Your data protection rights under EU regulation
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. It aims to give individuals control over their personal data and to simplify the regulatory environment for international business.
At Pekařství a Cukrářství, we are committed to complying with GDPR requirements and protecting your personal data.
For the purposes of the GDPR, the data controller is:
Pekařství a Cukrářství
Hlavní 127
Praha 1, 110 00
Czech Republic
Email: [email protected]
We process your personal data based on one or more of the following legal grounds:
Under the GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you and to check that we are lawfully processing it.
You have the right to request that we correct any inaccurate personal data we hold about you and to have incomplete data completed.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to request that we transfer your personal data to you or to a third party in a structured, commonly used, machine-readable format.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of your rights under the GDPR, please contact us using the information provided above. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
There is no fee required to exercise your rights. However, if your request is clearly unfounded or excessive, we may charge a reasonable fee or refuse to comply with the request.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. The retention period may vary depending on the context and our legal obligations. When personal data is no longer needed, we will securely delete or anonymize it.
We primarily store and process your personal data within the European Economic Area (EEA). If we transfer your data outside the EEA, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include encryption, access controls, and regular security assessments.
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. In the Czech Republic, the supervisory authority is:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.