Consent to the processing of personal data

1. Ingredi Europa s.r.o., Krajánkova 3176/2, Záběhlice, 141 00 Praha 4, VAT No.: CZ28544668, ID No.: 28544668 as the operator of the online store www.ingredieuropa.com and therefore the controller of the personal data provided by the customer, undertakes to process these personal data in accordance with the law, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.
2. Ingredi Europa s.r.o. processes in particular the following personal data in the operation of the online store www.ingredieuropa.com.
3. The personal data is processed on the legal basis of the fulfilment of Ingredi Europa s.r.o.'s contractual obligations towards its customers and on the legal basis of the protection of Ingredi Europa s.r.o.'s legitimate interests.
4. The recipients of personal data may be:
   1. shipping service for the delivery of ordered goods;
   2. public authorities, if provided for by law;
   3. providers of external services, in particular tax and legal advice;
   4. operators of selected direct marketing tools.
5. Ingredi Europa s.r.o. processes only the personal data strictly necessary to fulfil the purposes for which it is processed, i.e. to fulfil its contractual obligations (in particular the delivery of goods) and to defend its legitimate interests, including direct marketing.
6. The processing of personal data is carried out by the administrator, however, the following processors may also process personal data for the administrator:
   1. KomTeSa spol. s. r.o., Masarykova 2853, 580 01 Havlíčkův Brod
7. The personal data will be processed for the time necessary to fulfil contractual obligations and protect legitimate interests and after its termination will be handled in accordance with the applicable legal regulation, Act No. 499/2004 Coll. (Act on Archives and Records Management and on Amendments to Certain Acts) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
8. In particular, the customer has the following rights in relation to his/her personal data:
9. The right of access to personal data means that the customer has the right to obtain information from the controller as to whether the controller processes his/her personal data and, if so, which data are processed and how they are processed. The customer also has the right to have inaccurate personal data concerning him corrected by the controller without undue delay at his request. The customer has the right to complete incomplete personal data at any time. This right can be exercised in particular via the customer account on the online store website www.ingredieuropa.com.
10. The right to erasure of personal data represents, in other words, the obligation of the controller to erase the personal data it processes about the customer if certain conditions are met and the customer requests it.
11. The customer has the right to have the controller restrict the processing of their personal data in certain cases. The customer has the right to object at any time to processing which is based on the legitimate interests of the controller, a third party or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
12. The right to data portability gives the customer the possibility to obtain the personal data he has provided to the controller in a common and machine-readable format. He may subsequently transmit this data to another controller or, if technically possible, request that the controllers transmit it between themselves.
13. The right to withdraw consent to the processing of personal data at any time does not apply, as the customer's personal data is processed for the performance of a contract concluded with the customer, not on the basis of consent to processing.
14. If the customer is in any way dissatisfied with the processing of his/her personal data by the controller, he/she may lodge a complaint directly with the controller or contact the Data Protection Authority.

Declaration of the administrator

The administrator declares that it will collect personal data to the extent necessary to fulfil the stated purpose and will process it only in accordance with the purpose for which it was collected. Employees of the controller or other natural persons who process personal data on the basis of a contract with the controller and other persons are obliged to maintain confidentiality of personal data, even after termination of employment or work.