{"id":2671,"date":"2025-03-07T14:06:21","date_gmt":"2025-03-07T14:06:21","guid":{"rendered":"https:\/\/biscitofactory.com\/?page_id=2671"},"modified":"2025-03-07T14:11:32","modified_gmt":"2025-03-07T14:11:32","slug":"declaration-on-the-processing-of-personal-data","status":"publish","type":"page","link":"https:\/\/biscitofactory.com\/cs\/declaration-on-the-processing-of-personal-data\/","title":{"rendered":"Declaration on the processing of personal data"},"content":{"rendered":"

Declaration on the processing of personal data according to the Regulation of the European Parliament and of the Council and Council of the EU 2016\/679 (GDPR)<\/strong><\/h2>\r\n

 <\/p>\r\n

1. Personal data controller<\/strong><\/p>\r\n

breAd. & edible labels s.r.o., with its registered office at Jamnick\u00e1 66, Fr\u00fddek-M\u00edstek, 738 01, ID: 28815084, VAT: CZ28815084, registered in the Commercial Register kept by the Regional Court in Ostrava, file number C 56233 (hereinafter referred to as the controller) hereby informs you about the processing of your personal data and your rights in accordance with Article 12 of the GDPR.<\/p>\r\n

2. Scope of the processing of personal data<\/strong><\/p>\r\n

Personal data is processed to the extent that it has been provided to the controller by the data subject in connection with the establishment of a contractual or other legal relationship with the controller, or otherwise collected and processed by the controller in accordance with applicable law or to fulfil the controller\u2019s legal obligations.<\/p>\r\n

3. Sources of personal data<\/strong><\/p>\r\n

Directly from the data subjects.<\/p>\r\n

Publicly available registers, lists and records.<\/p>\r\n

4. Categories of personal data processed<\/strong><\/p>\r\n

Address and identification data that allow the data subject to be clearly and unambiguously identified (e.g. name, surname, title, possibly birth number, date of birth, permanent address, ID number, VAT number) and data that allow the data subject to be contacted (e.g. contact address, telephone number, e-mail).<\/p>\r\n

Descriptive data (e.g. bank details).<\/p>\r\n

Other data necessary for the performance of the contract.<\/p>\r\n

Data that exceeds the scope of the legislation in force and that is processed within the scope of the consent given by the data subject (processing of photographs, use of personal data for personnel management purposes, etc.).<\/p>\r\n

5. Categories of data subjects<\/strong><\/p>\r\n

Customer Administrator<\/p>\r\n

Employees of the Administrator<\/p>\r\n

Carrier<\/p>\r\n

Service provider<\/p>\r\n

Job Seeker<\/p>\r\n

6. Categories of recipients of personal data<\/strong><\/p>\r\n

Financial institutions<\/p>\r\n

Public bodies<\/p>\r\n

Government and other public authorities in the performance of their legal obligations under the relevant legislation.<\/p>\r\n

7. Purposes of processing personal data<\/strong><\/p>\r\n

Negotiation of the contractual relationship.<\/p>\r\n

Performance of the contract.<\/p>\r\n

Protection of the rights of the controller, the beneficiary or other interested parties (e.g. recovery of the controller\u2019s claims).<\/p>\r\n

Archiving records as required by law.<\/p>\r\n

Selection procedures for vacant positions.<\/p>\r\n

Fulfilment of legal obligations by the controller.<\/p>\r\n

Protection of the data subject\u2019s vital interests.<\/p>\r\n

8. Method of processing and protection of personal data<\/strong><\/p>\r\n

The processing of personal data is carried out by the controller. The processing is carried out at the premises of the controller, at the headquarters of the controller and by authorised employees of the controller. The processing is carried out with the aid of computer technology or manually, in the case of personal data in paper form, in compliance with all the security principles for the management and processing of personal data. To this end, the Controller has implemented technical and organisational measures to ensure the protection of personal data, in particular to prevent unauthorised or accidental access to, alteration, destruction or loss of personal data, unauthorised disclosure, unauthorised processing or other misuse of personal data. All entities to which personal data may be disclosed shall respect the data subject\u2019s right to privacy and comply with applicable data protection laws.<\/p>\r\n

9. Duration of processing of personal data<\/strong><\/p>\r\n

In accordance with the time limits specified in the relevant contracts or applicable legislation, this is the time necessary to ensure the rights and obligations arising from both the contractual relationship and the relevant legislation.<\/p>\r\n

10. Consent<\/strong><\/p>\r\n

The controller processes data with the consent of the data subject, except where the law provides that the consent of the data subject is not required for the processing of personal data.<\/p>\r\n

In accordance with Article 6(1) of the GDPR, the controller may process the following data without the consent of the data subject:<\/p>\r\n