Privacy Policy
This is an English translation provided for convenience. The Czech version is legally binding.
Information on the processing and protection of your personal data
The operator of this website (hereinafter "the operator") processes the personal data of users of this website in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter "GDPR"). The data subject is every customer who is a natural person using the services of this website.
Camera information
We would like to inform you that we use a Tapo camera with its own built-in software. As the owner of Ali Kebab Ostrava Centrum, we monitor it for our own protection and the safety of our customers. In accordance with GDPR, all video data is kept secure and is not shared with anyone except state authorities on request. Recordings are kept for a maximum of 15 days. If you need more information about the camera recordings, contact us by e-mail or phone: +420 702 20 20 40
Unregistered customer
Scope of processing
When ordering services / goods offered by the operator on this website, users may be asked to provide personal data:
Required:
- First name
- Surname
- Phone
Optional:
- Notes
The operator expressly states that it does not collect or process any personal data that users do not voluntarily provide themselves. Entering any personal data on this website is entirely voluntary.
Purpose of processing
The purpose of processing personal data is to provide the service. Only the information necessary to fulfil the contract / order is processed. Without this data the contract cannot be fulfilled / the order cannot be completed. Personal data is further processed only for the operator's accounting / tax records.
Processing period
Personal data is processed for 3 years from the date of the order (limitation period).
Legal basis for processing
The data subject's personal data is processed on the basis of the data necessary to conclude the contract / fulfil the order. In this case the customer (data subject) does not need to give consent to the processing of personal data.
Registered customer
Scope of processing
When registering for services offered by the operator on this website, users may be asked to provide personal data:
Required:
- First name
- Surname
- Phone
Optional:
- Delivery address(es)
The operator expressly states that it does not collect or process any personal data that the data subject does not voluntarily provide. Entering any personal data during registration or in the service settings is entirely voluntary.
Purpose of processing
The purposes of processing personal data are:
- Registration in the user database of this website. Registration allows the data subject to edit their account, give and withdraw consents, take part in a loyalty / bonus programme and view their order history.
- Providing the service. Only the information necessary to fulfil the contract / order is processed.
- Personal data is further processed only for the operator's accounting / tax records.
- Marketing activities, if the data subject has given consent to them.
All personal data that the user (i.e. the data subject) provides to the operator will be stored in accordance with the relevant provisions of the law and appropriately protected against misuse for an indefinite period.
Processing period
Personal data is processed for as long as the user's profile is active, i.e. until consent is withdrawn, until the user deletes their profile, or until the operator does so. After the profile is deleted, the user's data will be archived in accordance with legal obligations.
Automated decision-making, including profiling
The operator may collect and analyse information about how users use this website. This information may be obtained using "cookies", small text files placed by the server on the user's device. The user may allow or block cookies in their browser settings.
Users' personal data is processed both automatically and manually and may be accessible to the operator's employees, to processors with whom the operator has a data processing agreement, to other natural persons authorised under data protection law, to persons according to the data subject's consent, and to persons authorised by law.
Legal basis for processing
The data subject's personal data is processed on the basis of the consent that the user (data subject) gives when registering on this website.
Giving consent
The user gives consent to the processing of personal data when first registering on this website.
Editing and restricting the processing of personal data
After logging in, the registered user can set the scope and other options for processing and handling their personal data in the Account Settings section.
Withdrawing consent
The user can withdraw consent after logging in to their account, in the Account Settings section.
Common provisions
Transfer to third parties
The operator of this website does not transfer users' personal data to third parties.
Transfer to third countries
The operator of this website does not transfer users' personal data to third countries.
User rights
If the data subject asks the operator of this website for information about the processing of their personal data, the operator is obliged under GDPR to provide this information without undue delay and to follow Articles 16–22 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL. Any data subject who finds or believes that the operator or a specific processor is processing their personal data in conflict with the protection of their private and personal life or in conflict with GDPR, in particular if the personal data is inaccurate with regard to the purpose of processing, may ask the operator or the specific processor for an explanation and demand that the situation be remedied. This may include blocking, correcting, completing or deleting the personal data.
The user (data subject) has the right to:
- withdraw their consent at any time;
- request from the controller access to their personal data (Art. 15), its correction (Art. 16) or erasure (Art. 17), restriction of processing (Art. 18), object to processing (Art. 21), and the right to data portability (Art. 20);
- withdraw consent at any time where processing is based on Art. 6(1)(a) or Art. 9(2)(a), without affecting the lawfulness of processing based on consent given before its withdrawal;
- not be subject to any decision based solely on automated processing, including profiling;
- lodge a complaint with a supervisory authority.
Conclusion
The operator reserves the right to amend this privacy statement. It is therefore in the users' interest to check whether this statement has changed.
Deletion and anonymisation of data
After logging in, the user (data subject) can request deletion of their user account using the Cancel Account button in the Personal Settings section.
Cancelling the account means:
- Anonymisation of the processed data in orders
- Deletion of all personal data from the database
- Removal of the link to Facebook and Instagram
For more information, you can contact support at the e-mail address.
Any questions?
Don't hesitate to contact us, we'll be happy to help.