GDPR

Principles for the handling and protection of personal data

Content of consent to the processing of personal data

The data controller to whom you consent to the processing of your personal data is:

Boxxi food solutions s.r.o. (hereinafter also referred to as Boxxi food solutions)
Registered office: Mojmírova 130/4, Nusle, 140 00 Praha 4
ID: 09165754
Registered at the Municipal Court in Prague, insert C 331967

(hereinafter referred to as the "Administrator").

Contact details of the Administrator:
Address: Mojmírova 4, Prague 4, 140 00 Czech Republic, e-mail: info@boxxi.cz

The Administrator's obligations in the area of personal data protection are as follows:

Act No. 101/2000 of the Collection of Acts of the Czech Republic on the Protection of Personal Data and on Amendments to Certain Acts, as amended (hereinafter referred to as the "PDPA"), and
with effect from 25 May 2018, from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) - this Regulation No. 2016/679 is hereinafter referred to as the "General Data Protection Regulation" or "GDPR".
Specification of the personal data for the processing of which consent is given:

Name and surname
Date of birth
Electronic address (e-mail)
Address
Technical data - IP address, cookies
Phone
Login details
(hereinafter collectively referred to as "Personal Data").

You consent to the processing of my Personal Data as well as other data that you provide to the Administrator in the future via the web portal, e-mail or IT applications.

You consent to the processing of Personal Data by the Administrator for the purposes of

sending information and commercial communications from the Controller and marketing actions
communication within the Boxxi food solutions loyalty programme
for the purposes of marketing targeting on social media, and
Order processing
Complaint handling
Answering enquiries
You consent to the transfer of relevant personal data (name, address, specifications) from the Controller to companies providing order delivery and companies (partner operations) providing order distribution at delivery points in the regions of the Czech Republic.

You acknowledge and agree that the Controller collects the following Personal Data for the purposes set out below

For newsletter purposes - email address
For social media targeting purposes - email address
For the purpose of communication within the loyalty program - name and surname, email address, date of birth
Order processing - email address, first name, last name, address, phone number
To process a complaint - email address, phone, first and last name
Answering questions - email address
Marketing events - name, surname, phone and email address

You acknowledge that the Boxxi food solutions website also uses Google Analytics to record visitor behaviour.
You agree to be contacted by the Administrator via email.
You acknowledge that you are obliged to provide your Personal Data accurately and truthfully and that you are obliged to inform the Controller without undue delay of any change in your Personal Data processed.
You acknowledge that the Controller may delegate the processing of your Personal Data to a third party as a Processor. You also expressly agree that the Controller is entitled to transfer my Personal Data to a Processor, based on a contract between this Processor and the Controller.
The Personal Data will be processed for a period of 20 years unless I withdraw my consent to processing.
The processing of my Personal Data to which you consent:

Your Personal Data may be processed in electronic or written form at the discretion of the Controller. I consent to the inclusion of my Personal Data in the Controller's database. You are aware that the Processor has and will have access to this database for the entire Consent Period. You agree that the Controller's database containing my personal data may be located with and managed by third parties as so-called data processors.
You confirm that the Personal Data provided is accurate and that I have been advised that this is a voluntary provision of Personal Data. You declare that you have been advised that you may withdraw your consent to the processing of Personal Data in relation to the Company by notice delivered to the (email) address of the Controller.
You acknowledge that you have the following rights as a data subject:
The right of access to Personal Data. You have the right to obtain confirmation from the Data Controller as to whether or not Personal Data relating to me is being processed and, if so, the right to access that Personal Data and the following information:
the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
the intended period for which the personal data will be stored or, if this cannot be determined, the criteria used to determine that period;
the existence of the right to request from the Controller the rectification or erasure of personal data concerning me or the restriction of its processing or to object to such processing;
the right to lodge a complaint with a supervisory authority;
any available information about the source of the personal data, unless it is obtained from me.
You also have the right to request from the Controller a copy of the personal data processed, provided that the rights and freedoms of others will not be adversely affected. The Data Controller may charge a reasonable fee based on administrative costs for additional copies at my request. If you make a request in electronic form, the information will be provided in the electronic form that is commonly used, unless I request otherwise.
Right to Correction. You have the right to have the Controller correct inaccurate personal information concerning me without undue delay. Taking into account the purposes of the processing, I have the right to have incomplete personal data completed, including by providing an additional declaration.
Right to erasure (right to be forgotten). You have the right to have the Controller erase the personal data relating to you without undue delay and the Controller is obliged to erase the personal data without undue delay if one of the following reasons applies:
The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
you withdraw the consent on the basis of which the personal data was processed and there is no other legal basis for the processing;
you object to the processing of personal data for direct marketing purposes;
the personal data have been unlawfully processed;
the personal data must be erased to comply with a legal obligation under European Union or Czech law; -
personal data have been collected in connection with the offer of information society services on the basis of consent given by the child.
Right to restriction of processing. You have the right to have the Controller restrict processing in any of the following cases:
I deny the accuracy of the personal data, for the time necessary for the Controller to verify the accuracy of the personal data;
the processing is unlawful and I refuse the erasure of the personal data and request instead a restriction on its use;
The Controller no longer needs the personal data for the purposes of the processing, but I request it for the establishment, exercise or defence of legal claims.Right to portability of personal data. You have the right to obtain the personal data concerning you that I have provided to the Controller in a structured, commonly used and machine-readable format, and the right to transfer this data to another controller without hindrance from the Controller if: - the processing is based on consent to the processing of personal data or the processing of personal data for the purposes of concluding and performing a contract with me; and at the same time - the processing is carried out by automated means. In exercising your right to data portability, you have the right to have your personal data transferred by the Controller directly to another controller, if technically feasible. The right to data portability must not adversely affect the rights and freedoms of other persons.Right to object. If personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning me for such marketing, which includes profiling (i.e. any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to the data subject) insofar as it relates to such direct marketing. If you object to processing for direct marketing purposes, personal data will no longer be processed for these purposes.
The right not to be subject to automated decision-making, including profiling. You have the right not to be subject to any decision based solely on automated processing, including profiling (i.e. any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to me), which has legal effects concerning me or similarly significantly affects me. This right does not apply where the automated decision is necessary for the conclusion or performance of a contract between me and the Controller or is based on my explicit consent; however, in these cases I have the right to human intervention in the automated decision by the Controller, the right to express my views and the right to challenge the automated decision.
The right to lodge a complaint with a supervisory authority. You have the right to lodge a complaint against the processing of your personal data by the Controller with the supervisory authority, which is the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7.
The right to withdraw your consent. If the processing of your personal data is based on your consent, you have the possibility to withdraw your consent to the processing at any time by sending an electronic message to info@boxxi.cz. Withdrawal of consent does not affect the processing of personal data carried out by the Controller on the basis of another legal title, in particular for the purpose of performance of a contract, or the lawfulness of processing that was based on consent until the moment of its withdrawal
You can exercise all your rights by sending an email with a specific request to zakaznik@boxxi.cz.

You are aware that the legal basis for the processing of my personal data by the Controller and the Processor is your consent.
I am aware that providing my personal data to the Controller and giving this consent to the processing of my personal data is not an obligation on my part, i.e. it is entirely voluntary and at my discretion.

Login to your account