Privacy Policy.

Personal Data Processing Declaration (GDPR)

Information on the processing of personal data according to the General Data Protection Regulation (GDPR) and Act No. 110/2019 Coll., on the processing of personal data.

Personal data controller

EXPRESS DELI s.r.o.

To exercise your rights in the area of personal data, you can contact us by email at the address listed in the Contacts section, by post to the address above.

Purposes and legal basis for processing personal data

We process personal data to ensure the functionality of the website. This is due to the legitimate interest of the controller.

Legitimate interests of the controller

Our legitimate interests include:

• Provision of internet content
• Creation and processing of forms and contracts

Categories of personal data

In most cases, we process personal data that you have provided to us as part of a form or contract. We may also process data from publicly available records and sources.

Rights of data subjects and obligations of the controller

As a data subject, you have the following rights in relation to the processing of personal data:

1. If you have given your consent to the processing of your personal data, you have the right to withdraw this consent in accordance with Article 7(3) of the GDPR;
2. Right to information within the meaning of Articles 13-14 GDPR;
3. Right of access to personal data within the meaning of Article 15 GDPR;
4. Right to rectification within the meaning of Article 16 GDPR;
5. Right to erasure within the meaning of Article 17 GDPR;
6. Right to restriction of processing within the meaning of Article 18 GDPR;
7. The right to data portability within the meaning of Article 20 GDPR;
8. Right to object within the meaning of Article 21 GDPR;
9. The right not to be subject to any decision based solely on automated processing, including profiling within the meaning of Article 22 of the GDPR.

You have the right to access your personal data. This means that, upon request, you have the right to obtain information (confirmation) from us as to whether or not your personal data is being processed and, if it is, you have the right to obtain that personal data and the following information:

• processing purposes,
• the categories of personal data concerned,
• the recipients or categories of recipients to whom the personal data have been or will be disclosed,
• the intended period for which the personal data will be stored,
• all available information about the source of the personal data, unless it is obtained from the data subject,

If you believe that we are processing inaccurate data, you can exercise your right to rectification. If you notify us that you require correction of your personal data, we are obliged to deal with your request.

The right to erasure is, in other words, our obligation to destroy your personal data if at least one condition is met:

• the personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
• you withdraw your consent and there is no other legal basis for the processing,
• you object to the processing and there are no overriding legitimate grounds for the processing,
• personal data have been unlawfully processed,
• personal data must be erased to comply with a legal obligation,
• the personal data were collected in connection with the offer of information society services pursuant to Article 8(1) of the General Regulation.

The right to erasure is therefore only exercised in the listed points, i.e. when the given circumstance occurs.

The right to erasure is not an absolute right that gives you the possibility to request the erasure of your personal data at any time and in any situation. For example, it is not possible under this right to request the destruction of all personal data, as we are subject to obligations to continue to retain certain personal data.

You have the right to restrict the processing of personal data if:

• you deny the accuracy of the personal data for the time necessary for us to verify the accuracy of the personal data,
• the processing is unlawful and you refuse the erasure of the personal data and instead request a restriction on its use,
• we no longer need your personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims,
• you intend to exercise your right to object to the processing of personal data.
• The essence of the right of portability (this right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller) is the possibility, under certain conditions, to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format and the right to transmit this data to another controller where this is technically feasible.

Common conditions for the application of the right to portability:

• the processing must be based on consent to processing or a contract,
• processing is carried out automatically.
• The exercise of the right of portability shall not adversely affect the rights and freedoms of other persons.

If the processing of personal data is based on consent, you have the right to withdraw this consent.

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. The supervisory authority is the Office for Personal Data Protection (ÚOOÚ) - www.uoou.cz, Pplk. Sochora 27, 170 00 Prague 7. In the event of an interference with your public subjective rights, you can also apply to the court.