Terms and conditions of personal data processing
Khomfi restaurant s.r.o., with registered office at Vítkova 202/18, Karlín, 186 00 Praha 8, ID No.: 29151686, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 204445 ('Khomfi'), hereby provides information on the manner and scope of processing of personal data, including the rights related to the processing of personal data.
The protection of privacy and the processing of personal data is a priority for Khomfi and the processing of personal data is considered strictly confidential and personal data is handled in accordance with applicable data protection legislation, in particular the EU General Data Protection Regulation 2016/679 (hereinafter referred to as 'GDPR').
Khomfi, as a data controller, collects, stores and uses (and otherwise processes) personal data in connection with its business activities (the individual purposes for which personal data is processed are set out in more detail below).
I. Reason and purpose for processing personal data
The lawful reason for processing personal data is:
- performance of the contract between you and the controller pursuant to Article 6(1)(b) GDPR,
- the legitimate interest of the controller in providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(f) GDPR,
- Your consent to processing for the purpose of providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(a) GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., on certain information society services in the absence of an order for goods or services.
The purpose of the processing of personal data is:
- the processing of your order and the exercise of the rights and obligations arising from the contractual relationship between you and the controller; when placing an order, personal data are required which are necessary for the successful processing of the order (name, contact, address), the provision of personal data is a necessary requirement for the conclusion and performance of the contract, without the provision of personal data it is not possible to conclude the contract or its performance by the controller,
- sending commercial communications and other marketing activities
Automatic individual decision-making within the meaning of Article 22 of the GDPR is carried out by the controller. You have given your explicit consent to such processing.
II. Personal data processed
Khomfi is entitled to process the following personal data according to the purpose of processing:
| Data subjects' data | Purposes of processing: |
|---|---|
| Name, surname | Performance of a contractual relationship, Legitimate interest of the controller, Sending of commercial communications (if the data subject has given consent). |
| Address | Performance of a contractual relationship, Legitimate interest of the controller, Sending of commercial communications (if the data subject has given consent). |
| Performance of the contractual relationship, Sending of commercial communications (if the data subject has given consent). | |
| Telephone number | Performance of the contractual relationship, Sending of commercial communications (if the data subject has given consent). |
III. Recipients of personal data
Personal data are only disclosed to the persons specified below, and only to the extent strictly necessary for the fulfilment of the individual purposes of the processing, or on the basis of consent to the processing of personal data.
The recipients of the personal data are:
- authorised employees of Khomfi,
- persons involved in the delivery of goods / services / execution of payments under the contract,
- persons providing marketing services
Khomfi does not intend to transfer personal data to a third country (non-EU country) or an international organisation. The recipients of personal data in third countries are mailing service providers / cloud service providers.
IV. Retention period of personal data
Khomfi processes personal data for the period necessary to ensure all rights and obligations arising from the relevant contractual relationship and for the period for which Khomfi, as a data controller, is obliged to retain personal data under generally binding legal regulations or for the period for which we have been granted consent to process the data.
Khomfi processes personal data according to the purpose of processing for the following period:
| Purpose of processing | Retention period |
|---|---|
| Performance of the contractual relationship | For the duration of the contractual relationship and for a period of 15 years after the termination of the contractual relationship. |
| Sending of commercial communications | For the period of consent to the sending of commercial communications, or until the consent to processing is withdrawn, or in accordance with applicable legislation. |
| Performance of the contractual relationship, Sending of commercial communications (if the data subject has given consent). | |
| Telephone number | Performance of the contractual relationship, Sending of commercial communications (if the data subject has given consent). |
V. Processing of personal data on the basis of consent
The customer may give consent via the form on the website www.khomfi.cz or otherwise in writing to the processing of personal data in the scope of name, surname, address and e-mail for the purpose of offering trade and services of third parties via electronic means (SMS, telephone) or postal service providers. The provision of consent is voluntary and can be revoked in writing at any time. Consent is granted until revoked. Failure to provide consent shall not affect the performance of the contract.
VI. Rights of data subjects
The customer, as a data subject, has rights in relation to the processing of personal data that arise from legal regulations and which he can exercise at any time. This is a right
- to access personal data,
- to rectify inaccurate or incomplete personal data,
- to erasure of personal data if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed or if it is established that they have been unlawfully processed,
- to restrict the processing of personal data,
- for data portability,
- the right to object, after which the processing of personal data shall be terminated unless it is established that there are compelling legitimate grounds for the processing which override the interests or rights and freedoms of the data subject, in particular where the ground is the possible exercise of legal claims; and
- the right to have recourse to the Data Protection Authority (www.uoou.cz)
Right of access to personal data: if you want to know whether Khomfi is processing personal data, you have the right to obtain information about whether your personal data is being processed and, if so, you also have the right to access your personal data. In the event of unreasonable, inappropriate or repeated requests, Khomfi will be entitled to charge a reasonable fee for a copy of the personal data provided or to refuse the request (the foregoing applies mutatis mutandis to the exercise of the rights set out below).
Right to rectification of inaccurate and completion of incomplete personal data: if you feel that Khomfi is processing inaccurate or incomplete personal data about you, you have the right to request its rectification and completion. Khomfi will correct or complete the data without undue delay, but always taking into account technical possibilities.
Right to erasure: in the event that you request erasure, Khomfi will erase your personal data if (i) it is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) the processing is unlawful, (iii) you object to the processing and there are no overriding legitimate grounds for processing your personal data, or (iv) Khomfi is required by law to process it.
Right to restriction of processing of personal data: in the event that you request restriction of processing, Khomfi will make the personal data inaccessible, temporarily delete or store it, or carry out other processing operations necessary for the proper exercise of the asserted right;
Right to data portability: if you want Khomfi to transfer personal data to a third party, you can exercise your right to data portability. In the event that the exercise of this right adversely affects the rights and freedoms of others, Khomfi will not be able to comply with your request.
Right to object: the right to object to the processing of personal data processed for the performance of a task carried out in the public interest or in the exercise of official authority or for the protection of the legitimate interests of Khomfi. If Khomfi does not demonstrate that there is a compelling legitimate reason for the processing which overrides the interests or rights and freedoms of the customer, it shall terminate the processing without undue delay on the basis of the objection.
In the event of exercising rights, the customer may address his/her request in writing to the address of Khomfi's registered office or by email to khomfipraha@gmail.com. Khomfi reserves the right to reasonably verify the identity of the data subject exercising the aforementioned rights.
VII. Final Provisions
- By submitting an order from the online order/contact form, you confirm that you are aware of the privacy policy and that you accept it in its entirety.
- The controller is entitled to change these terms and conditions. It will publish the new version of the privacy policy on its website.
- The terms and conditions take effect on 1 September 2023