VYHLEDEJTE A HODNOŤTE

Principles of processing Personal data

1. Preliminary provisions

  1. The purpose of these Principles is the description of the rules for processing personal data by the company MauMau, s.r.o., company registration no. (IČO) 27079112, with registered office at Heřmanova 1119/9, Holešovice, 170 00 Prague 7, registered in the Commercial Register maintained at the Prague City Court, section and file no. C 94672 (hereinafter “MauMau”).

  2. MauMau operates projects concerning evaluation of restaurants, food festivals and other similar projects (e.g. Grand Restaurant, Grand Bar, Prague Food Festival, Grand Restaurant Festival, Mňam Tour and Maurer's Table; hereinafter together as “Projects”).

  3. MauMau is a personal data controller. MauMau processes personal data independently or through the services of personal data processors.

  4. Personal data shall mean any information relating to an identified or identifiable natural person (hereinafter the “data subject”); qualified as personal data by applicable legislation. Data subjects in relation to MauMau are notably its customers, persons participating in Projects, evaluators of restaurants, subscribers to information materials, main partners and employees of main partners.

  5. In things relating to personal data protection MauMau can be contacted through one of the methods stated on the web pages of individual Projects (https://www.grandrestaurant.cz/?lng=en), or through the e-mail address info@grand-restaurant.cz.

 

2. Principles of processing personal data

  1. MauMau processes personal data lawfully, fairly and in a transparent manner in relation to the data subject.

  2. MauMau collects personal data solely for specified, explicit and legitimate purposes.

  3. MauMau processes only personal data that is adequate, relevant and not excessive in relation to the purpose for which it is collected.

  4. Personal data processed by MauMau must be accurate and, where necessary, kept up to date.

  5. MauMau keeps personal data for no longer than is necessary for the purposes for which the data was collected.

  6. MauMau processes personal data in a manner that ensures appropriate security of the personal data which includes the protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

 

3. Receiving, purpose and legal basis for processing personal data

  1. MauMau receives personal data from data subjects. If personal data of the data subject is provided to MauMau by a third person, the third person represents the data subject and by providing the personal data confirms that the third person is authorized by the data subject to provide the personal data.

  2. The data subject providing the personal data to MauMau shall be responsible for the accuracy of all provided personal data.

  3. MauMau processes personal data solely on the basis of lawful grounds for processing. This will include, in particular, cases where:

    1. Processing is necessary for compliance with a legal obligation to which MauMau is subject (e.g. accounting, payroll preparation, etc.);

    2. Processing is necessary for the performance of a contract to which the data subject is party or a correspondent of a party, or in order to take steps prior to entering into a contract;

    3. Processing is necessary for the purposes of the legitimate interests pursued by MauMau or by a third party (e.g. recovery of claims);

    4. The data subject has consented to processing of his or her personal data for one or more specific purposes.

  4. The processing of personal data of clients, main partners of MauMau and their correspondents and the Projects' participants is carried out because of the necessity for the performance of the contract concluded between MauMau and the data subject, always with the aim of performing such contract. MauMau is authorised to process the personal data for the entire duration of the contract, and further for the duration of 10 years after the end of the contract term, unless a longer period is prescribed by legislation, for the purposes of archiving and legitimate interests pursued by MauMau or third parties in the scheme of restriction of processing in order for the data to be usable for the establishment, exercise or defence of legal claims.

  5. If processing of personal data is carried out on the basis of a consent, the consent is provided in the extent and for the purposes stated in this consent, in accordance with these Principles. If a consent to the processing of personal data is given while ordering services from MauMau, that is in connection with concluding a contract (see Article 3.4), refusal of consent has no influence on providing the service by MauMau. The data subject is entitled to withdraw this consent to the processing of personal data at any time, however this shall not affect the lawfulness of processing based on consent before its withdrawal. MauMau is authorised to process personal data for the entire duration of the consent, and after its withdrawal it is authorised to process the personal data only for purposes of archiving and legitimate interests pursued by MauMau or third parties in the scheme of restriction of processing in order for the data to be usable for the establishment, exercise or defence of legal claims.

 

4. Processed personal data

  1. In processing personal data of clients, evaluators of restaurants and participants of Projects, MauMau processes the following data: first name, last name, user profile login, moniker, e-mail, postal address, telephone number, IP address and bank account number.

  2. In case of evaluation of restaurants and other catering establishments MauMau also processes comments of individual evaluators which might also represent personal data.

  3. In processing personal data of main partners and their correspondents, MauMau processes the following data: first name, last name, e-mail, telephone number, personal identification number, company registration number, VAT number, postal address, identity card numbers and bank account numbers, vehicle registration numbers, and IP address.

 

5. User account

  1. The data subject can establish a so called user account through the web page of MauMau through which he or she can vote or evaluate, or order goods or services.

  2. Within the user account a private profile is completed which is only accessible to the data subject, and furthermore a public profile which contains optional personal data, disclosed at the decision of the data subject (the optional personal data includes: moniker, motto, avatar, information the data subject provides about himself or herself, information about the place of origin, activities, likes and dislikes etc.). Furthermore the public profile contains information resulting from the data subject's activities (particularly the number of comments, participation in Projects, evaluated restaurants and evaluation by other users).

  3. If a data subject completes information in the public profile, MauMau is authorised to process it in a way and for the duration stated in these Principles of processing personal data. The data subject acknowledges that information in the public profile is published when displaying the activities of the data subjects in the Projects (e.g. if the data subject evaluated a restaurant).

  4. The data subject has the right to modify or delete the personal data in the user account at any time, except for the data resulting from the data subject's activity.

 

6. Methods and means of processing personal data

  1. MauMau processes personal data predominantly in electronic form.

  2. MauMau stores personal data in its information systems, or on backup media, mainly within the territory of the European Union and in limited cases outside that territory (particularly in the case of using the so called cloud services).

  3. MauMau's information systems or backup media are located or stored under MauMau's direct control, or on premises or devices of third parties, nevertheless always under MauMau's control, and said third parties are committed to ensuring the protection of personal data in the extent laid down in legislation and in accordance with this legislation.

  4. MauMau took and documented such measures to ensure that access to personal data and measures for its processing are restricted only to authorised persons and that these authorised persons process and access only such personal data and measures for its processing which correspond to the level of their authorisation. The authorisation to access personal data is defined and controlled through access names and passwords, with encoding data transmissions through certificates.

  5. At the same time MauMau has adopted and documented such measures to prevent unauthorised reading, creating, copying, transfer, modification or deletion of records containing personal data and to enable to find who and in what way processed the personal data, or accessed measures for processing of personal data.

  6. Personal data is processed by MauMau only to a limited extent, or to the extent necessary for MauMau to comply with contractual and legislative obligations, it can be provided to third parties which carry out certain activities for MauMau as subcontractors, e.g. for marketing, distribution of packages, payment processing, accounting, tax consultancy, legal services etc. This concerns only such personal data necessary to ensure the carrying out of that activity, and relevant third persons are obligated to ensure the protection of personal data to the extent determined by legislation and in compliance with the legislation.

  7. MauMau does not provide personal data to third parties, except as provided for in Article 6.6.

  8. MauMau does not provide personal data outside of the territory of the European Union, except as indicated in Article 6.2 and with the exception of subcontractors stated in Article 6.6, if these subcontractors are established in a country where an adequate level of personal data protection is ensured based on legal provisions governing personal data protection, or subcontractors established in the United States of America who have committed to respect the principles of the “Privacy Shield” system.

 

7. Using personal data for marketing purposes

  1. MauMau is authorised to use the data subjects' personal data for the purpose of informing them about MauMau's activities and services which are the subject of the concluded contract, the performance of which relates to the processing of personal data, or to which a consent to process personal data was given, and furthermore for the dissemination of commercial communications concerning its other activities or services within the Projects. Commercial communications or other similar information concerning the Projects can contain information about main partners of MauMau relating to the Projects.

  2. MauMau is authorised to use personal data for statistical purposes and to publish these statistics.

 

8. Access logging, cookies and Links

  1. In order to ensure the functionality and safety of its web page, services or applications MauMau is authorised to process, to the extent necessary, access logs to the web page, services or applications including the IP addresses.

  2. In order to ensure the best possible functionality for users and visitors or for analyses of its web page, services or applications, MauMau is authorised to process the data of web page visitors or service and application users or can implement cookies into the visitor's web browser. If a web page visitor or a service or application user does not agree with such data processing or with the cookies implementation, he or she can refuse this process in the settings of his or her web browser by switching to a private or anonymous mode. However, the web page visitor or the service or application user takes note that the web page or service or application may not function correctly from a technical perspective in such a case.

  3. The data according to Article 8.1 and 8.2 is not kept longer than necessary to ensure the functionality of the web page, service or application.

  4. The web page, services or applications of MauMau may contain links to third parties, their web pages, services or applications. Said third parties may process the data of web page visitors or their service and application users or can implement cookies into the visitor's web browsers. Processing the personal data of web page visitors or service and application users shall be guided by the principles accepted by these third parties and the web page visitors or service and application users shall acquaint themselves with the principles before visiting the web page or using the service. MauMau is not responsible for processing personal data by these third parties.

 

9. Personal data breach

  1. MauMau shall report any personal data breach to the Office for Personal Data Protection without undue delay. MauMau is not obligated to report a personal data breach if such breach is not likely to result in putting the rights and freedoms of data subjects at risk.

  2. If it is likely that a case of personal data breach will result in a high risk for the rights and freedoms of data subjects, MauMau will report said breach to the data subject without undue delay.

 

10. Rights of the data subjects and the possibility to contact MauMau concerning the processing of personal data

  1. The data subject can contact MauMau in things concerning processing of personal data through methods stated in Article 1.5.

  2. The data subject is entitled to:

    1. Seek an explanation from MauMau and a rectification of a situation (mainly through blocking, modifying, updating or deleting personal data), if he or she determines or believes that MauMau processes his or her personal data contrary to law, particularly if the data is inaccurate with respect to the purpose of its processing; a modification or update can be made through the data subject's user profile, if the data subject has such user profile,

    2. Require from MauMau access to his or her personal data, its rectification or deletion, or restriction of processing,

    3. Object to the processing of personal data to the extent and under conditions prescribed by legislation,

    4. Exercise the right to data portability in case of automated processing of personal data, to the extent and under conditions prescribed by legislation,

    5. Lodge a complaint against processing of personal data with the supervisory authority, namely The Office for Personal Data Protection.

  3. The data subject is at any time entitled to refuse the processing of personal data according to Article 7.1 and the sending of commercial communications from MauMau, except communications relating to the performance of the contract.

 

11. Final provisions

  1. MauMau is authorised to modify the Principles of processing personal data at any time and to publish the new version on the web page of its Projects.

  2. Any appendices, reservations, restrictions or deviations from the Principles of processing personal data are excluded.

  3. These Principles of processing personal data shall become valid and come into effect on October 1, 2018.



 
Dobré jídlo je jako dobrý sex – čím více se vám ho dostává, tím více si ho žádáte.
Gael Greenová
Top
English