Privacy Policy
This Privacy Policy applies to citizens and legal permanent residents of the European Economic Area.
Basic Information
Company Tastimax s.r.o., Reg. No. 24122335, legal address: Jablonecká 717/5, 19000 Prague, Czech Republic, as a Data Controller, collects and processes personal data. This Privacy Policy explains how we use the personal data that we collect when you use our website www.tastimax.eu.
Consent
By using our website, you hereby consent to our Privacy Policy and agree to the terms and conditions that are stated here.
Collected Information
We may ask our potential and current clients and customers, and further - collect the following information about them:
Identification and contact information, especially name, surname, title, date of birth, permanent residence or contact address, e-mail and telephone number, birth number, citizenship, marital status, bank account details, type and number of ID document and its validity, copy of ID document, information whether you are or you are not a politically exposed person or a person against whom the Czech Republic applies international sanctions; in the case of natural persons engaged in business – the business name, place of business and company register number.
Children's Information
We do not knowingly collect any Personal Identifiable Information of children under the age of 16.
Automatically Collected Personal Information
When you visit our website, we neither collect and information about you nor trace your behaviour on our website.
Sources and Categories of Processed Personal Information
1. We process the personal data that you provide us with, or the personal data which we obtain in course of business communication and/or fulfilling orders.
2. We process your identification and contact data and other data that are necessary for the purposes of business interaction and order fulfillment.
The Purpose of Personal Data Processing
We use the information that you provide us for the purposes of:
• communication between the clients, suppliers, subcontractors, intermediaries, etc.,
• preparation and conclusion of business and contractual documentation,
• verifying whether you are or you are not a politically exposed person or a person against whom the Czech Republic applies international sanctions; we process this information to fulfill the obligation of Act 253/2008 Coll. on certain measures against money laundering and terrorist financing,
• sending commercial messages (newsletter). You may refuse the processing of your personal data for the purpose of sending newsletters at any time and this will not affect our other mutual relations. Just send us an email to the address from which you received our commercial message,
• exercising our rights and legal claims (e.g. in the event that you have an outstanding debts against us),
• inspections carried out by public authorities and for other similarly serious reasons.
Legality of Data Processing
The above mentioned personal data is processed on the basis of the General Data Protection Regulation (GDPR) – a EU regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on data protection and privace in European Union, as this is necessary for the performance of a contract to which the data subject (client) is a party, or for measures taken before the contract conclusion (e.g. Intermediation Contract, Reservation Contract, Purchase Contract, etc.), to fulfill the legal obligations of the Data Controller, for the legitimate interests of the Data Controlelr or third parties (e.g. sending commercial messages).
Transfer of Personal Data to Third Parties
We may pass on your personal data to our subcontractors for the above mentioned purposes so that they may process them for us. Your personal data may be passed to the following third parties:
• delivery and logistics service companies
• external lawyers and law offices
• external accountants and accounating companies
• processors who provide server, web, cloud or IT services, or to their business partners
• tax advisors
• experts who can contrubite to the estimation of business opportunities and deal details
• financial institutions (we file tax declarations) and banks
• state and other bodies to perform the legal obligations
• other subcontractors and third parties involved in the business communication.
Your personal data will not be provided to third parties from outside the EU and the EEA. In the event that personal data is transferred to countries outside the European Economic Area or to countries that do not have an adequate level of protection under applicable laws, in particular GDPR and other EU and national data protection rules, such transfer will be subject to an exception relating to the particular case, or the Data Controller will ensure that adequate safeguards are provided to ensure the protection of personal data.
Data Retention Period
We will process your data for the entire duration of the contractual relationship, the provision of services or for the time necessary to fulfill archiving obligations under applicable law, such as the Accounting Act, the Archives and Records Act or the Value Added Tax Act, but no longer than 10 years from the termination of the provision of services or contractual performance.
If you subscribe to commercial communications (newsletters), we will process your personal data for a period of 10 years, or until you express your disagreement with their further sending. You can send this disagreement to the e-mail address info@tastimax.eu.
Personal data that is necessary for the proper provision of services, respectively for fulfilling all our obligations arising from the contract or from generally binding legal regulations, we must process, regardless of your consent, for the period specified by the relevant legal regulations or in accordance with them.
Cookies
Cookies are small text file that a website that you visit sends to the browser on your computer or mobile phone and stores on the hard drive of your device. Cookies allow to analyze how you use our website and enable us to provide a range of relevant services.
Our website uses only necessary technical cookies which ensure that certain parts of the website work properly and that your user preferences remain known. We may place these cookies without your consent.
Your Data Protection Rights
Every user is entitled to the following:
• The right to get information – You have the right to obtain information about the purpose of data processing, data retention period, categories of processed data and categories of recipients of processed data.
• The right to access – You have the right to request copies of your personal data.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information that you believe is incomplete.
• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
• The right to know whether automated decision-making is performed, including profiling.
• The right to complain about the processing of personal data.
You can file a complaint with the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).
Principles of Personal Data Processing
We always process all personal data legally, correctly, fairly, transparently and responsibly.
The data processing is purposefully limited, which means that we process personal data only for certain, explicit and legitimate purposes.
As part of data collection minimization, we process adequate, relevant and limited personal data, to the extent necessary for the purpose for which the personal data is processed.
We process accurate and updated personal data. If personal data is inaccurate, we will arrange for its correction or deletion, for which we may request your necessary cooperation.
We ensure that all our IT systems and other repositories where we store personal data are protected against access by unauthorized persons (e.g. using firewalls, anti-virus protection, strict password requirements, system logins, etc.).
We ensure that all documents containing personal data are protected against access by unauthorized persons. These documents are stored in lockable cabinets, lockable offices or are secured by other similar security means (security alarm, safe deposit boxes, etc.).
All communication between your device and our web servers is encrypted. The credentials are password protected and all your data is stored only on servers in secure data centers with limited and controlled access.
We strive to use security measures that provide sufficient protection of the personal data with respect to the current state of technology. The security measures taken are then regularly updated.
In case of questions, feel free to contact us at info@tastimax.eu
This Privacy Policy is effective from 31.12.2021.
