Personal Data Processing Policy (GDPR)

author: Redaction photo: Visitchef.com

If you are our customer, newsletter subscriber, or website visitor, you are entrusting us with your personal data. We are responsible for its protection and security. Please familiarize yourself with the data protection policies and the rights you have in relation to GDPR (General Data Protection Regulation).

Who is the data controller?

We are Visitchef s. r. o., based in Prague, Na Florenci 2116/15, 110 00 Prague 1 - Nové Město, Czech Republic, ID: 09051163, which operates the website www.visitchef.com. We process your personal data as a controller, i.e., we determine how the personal data will be processed, for what purpose, for how long, and we select any other processors who will assist us with the processing.

Contact details

If you wish to contact us during the course of processing, you can reach us by email at: This email address is being protected from spambots. You need JavaScript enabled to view it.

We declare

We declare that, as the controller of your personal data, we comply with all legal obligations required by applicable legislation, in particular the Data Protection Act and the GDPR, and therefore that:

  • we will only process your personal data on the basis of a valid legal ground, in particular a legitimate interest, the performance of a contract, a legal obligation, or consent,
  • we comply with the information obligation under Article 13 of the GDPR before we start processing personal data,
  • we enable and support you in exercising and fulfilling your rights under the Data Protection Act and the GDPR.

Scope of personal data and purposes of processing

We process personal data that you entrust to us for the following reasons (to fulfill these purposes):

  • Provision of services, performance of a contract
    We need your personal data in the following scope: e-mail, name and surname, telephone number for the performance of the contract (e.g., sending electronic tickets, sending discount coupons, delivery of goods and services, etc.).
  • Bookkeeping
    If you are a customer, we absolutely need your personal data (billing data) to comply with the legal obligation to issue and record tax documents.
  • Marketing - sending newsletters
    We use your personal data (email and name), gender, what you click on in the email, and when you open it most often for direct marketing purposes - sending you commercial communications. If you are a customer, we do this out of legitimate interest, as we reasonably expect you to be interested in our newsletter, for a period of 5 years from your last order or until you unsubscribe.
    If you are not our customer, we only send you newsletters on the basis of your consent, for a period of 5 years from the date of issue or until you unsubscribe. In either case, you can withdraw this consent by using the unsubscribe link in any email sent to you.
  • Advanced consent-based marketing
    Only on the basis of your consent, we may also send you inspirational offers from third parties or use your email address for e.g., remarketing and targeting of Facebook advertising, for a period of 5 years from the date of consent or until you unsubscribe. This can, of course, be revoked at any time via our contact details.
  • Photographic documentation, references, live events, workshops
    We can only use your photographs, references, feedback, etc., on the basis of your consent until you withdraw your consent.

We retain your personal data for the duration of limitation periods unless the law provides for a longer period to retain it or we have specified otherwise in specific cases.

Cookies

When you browse our website, we record your IP address, how long you stay on the site, and which page you come from. We see the use of cookies to measure website traffic and to personalize the display of the website as a legitimate interest of our administrator, as we believe that this enables us to offer you an even better service.

Cookies for advertising targeting will only be processed on the basis of your consent.

Our website can also be browsed in a mode that does not allow the collection of personal data. You can disable the use of cookies on your computer.

Security and data protection

We protect personal data as far as possible by using modern technologies that are in line with the state of the art. We protect it as if it were our own. We have adopted and maintain all possible (currently known) technical and organizational measures to prevent the misuse, damage, or destruction of your personal data.

Transfer of personal data to third parties

Our employees and associates have access to your personal data. For specific processing operations that we are unable to provide ourselves, we use the services and applications of processors who can protect the data even better than we can and who specialize in that processing. When selecting a processor, we place at least the same demands on the security and quality of processing as we do.

Transfer of data outside the European Union

We only process data in the European Union or in countries that provide an adequate level of protection based on a decision of the European Commission.

Your rights in relation to data protection

You have a number of rights in relation to data protection. If you wish to exercise any of these rights, please contact us by email: This email address is being protected from spambots. You need JavaScript enabled to view it.

You have the right to information, which is already fulfilled by this information page with the personal data processing policy.

Thanks to the right of access, you can challenge us at any time, and we will document within 14 days what personal data we are processing and why.

If something changes or you find your personal data outdated or incomplete, you have the right to have your personal data completed and amended.

You can exercise your right to restrict processing if you believe that we are processing your inaccurate data if you believe that we are processing it unlawfully but do not want to delete all your data, or if you have objected to the processing.

You can limit the scope of the personal data or the purposes of the processing. For example, by unsubscribing from the newsletter, you limit the purpose of processing for sending commercial communications.

Right to data portability

If you would like to take your personal data and transfer it to someone else, we will follow the same procedure as when you exercise your right of access - the only difference is that we will supply the information to you in machine-readable form. Here we need at least 30 days.

Right to erasure (to be forgotten)

Your next right is the right to erasure (to be forgotten). We don't want to forget you, but if you wish, you have the right to do so. In this case, we will delete all your personal data from our system and from the system of all sub-processors and backups. We need 30 days to secure the right to erasure.

In some cases, we are bound by a legal obligation and, for example, we must keep records of tax documents issued for a period of time specified by law. In this case, we will therefore delete all such personal data that is not bound by another law. We will inform you by e-mail when the deletion is completed.

Complaint to the Data Protection Authority

If you feel that we are not treating your data in accordance with the law, you have the right to contact the Data Protection Authority at any time with your complaint. We would be very pleased if you would first inform us of this suspicion so that we can do something about it and correct any wrongdoing.

Unsubscribing from newsletters and commercial communications

We send you emails with inspiration, articles, or products and services if you are a customer, based on our legitimate interest.

If you are not yet a customer, we only send them to you on the basis of your consent. In either case, you can stop receiving our emails by pressing the unsubscribe link in each email sent.

Confidentiality

We would like to assure you that our employees and associates who will process your personal data are obliged to maintain the confidentiality of personal data and security measures, the disclosure of which would compromise the security of your personal data. This confidentiality shall continue even after the end of the contractual relationship with us. Your personal data will not be released to any other third party without your consent.

This personal data processing policy applies from 25 May 2020