Effective date: January 2024
Our Commitment to GDPR
Pekařství U Lípy is committed to complying with the General Data Protection Regulation (GDPR) and ensuring that your personal data is processed lawfully, fairly, and transparently.
Data Controller
Pekařství U Lípy acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data.
Contact details:
Pekařství U Lípy
Lipová 42
110 00 Prague 1
Czech Republic
Email: [email protected]
Lawful Basis for Processing
We process personal data under the following legal bases as defined by GDPR Article 6:
- Article 6(1)(a) - Consent: When you voluntarily provide information through contact forms or subscribe to communications
- Article 6(1)(b) - Contract: When processing is necessary to fulfill an order or service agreement
- Article 6(1)(f) - Legitimate Interests: For website improvement, security, and business operations, balanced against your rights
Your Rights Under GDPR
The GDPR grants you specific rights regarding your personal data:
Right of Access (Article 15)
You have the right to obtain confirmation of whether we process your personal data and, if so, access to that data along with information about how it is used.
Right to Rectification (Article 16)
You may request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure (Article 17)
Also known as the "right to be forgotten," you may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary or you withdraw consent.
Right to Restriction (Article 18)
You may request that we limit the processing of your data in certain situations, such as when you contest accuracy or object to processing.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
Right to Object (Article 21)
You may object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent (Article 7)
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may ask for identification to verify your identity before processing your request.
Data Transfers
We primarily store and process data within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals as required by GDPR Articles 33 and 34.
Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In the Czech Republic, this is:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
Updates to This Information
We may update this GDPR information periodically. Changes will be posted on this page with an updated effective date.