Consent to the provision of personal data

Personal data controller

The data controller is: U.S. REST AND SHOP, LLC, org. component, with registered office at Veselská 699, 199 00 Prague 9.

The processor of personal data

The processor of personal data is: U.S. REST AND SHOP, LLC, org. component, with registered office at Veselská 699, 199 00 Prague 9.
Personal data may also be processed by any employee of the controller.

1 Text of consent

By checking the box before submitting the order

in accordance with Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (" GDPR "), which entered into force on 25 May 2018,

I consent to the collection, storage and processing of my personal data provided by me to the controller.

2 What data will be processed

Name and surname, or, where applicable, business name,
residence (street, address, city, postcode, country) or registered office,
e-mail address,
telephone number,
IP address,

3 For what purposes the personal data will be processed and stored

3.1 Personal data, which are:

name and surname, or business name,
the place of residence (street, street number, city, postcode, country) or registered office,
e-mail address,
telephone number,
IP address,
will be collected, stored and processed by the controller for the following purposes:
for sending commercial and marketing offers and notifications of the controller,
to provide it to third parties, such as Heureka, Goods, Google, to be used by them for the following purposes:
Sending a satisfaction questionnaire.

4 Period for which personal data will be stored

The controller will keep the personal data for as long as necessary. The longest the controller will keep personal data is 24 months.

5 How will the personal data be processed and stored?

Personal data will be processed:
by machine (automated) through computers and computer programs;

6 Data subject rights, information and access to personal data

As a data subject, I have the right to access, rectify or erase my personal data or restrict processing. I have the right to request information on what personal data is being processed and the right to request an explanation regarding the processing of personal data.
I also have the right to object to the processing, as well as the right to data portability (i.e. the right to obtain the personal data concerning me that I have provided to the controller in a structured, commonly used and machine-readable format, see Article 20 of the GDPR for more details).
I have the right to withdraw my consent at any time, without prejudice to the lawfulness of processing based on consent given before its withdrawal, if the processing is based on Article 6(1)(a) or Article 9(2)(a) of the GDPR. This means that I do not have such a right in particular if the processing is necessary for compliance with a legal obligation to which the controller is subject (in particular, obligations relating to LVTČ).
As a data subject, I am informed that I can withdraw my consent to the provision of data by completing the form on the website at www.kolekce-havel.cz or by sending an email to info@kolekce-havel.cz.
As a data subject, I have the right to request information about the processing of my personal data, which the controller is obliged to provide to me without undue delay. The content of the information is determined by the provisions of Article 15 of the GDPR. The controller has the right to charge a reasonable fee for providing the information, not exceeding the costs necessary to provide the information.
As a data subject, I have the right to contact the controller or the Office for Personal Data Protection in case of doubt about compliance with the obligations related to the processing of personal data.
The controller declares that the processing does not involve automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR.
The controller declares that personal data are not processed for scientific or historical research purposes or for statistical purposes.
The controller declares that it will process the personal data:
by machine (automated) means through computers and computer programs;

7 Final provisions

As the data subject, I declare that I am aware of my rights under Chapter III of the GDRP.
I declare that all data provided is accurate and true and is provided voluntarily.
The controller declares that it will collect personal data to the extent necessary for the fulfilment of the purpose and will only process it in accordance with the purpose for which it was collected.
This consent constitutes a free and informed expression of the data subject's will, the content of which is the data subject's agreement to the processing of personal data.