(a) GDPR – granting consent to the processing of your data.

How long will we process the personal data?
For one year from your last login.

Can I cancel my account?
The user account can be cancelled at any time through the user account.

 

3.5 Data Transfers

Your data remains with us. Nevertheless, certain companies or other persons work for us and gain access to the data because they help us operate the Website. This is the company EFFECTIVE ONLINE GROUP s.r.o., Company ID: 27643557, with its registered office at Ve Střešovičkách 2486/70, Břevnov, 169 00 Prague 6.

Within legal limits, we must also provide personal data to public authorities, for example tax authorities, courts, and law enforcement authorities.

We conclude agreements with all service providers to whom we transfer your personal data, under which they are subject to our instructions. 

We process personal data only within the territory of the European Union.

 

4. Your Rights in Connection with the Processing of Personal Data

In connection with the processing of your personal data, you are guaranteed the rights described in this article. You may exercise them with the controller using the above contact details, either by sending an email to the stated addresses or in writing to the company's registered office address.

The controller provides all communications and statements regarding the rights exercised by you free of charge. However, if the request is manifestly unfounded or excessive, in particular because it is repetitive, the controller is entitled to charge a reasonable fee taking into account the administrative costs associated with providing the requested information. In the case of repeated requests for copies of processed personal data, the controller reserves the right to charge a reasonable fee for administrative costs for this reason.

The controller will provide you with a statement and, where applicable, information about the measures taken as soon as possible, but no later than within one month. If necessary, and taking into account the complexity and number of requests, the controller is entitled to extend this period by two months. The controller will inform you of the extension, including the reasons for it.

 

4.1. Right to Information About the Processing of Your Personal Data (Articles 13 and 14 GDPR)

You are entitled to request information from the controller as to whether personal data is being processed or not. If personal data is being processed, you have the right to request information from the controller in particular about the identity and contact details of the controller, its representative and, where applicable, the data protection officer, the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients of the personal data, authorised controllers, a list of your rights, the possibility of contacting the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, the source of the processed personal data, and automated decision-making and profiling.

If the controller intends to further process your personal data for a purpose other than that for which it was obtained, it shall provide you, before such further processing, with information about this other purpose and other relevant information. The information provided to you when exercising this right is already contained in this document, but this does not prevent you from requesting it again.

 

4.2. Right of Access to Personal Data (Article 15 GDPR)

You are entitled to request information from the controller as to whether your personal data is being processed and, if so, you have access to information about the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients, the retention period of the personal data, information about your rights (the right to request rectification or erasure from the controller, restriction of processing, to object to such processing), the right to lodge a complaint with the Office for Personal Data Protection, information about the source of the personal data, information as to whether automated decision-making and profiling take place, and information concerning the procedure used as well as the significance and anticipated consequences of such processing for you, and information and safeguards in the event of transfers of personal data to a third country or international organisation. You have the right to obtain copies of the processed personal data. However, the right to obtain such a copy must not adversely affect the rights and freedoms of others.

 

4.3. Right to Rectification (Article 16 GDPR)

In certain situations, you generally have the right to have your personal data rectified.

 

4.4. Right to Erasure (Article 17 GDPR)

In certain specified cases, you have the right to request that the controller erase your personal data. Such cases include, for example, where the processed data is no longer necessary for the purposes mentioned above. The controller automatically erases personal data after the necessary period has expired, but you may contact the controller with your request at any time. Your request will then be subject to an individual assessment (despite your right to erasure, the controller may have an obligation or legitimate interest to retain your personal data) and you will be informed in detail about its handling.

 

4.5. Right to Restriction of Processing (Article 18 GDPR)

The controller processes your personal data only to the necessary extent. However, if you feel that the controller, for example, exceeds the purposes stated above for which it processes personal data, you may submit a request for your personal data to be processed exclusively for the most necessary legal reasons or for the personal data to be blocked. Your request will then be subject to an individual assessment and you will be informed in detail about its handling.

 

4.6. Right to Data Portability (Article 20 GDPR)

If you wish the controller to provide your personal data to another controller or another company, the controller will transfer your personal data in an appropriate format to the entity designated by you, provided that no legal or other significant obstacles prevent it from doing so.

 

4.7. Right to Object (Article 21 GDPR)

If you find, or merely believe, that the controller is processing personal data in conflict with the protection of your private and personal life or in conflict with legal regulations (provided that the personal data is processed by the controller on the basis of public interest or legitimate interest, or is processed for direct marketing purposes, including profiling, or for statistical purposes or for purposes of scientific or historical significance), you may contact the controller and request an explanation or remedy of the defective state. 

 

4.8. Right to Lodge a Complaint with the Office for Personal Data Protection (Article 77 GDPR)

You may at any time contact the supervisory authority with your suggestion or complaint regarding the processing of personal data, namely the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, website https://www.uoou.cz/.

 

4.9. Right to Withdraw Consent

You have the right to withdraw the granted consent to the processing of personal data at any time by sending the withdrawal to the controller's email address or registered office address. However, the withdrawal does not in any way affect the lawfulness of processing based on consent given before its withdrawal.

 

4.10. Right to Express Disagreement with the Processing of Personal Data

For reasons related to your particular situation in relation to the processing of your personal data on the basis of our legitimate interests, you have the right to express disagreement with the processing of personal data. As a result of this objection, we will consider whether, taking into account the exceptional nature of your situation, the protection of your interests, rights and freedoms outweighs the interests we pursue by processing personal data. If your objection proves justified and there is no other legal basis for processing this data, we will erase it.

 

5. What Else Should You Know?

Our company has not appointed a data protection officer.
Our company does not carry out decision-making based on automated processing or profiling.
If you have any questions regarding personal data, please contact us at info@hotpeppers.cz or call +420 603 400 400.

 

6. Validity and Effectiveness

This personal data processing policy is effective from 1 October 2024 and may be updated by us at any time.