GDPR

GDPR conditions

Dear website visitors,

This document contains basic information about the processing of your personal data in our company Hokami CZ sro We appreciate that you allow us to work with your personal data and we do everything to ensure that this data is protected as much as possible. We try to be as transparent as possible so that you have an overview of what we do with your data and what you have the right to in connection with the processing of your personal data.

The Memorandum of Understanding was drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC GDPR Regulation) and other legislation governing the processing of personal data.

You will find the following information in this information memorandum:

who is the controller of personal data,
what are the purposes of personal data processing,
what are the legal titles for the processing of personal data,
what are the legitimate interests for the processing of personal data,
what personal data are processed,
how long personal data will be stored,
who is the recipient of personal data,
whether personal data are transferred outside the EU,
what are your rights related to the processing of personal data,
whether there is an automated decision.

This information memorandum contains the basic information that the controller must provide to the data subject according to GDPR Regulation. The information memorandum is available on the company's website: www.hokami.cz.

If you have any questions regarding the processing of your personal data, do not hesitate to contact us at the e-mail address gdpr@hokami.cz.

INTRODUCTORY PROVISIONS

The purpose of this information memorandum is to provide Data Subjects with basic information regarding the processing of Personal Data.

For the purposes of this information memorandum:

administrator:

the administrator is the company Hokami CZ sro, with its registered office at Ampérova 464, Liberec 23, 463 12, ID number 25024981, entered in the Commercial Register kept by the Regional Court in Ústí nad Labem, file number

C12746, represented by Ing. Josef Suska (hereinafter referred to as Administrator),

data subject:

the data subject is you, ie the natural person about whom Personal Data is processed - a visitor of the website of Hokami CZ sro (hereinafter referred to as Data subject).

The Personal Data Administrator hereby informs about the manner and scope of Personal Data processing, including the scope of your rights related to the processing of Personal Data.

The manager is a catering service provider and operates the Dolicafe café for this purpose. As part of this activity, the Personal Data is processed by the Administrator:

to the extent that they were provided in connection with the order of products and / or services of the Administrator, resp. in the context of negotiations on the conclusion of a contract with the Administrator, as well as in connection with the concluded contract, and
for the purposes set out in Article 3 of this Memorandum of Understanding.

Personal data is not processed by any other entity. Only the Administrator will have access to the processed Personal Data.

PROTECTION OF PERSONAL DATA AND PROCESSING INFORMATION

Data No. 110/2019 Coll., On the processing of personal data, as amended, and other relevant legal regulations apply to Data Subjects.

The data subject acknowledges that by sending the completed contact form, the processing of Personal Data by the Administrator will begin.

If the Data Subject does not provide his / her Personal Data, it is not possible to provide him / her with the service of contacting the Administrator using the contact form on the website. In this context, personal data is necessary for the provision of a specific service or product of the Administrator.

The provision of Personal Data to the Administrator is generally a contractual and legal requirement. With regard to the provision of Personal Data for marketing purposes, which does not constitute the fulfillment of the contractual and legal obligations of the controller, the Data Subject is required to consent.

The Data Subject is obliged to provide the Administrator only with true and accurate Personal Data.

The Administrator will make every effort to prevent unauthorized processing of Personal Data.

Personal data is and will be processed in electronic form in an automated and non-automated manner.

The data subject acknowledges that cookies may be stored by the company on his device when visiting the website www.hokami.cz. Cookie information is available on the administrator's website.

INFORMATION ON INDIVIDUAL PROCESSING OF PERSONAL DATA

Website - communication

Purpose of personal data processing	handling answers to questions asked using the contact form
Legal title of personal data processing	consent given by negotiation (so-called tacit consent) - Article 6 (1) (a) of the GDPR Regulation
Description of legitimate interest	personal data are not processed on the basis of the legal title of legitimate interest (Article 6 (1) (f) of the GDPR Regulation)
Categories of personal data	identification data, contact details
Description of the category of personal data	name, e-mail, text of communication, voluntary data
Description of the special category of personal data	personal data of a special category are not processed
Deadline for deletion of personal data	within 4 years of receiving the inquiry from the web contact form possibly 5 years from the last joint communication
Personal data processors	personal data is not passed on to other processors
Recipients of personal data	personal data is not passed on to recipients
Cross - border processing of personal data	there is no transfer of personal data to third countries or international organizations

The administrator does not require voluntary information to be filled in. It is only at the discretion of the data subject whether and to what extent he / she will provide voluntary data.

By entering voluntary data, the data subject allows their processing.

The controller does not require that the text of e-mail and other communications contain any personal data of the data subject. It is only at the discretion of the data subject whether and to what extent he will provide his personal data.

By mentioning personal data in the text of e-mail and other communication, the data subject allows their processing.

The provision of Personal Data is not a legal or contractual requirement.

The data subject is not obliged to provide Personal Data.

The possible consequences of non-provision are: The data subject will not be able to be sent an answer to the raised question using the contact form.

Personal data will never be stored longer than the statutory maximum. After this period, the Personal Data will be in accordance with GDPR Regulation safely and irretrievably destroyed so that they cannot be misused.

DATA SUBJECT RIGHTS

The administrator always works with your Personal Data so that the processing takes place correctly and securely. The rights for the Data Subject are guaranteed to you and you can exercise them with the Administrator.

The Data Subject may exercise its rights:

electronically by sending a message to e-mail gdpr@hokami.cz.

Another option is to send a written request to the address: Popzor, sro, Hokami CZ 464, Liberec 23.

The statement and other information on the measures taken will be provided to the Data Subject as soon as possible, no later than one month from the submission of his request. This period may be extended by up to two months due to the complexity and number of applications. The controller will inform the Data Subject of any extension and the reasons that led to it.

Exercise of rights is provided by the Administrator free of charge.

A reasonable fee taking into account the administrative costs associated with providing the requested information may be charged if the request is manifestly unfounded or disproportionate, in particular for its recurrence.

In the event that the Data Subject believes that the Controller is processing his Personal Data that is in conflict with the protection of his private and personal life or in violation of applicable law, especially if the Personal Data is inaccurate with regard to the purpose of their processing , can:

ask the Administrator for an explanation by e-mail to gdpr@hokami.cz,
object to the processing and request an e-mail sent to gdpr@hokami.cz, in order for the Administrator to ensure the removal of such a situation (eg by blocking, making repairs, supplementing or liquidating Personal Data). The Administrator shall immediately decide on the objection and inform the Data Subject. If the Administrator does not comply with the objection, the Data Subject has the right to contact the Office for Personal Data Protection directly. This provision does not affect the data subject's right to contact the Office for Personal Data Protection directly with his / her complaint.

Right of access:

You have the right to obtain confirmation from the Administrator whether or not the Personal Data concerning you is being processed. If they are processed, you have the right to access this data and the following information (which is part of this information memorandum):

processing purposes,
categories of personal data processed,
the recipients or categories of recipients to whom the Personal Data have been or will be disclosed, in particular recipients in third countries or in international organizations,
the planned period for which the Personal Data will be stored or, if it cannot be determined, the criteria used to determine this period,
the existence of the right to request from the Administrator the correction or deletion of Personal Data concerning you, or the restriction of their processing, or to raise an objection to such processing,
the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection in the Czech Republic,
all available information about the source of Personal Data, if it is not obtained from you,
the fact that there is automated decision-making, including profiling, and, at least in these cases, meaningful information as to the procedure used, as well as the significance and expected consequences of such processing for the Data Subject.

If Personal Data is transferred to a third country or international organization, the Data Subject has the right to be informed of the appropriate safeguards that apply to the transfer.

You have the right to require the Administrator to provide you with a copy of the Personal Data being processed. The Administrator may charge a reasonable fee for additional copies upon your request, based on administrative costs. If you submit the application in electronic form, the information will be provided in electronic form, which is commonly used, unless you request otherwise. The right to obtain a copy must not adversely affect the rights and freedoms of others.

Right of correction:

You have the right to require the Administrator to correct your inaccurate Personal Data without undue delay. Taking into account the purposes of processing, you have the right to supplement incomplete Personal Data, even by providing an additional statement.

Right to delete:

You have the right to require the Administrator to delete your Personal Data without undue delay and the Administrator has the obligation to delete the Personal Data without undue delay if one of the following reasons is given:

Personal data are no longer needed for the purposes for which they were collected or otherwise processed,
you withdraw the consent and there is no other legal reason for processing,
raise objections to processing that is performed on the basis of the public interest and the exercise of public authority or the legitimate interests of the Administrator, including profiling, and there are no overriding legitimate reasons for the processing,
raise an objection to processing for direct marketing purposes,
Personal data was processed illegally,
Personal data must be deleted in order to comply with a legal obligation laid down in Union or Member State law applicable to the Administrator,
Personal data was collected in connection with the offer of information society services to the child.

After the time specified for the processing of Personal Data has elapsed, the Administrator deletes the Personal Data always and automatically. You can contact the Administrator at any time to request deletion. Upon receipt of such a request, the Administrator will assess the legitimacy of your right (the Administrator may have legal obligations or a legitimate interest in the processing of Personal Data, on the basis of which it may further process your Personal Data) and will inform you of its settlement.

Right to restrict processing:

You have the right to require the Administrator to restrict the processing of your Personal Data in any of the following cases:

you deny the accuracy of the Personal Data, for the time necessary for the Administrator to verify the accuracy of the Personal Data,
the processing is illegal and you refuse to delete the Personal Data and request instead to restrict their use,
The Administrator no longer needs Personal Data for processing purposes, but you request it for the determination, enforcement or defense of legal claims,
raise objections to processing that is performed in the public interest and in the exercise of public authority or legitimate interests by the Administrator, including profiling, until it is verified that the legitimate reasons of the Administrator outweigh your legitimate reasons.

If processing has been restricted, such Personal Data may, with the exception of its storage, be processed only with your consent or for the purpose of determining, enforcing or defending legal claims, for the protection of the rights of another natural or legal person or for reasons of overriding public interest. of a Member State.

If the restriction on the processing of your Personal Data is to be lifted, you will be informed in advance by the Administrator.

Right of portability:

You have the right to obtain Personal Data relating to you which has been provided to the Administrator in a structured, commonly used and machine-readable format, and the right to transfer such data to another administrator without obstructing the Administrator to whom the Personal Data has been provided, in if:

processing is based on consent or contract, and at the same time
processing is performed automatically.

In exercising this right, you may require the Administrator to transfer Personal Data directly from one Administrator to another administrator, if technically feasible.

This right may not be exercised if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Administrator.

Right to object:

You have the right at any time to object to the processing of your Personal Data, which is processed on the basis of the public interest and the exercise of public power or the legitimate interests of the Administrator, including profiling. The Administrator does not further process Personal Data unless it demonstrates serious legitimate reasons for the processing which prevail over your interests or rights and freedoms, or for the determination, exercise or defense of legal claims.

If Personal Data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your Personal Data for this marketing, which includes profiling as far as this direct marketing is concerned.

If your Personal Data is processed for the purposes of scientific or historical research or for statistical purposes, you have the right, for reasons relating to your specific situation, to object to the processing of your Personal Data. This does not apply if the processing is necessary for the performance of a task carried out for reasons of public interest.

According to the requirements in GDPR Regulation, this right has been explicitly mentioned and is stated clearly and separately from any other information.

The right not to be the subject of automated decision-making, including profiling:

You have the right not to be the subject of any decision based solely on automated processing, including profiling, which has legal effects for you or significantly affects you in a similar way.

The right cannot be exercised in cases where the decision is:

necessary for the conclusion or performance of the contract,
permitted by the law of the Union or of a Member State which applies to the Administrator and which also lays down appropriate measures to ensure the protection of your rights and freedoms and legitimate interests,
based on your express consent.

If the processing of Personal Data is based on a contract or express consent, the Data Controller shall take appropriate measures to protect your rights and freedoms and legitimate interests, at least the rights of human intervention by the Controller, the right to express one's opinion, the right to obtain an explanation and decision.

Right to withdraw consent:

You have the right to withdraw your consent (or tacit consent) to the processing of your Personal Data at any time. Appeals can be made by sending a revocation of consent to the following e-mail: gdpr@hokami.cz.

Right to lodge a complaint with the supervisory authority:

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of employment or the place where the alleged breach occurred, if you believe that the processing of your Personal Data is infringed. GDPR Regulation.

The supervisory authority in the Czech Republic is the Office for Personal Data Protection, which can be contacted at Lt. Col. Sochora 27, 170 00 Prague 7, telephone number +420 234 665 111 (switchboard) or e-mail posta@uoou.cz. For more information, visit https://www.uoou.cz/.

AUTOMATED DECISION - MAKING

The processing of Personal Data does not include profiling.

Personal Data Processing does not involve automated decision making.

FINAL PROVISIONS

All legal relationships arising in connection with the processing of Personal Data are governed by the laws of the Czech Republic, regardless of where the access to them was made. The Czech courts have jurisdiction to resolve any disputes arising in connection with the protection of privacy between the Data Subject and the Administrator.

Data subjects who provide their Personal Data via the contact form for the purpose of communication with the Administrator or provide consent to the processing of Personal Data do so voluntarily, on their behalf and the Administrator does not control their activities in any way.

The wording of the information memorandum may be amended or supplemented by the Administrator.

This Memorandum of Understanding is effective from 18 January 2022.