Information on Personal Data Processing

I. Legal Framework of Processing

Personal data of customers and other persons (hereinafter referred to as “the data subject”), which are processed by the company Měšťanský pivovar Havličův Brod a.s., with registered office at Dobrovského 2027, 580 01 Havlíčkův Brod, are processed in accordance with valid legal regulations, particularly with the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data, on the free movement of such data and on superseding the directive 95/46 (EC) (General Data Protection Regulation).

 

II. Personal Data Controller

The personal data controller of the acquired personal data is the company Měšťanský pivovar Havličův Brod a.s., with registered office at Dobrovského 2027, 580 01 Havlíčkův Brod,  (hereinafter referred to as “the controller”).

 

III. Accuracy of Personal Data

The data subject is obliged to give their personal data correctly and truthfully (e.g. when registering themselves, in their user accounts, when ordering from the web shop, etc.), and is obliged to inform the controller about any change of their personal data without any delay.

 

IV. Purposes of Processing and Legal Basis of Personal Data Processing

A. The name, surname (including any additional information characterizing the person or the business establishment conducted by a natural person), title (if provided by the customer), place of residence or registered office, delivery address, company registration No., tax registration No., e-mail address of the data subject, telephone number and the purchase data are processed for the purpose of fulfilling the contract (e.g. customer identification, order confirmation, order status information, delivery of the order, issuance of a tax document). The legal basis for processing such data for the given purpose is the necessity of fulfilment of the contract, in which the data subject is a contracting party, or for the implementation of measures taken before the conclusion of the contract at the request of the data subject.

The abovementioned personal data are further processed after the fulfilment of the contract if necessary, for the fulfilment of legal obligations applied to Měšťanský pivovar Havličův Brod a.s.

B. Personal data specified under letter A., data on history of orders placed by the customer and customer´s purchases and complaints may be processed for the purpose of maintaining an internet user account of the customer. The legal basis for processing such data for the given purpose is the consent given by the customer.

C. Personal data of customers specified under A. may be processed for the purpose of direct marketing. i.e. especially sending commercial messages concerning goods and services provided by Měšťanský pivovar Havličův Brod a.s. In this case, the legal basis for processing such data for the given purpose is a legitimate interest of the company Měšťanský pivovar Havličův Brod a.s. If you participate in a competition organised by Měšťanský pivovar Havličův Brod a.s., the given data may be processed for the purpose of direct marketing on the basis of your consent.

D.  The name, surname, ID number or passport number of the data subject or other identification and contact data may be required and processed by Měšťanský pivovar Havličův Brod a.s. for the purpose of identifying a person when returning pecuniary and non-pecuniary performance due to termination of the contractual relationship (e.g. cancellation of a purchase contract due to withdrawal from the contract), when collecting a prize in a competition organised by Měšťanský pivovar Havličův Brod a.s.. or when taking delivery of goods, and related protection of the parties against taking delivery of the performance by an unauthorized person. The legal basis for processing such data for the given purpose is a legitimate interest of the controller.

E. Identification data in the form of camera recording obtained in sales and store premises of the company Měšťanský pivovar Havličův Brod a.s.  may be processed by the company Měšťanský pivovar Havličův Brod a.s.  for the purpose of protecting its property, life and health of persons. In justified reasons, these data may be handed over to authorities involved in criminal proceedings or other interested parties for the purpose of processing (e.g. insurance company). The legal basis for processing such data for the given purpose is a legitimate interest of the company Měšťanský pivovar Havličův Brod a.s.

F. When using our website www.hbrebel.eu (hereinafter referred to as „the website“), the company Měšťanský pivovar Havličův Brod a.s.  receives and records information from your browser, which may include personal data. To collect such information, we use a variety of procedures such as cookies. This information may include your IP address, unique identifier using „cookies“, information about cookies and information about whether your device has a software needed to have access to certain elements, unique identifier of the device and type of the device, domain, type of the browser, language, type of the operating system and its settings, country, time zone, previously visited websites, information about your activities on our website, such as clicks, your purchases, marked preferences, time of access, URL. We use cookies to see how our customers use the website and to understand preferences of our customers (e.g. choice of a country and language). This enables us to provide services to our customers and improve their online experience. We also use cookies to acquire summary data about web traffic and their communication, to find out about trends and to acquire statistical data with the aim of further improving our website. We basically use three categories of cookies on our website.

 

• Functional: These cookies are necessary for basic functioning of the website, and therefore they are still turned on. They include cookies which enable to remember you when browsing our website during a single visit, or if you wish, during every visit. They help create the content of the shopping cart and go through the payment process. They also help with protection and when meeting requirements of legal regulations.
• Improving performance: These cookies allow us to improve the running of our website by monitoring its use. In some cases, these cookies improve speed of response to your requirements and allow us to remember your choice selected for the site. If you reject these cookies, it may lead to inaccurate recommendations and the running of the site may slow down.
• Social media and advertising: Social media cookies offer a possibility to connect you with social networking sites and to share the content from our website. Advertising cookies (third party cookies) collect information in order to tailor better advertising to your interests, both on and outside of our website. In some cases, processing of your personal data may be a part of these cookies. Rejecting these cookies may result in showing advertisements which is not relevant to you, in impossibility to connect effectively with accounts on Facebook, Instagram or other social networking sites or/and in failure to share the content on social networking sites.

The legal basis for processing the abovementioned data for the given purpose is a consent provided by the data subject, or a legitimate interest of the controller for the purpose of a basic analysis of the number of visits of the website.

 

V.

Provision of personal data mentioned in art. IV., letters A. and F. is a contractual requirement of the company Měšťanský pivovar Havličův Brod a.s. The name, surname, address of residence, e-mail address of a buyer who is a natural person not conducting business, and the name, surname (including any additional information characterizing the person or the business establishment conducted by a natural person), address of registered office, company registration No., tax registration No. (for a VAT payer) and e-mail address of a buyer who is a natural person conducting business, these are data which must be included in a contract.  Failure to provide these data may lead to the impossibility of concluding the contract.

 

VI. Data Storage Limitation

Personal data are stored by the company Měšťanský pivovar Havličův Brod a.s. for no longer than is required by legal regulations. In case this period is not stated, they are stored for the time during which the legal reason for processing lasts or as long as is necessary for a given activity or for a defence of legal claims. 

 

VII. Categories of Recipients of Personal Data

The company Měšťanský pivovar Havličův Brod a.s. may authorise a third person as a processor to process personal data. 

• Delivery providers
  For the purpose of delivery of ordered goods, the controller shall be entitled to provide the third person ensuring the delivery with the name, surname (including any additional information characterizing the person or the business establishment conducted by a natural person), title (if provided by the customer), delivery address, telephone number of the customer to whom the goods is delivered.
  
  
• Providers of accounting, tax and legal services
  The controller shall be entitled to provide personal data to persons providing accounting, tax and legal services to the controller for the purpose of performing its legal obligations and in cases when is necessary to determine, perform or protect legal claims, whether in legal, out-of-court or administrative proceedings.
  
  
• Entities identifying customer complaints
  The controller shall be entitled to provide the entity ensuring the validity assessment of customer complaints with tax documents related to the purchased goods. These tax documents shall contain both documents required by law and customer´s e-mail address and telephone number.
  
  
• Entities providing direct marketing services
  The controller shall be entitled to provide e-mail addresses and telephone numbers for the purpose of sending commercial messages to the entities who carry out this activity for the controller as processors.
  
  
• Entities providing collection and complaints service points
  The collector shall be entitled to provide identification and contact data, data on placed orders, carried out purchases and customer complaints, bank account numbers to the entities who provide collection and complaints service points.

• Entities addressing customers for the purpose of customer reviews
  The controller shall be entitled, with a consent of the data subject, to provide information about orders and e-mail addresses to the entities who address customers in order to obtain assessment of purchased goods and provided services.  

 

VIII. Right to Access Your Personal Data

The data subject shall have the right to obtain a confirmation from the controller whether the personal data concerning them are or not processed. In case they are processed, the data subject shall have the right to gain access to these personal data.  

 

IX. Right to Rectification

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal information concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

 

X. Right to Erasure of Personal Data

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay if any of the reasons stated in the General Data Protection Regulation are applied.

 

XI. Right to Restriction of Proceeding

The data subject shall have the right to obtain from the controller restriction of processing in the cases stated in the General Data Protection Regulation.

 

XII. Right to Personal Data Portability

According to the conditions stated in the General Data Protection Regulation, the data subject shall have the right to receive the personal data concerning him or her, which he or she provided to the controller, in structured, commonly-used and machine-readable format and have the right to transmit those data to another controller without a consent from the controller to which the personal data were provided.  

 

XIII. Right to Object to Proceeding Personal Data

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to proceeding of his or personal data which are processed for a legitimate interest of the controller, including profiling based on a legitimate interest of the controller. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that is related to such direct marketing.

 

XIV. Right to Withdraw Consent to Data Processing

The data subject shall have the right to withdraw his or her consent to data processing at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The consent can be withdrawn electronically by sending a notice to the e-mail address gdpr%z%hbrebel.cz, by sending a written notice to the registered office of the controller, or to the data box of the controller (ID:cg4e6xj). The consent to sending newsletters, information about discounts and marketing events related to goods and services of the controller can be withdrawn via electronic unsubscribe system by clicking on the link “unsubscribe from the newsletter” which is sent in the electronic business message.     

 

XV. Exercise of the Rights

The data subject shall have the right to exercise the abovementioned rights electronically by sending a notice to the e-mail address gdpr%z%hbrebel.cz, by sending a written notice to the registered office of the controller, or to the data box of the controller (ID:cg4e6xj).

 

XVI. Designation of the Data Protection Officer

The controller has designated a data protection officer:  The Best Network Solution s.r.o., company registration No. 25512170, with registered office at 28. pluku 18, 101 00 Praha 10 - Vršovice

 

XVII. Right to Lodge a Complaint

The data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of his or her habitual residence, place of work or place of alleged infringement if the data subject considers that the proceeding of personal data relating to him or her infringes the General Data Protection Regulation. The supervisory authority in the Czech Republic is the Office for Personal Data Protection.