1 Personal Data Administrator

1.1 The administrator of personal data COFFEE LIMIT s.r.o., ID No. 06085971, with registered office at Antala Staška 511/40, 140 00 Praha 4, Czech Republic, registered in the Commercial Register by the Municipal Court in Prague, C 275080 , (hereinafter referred to as the "Administrator"), declares that all personal data processed by the Administrator is strictly confidential. The Administrator handles them in accordance with national and European Union legislation applicable to the protection of personal data.

1.2 The Administrator collects, stores and uses your personal data within the meaning of Act No. 110/2019 Coll. on the processing of personal data (hereinafter referred to as the "Personal Data Processing Act") and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR"). The individual purposes for which the controller processes personal data are further defined as follows

1.3 The Administrator also collects such personal data via its website at http://coffeelimit.cz/ (hereinafter referred to as the "Website").

1.4 This policy is issued by the Administrator so that you are sufficiently informed about what personal data the Administrator processes about you, for what purpose, for how long, who will have access to your personal data and what your rights are. This policy applies to all personal data collected by the controller, whether collected for the purpose of fulfilling a contractual relationship, legal obligation, legitimate interest or consent.

2 Data processed

2.1 The Administrator is entitled to process the following personal data:

2.1.1 name, surname, academic title;

2.1.2 date of birth (day, month, year);

2.1.3 postal address / permanent residence;

2.1.4 e-mail address;

2.1.5 telephone number;

2.1.6 bank account.

2.2 The Administrator is authorised to process personal data for the following individual purposes:

2.2.1 the performance of a contractual relationship means: the relationship between you and the Administrator arising from an order, registration, on the basis of a concluded contract, on the basis of an application and participation in a competition, etc;

2.2.2 sending commercial communications and offering products and services means: sending commercial offers, by electronic mail (e-mail), by short text messages or by telephone call;

2.2.3 statistical purposes means: anonymised research of website traffic, monitoring of the number of page views, time spent on the website, type of device from which you access the website. We collect data in order to improve our services and offer relevant content to our clients;

2.2.4 displaying advertisements means: displaying advertisements on the website based on statistically determined customer preferences;

2.2.5 legitimate interest means: effective defence in the event of a dispute; the period of processing of personal data in this case is 4 years from the expiry of the warranty period of the goods and is extended by the period for which the dispute is pending. We want to continuously improve our services and, where appropriate, provide new and better services; we want to avoid obstructing such activities; therefore, activities that contribute to this objective are our legitimate interest. Processing for fraud prevention purposes (e.g. assessing the risk of entering into a contract), direct marketing (e.g. offering relevant services to existing customers), transfer of personal data within the group of companies for internal administrative purposes, notification of criminal offences and transmission of personal data to the competent authority, ensuring network and information security are also legitimate interests. This list is only indicative;

2.2.6 compliance with other legal obligations means: providing information to law enforcement authorities, providing information to other public authorities, etc.

2.3 We process your personal data for the period necessary to ensure all rights and obligations arising from the mutual legal transaction, that is, at least for the period of order processing, execution of the transaction, service installation, etc., as well as for the period for which the administrator is obliged to keep the personal data according to generally binding legal regulations or for the period for which you have given your consent to the administrator, if applicable. Otherwise, the processing period results from the purpose for which the personal data is processed or is determined by legal regulations.

2.4 Personal data is processed manually and automatically by the administrator. The administrator is entitled to process some information automatically, for example, to create statistical information about the traffic on its website.

3 Personal data processed on the basis of consent

3.1 Where we have obtained consent from you to process your personal data, this is for one of the following purposes:

3.1.1 invoicing, making quotations and contacting you in the event of breakdowns / cooperation consultations;

3.1.2 sending business offers to the Administrator, including promotions;

3.1.3 sending information about goods sold by the Administrator, including advertising and marketing offers.

4 Rights of the data subject

4.1 As a data subject, you have the rights set out below, which you have under the law and which you may exercise at any time. These are:

4.1.1 the right of access to personal data, under which you have the right to obtain information from the Administrator as to whether the Administrator is processing your personal data. The administrator is obliged to provide you with this information without undue delay. The content of the information is determined by the provisions of Article 15 of the GDPR. The administrator has the right to charge a reasonable fee for providing the information, not exceeding the costs necessary to provide the information;

4.1.2 the right to rectification or erasure of personal data or restriction of processing, whereby you have the right to have personal data that is inaccurate or incorrect rectified. If your personal data is no longer necessary for the purposes for which it was collected or is being processed unlawfully, you have the right to request its erasure. If you do not want to request the erasure of personal data, but only to temporarily restrict its processing, you can request the restriction of processing;

4.1.3 the right to request an explanation if you suspect that the processing of personal data by the controller is in breach of the law;

4.1.4 the right to contact the Data Protection Authority if you have doubts about compliance with the obligations related to the processing of personal data;

4.1.5 the right to data portability, i.e. the right to obtain the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format, see Article 20 GDPR for more details;

4.1.6 the right to object to the processing of personal data which is processed for the purposes of carrying out a task carried out in the public interest or in the exercise of official authority or for the purposes of protecting the legitimate interests of the controller. The controller shall terminate the processing without undue delay unless it can demonstrate that there is a legitimate interest/reason for the processing which overrides your interests, rights or freedoms;

4.1.7 the right to withdraw consent to the processing of personal data at any time if you have given consent to the administrator to process your personal data.

5 Cookies

5.1 Cookies are short text files that a website sends to your browser. They enable the website to record information about your visit, such as your chosen language and so on, so that you can have an easier and more pleasant visit to the website the following time. Cookies are important because without them, browsing the Internet would be much more difficult. Cookies enable you to make better use of our website and to adapt its content to your needs; almost every website in the world uses them. Cookies are useful because they increase the user-friendliness of a repeatedly visited website.

5.2 The following types of cookies may be used by the website administrator:

5.2.1 Session (i.e. temporary) cookies allow us to link your individual activities while you are browsing this website. These cookies are activated when you open your browser window and deactivated when you close your browser window. Session cookies are temporary and all these files are deleted when you close your browser.

5.2.2 Persistent cookies help us to identify your computer when you revisit our website. Another advantage of persistent cookies is that they allow us to tailor our website to your needs.

5.3 In accordance with the provisions of Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications, as amended, we hereby inform you that our website uses cookies for its operation, i.e. that we process your cookies, including persistent cookies.

5.4 Internet browsers usually include the management of cookies. Within the settings of your browser, you can therefore probably delete individual cookies manually, block or completely prohibit their use. For more information, please use your browser's help. If you do not allow the use of cookies, some features and pages may not work as they should.

5.5 We use cookies to personalise content and ads, provide social media features and analyse our traffic. We share information about how you use our website with our social media, advertising and analytics partners. By using the website, you consent by linking to the following services:

5.5.1 Google

5.5.2 Facebook

5.5.3 Twitter

5.5.4 Microsoft

5.6 In order to display targeted advertising within advertising and social networks on other websites, we transmit data about your behaviour on the website to these advertising and social networks; however, we do not transmit your personal identification data to them.

6 Transfers to third countries

6.1 Your personal data will not be transferred to third countries.

7 Information and questions

7.1 Further information about data protection rights and obligations can be obtained by the data subject via email at obchod@coffeelimit.cz.