Home / Privacy Policy

Privacy Policy

I. Basic Provisions

The data controller, according to Article 4, point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter "GDPR"), is Karlovarská sůl s.r.o., ID No. 11669403, with its registered office at Na Výhledě 1076/3C, Stará Role, 360 17 Karlovy Vary (hereinafter "the controller"). 

Contact details of the controller:
Address: Na Výhledě 1076/3C, Stará Role, 360 17 Karlovy Vary
Phone: +420 793 913 590
Email: info@carlsbad-salt.com

Personal data means all information about an identified or identifiable natural person. The controller has not appointed a data protection officer.

II. Sources and categories of processed personal data

The controller processes personal data that you have provided or data obtained based on the fulfillment of your order. This includes primarily identification and contact details, as well as data necessary for the performance of the contract.

III. Legal basis and purpose of personal data processing

The legal basis for processing personal data is:

  • Performance of the contract between you and the controller according to Article 6(1)(b) GDPR
  • Legitimate interest of the controller in providing direct marketing according to Article 6(1)(f) GDPR
  • Your consent for processing for direct marketing purposes according to Article 6(1)(a) GDPR in conjunction with § 7(2) of Act No. 480/2004 Coll., if no goods or services were ordered

The purpose of processing is:

  • Fulfilling your order and exercising rights and obligations arising from the contract
  • Sending commercial communications and marketing activities

IV. Data retention period

The controller retains personal data:

  • For the period necessary to exercise rights and obligations arising from the contract (for 15 years)
  • Until consent for marketing purposes is withdrawn, but no longer than 10 years

After the retention period expires, the controller deletes the data.

V. Recipients of personal data (controller’s subcontractors)

Recipients of personal data are:

  • Persons involved in the delivery of goods, services, or payments
  • Persons involved in ensuring the operation of services
  • Marketing companies

The controller does not intend to transfer personal data to a third country or international organization.

VI. Your rights

Under the conditions set forth in the GDPR, you have the following rights:

  • Right to access your personal data according to Article 15 GDPR
  • Right to rectification or restriction of processing according to Articles 16 and 18 GDPR
  • Right to data erasure according to Article 17 GDPR
  • Right to object according to Article 21 GDPR
  • Right to data portability according to Article 20 GDPR
  • Right to withdraw consent to personal data processing

You also have the right to file a complaint with the Data Protection Authority if you believe that a personal data protection breach has occurred.

VII. Personal data security conditions

The controller declares that it has taken all appropriate technical and organizational measures to secure personal data:

  • Technical measures: Use of technologies to secure data storage, encryption of access, communication, and data stored on servers.
  • Organizational measures: Employee conduct rules to ensure the confidentiality of personal data.

Data is stored on servers located in the EU or in countries with the same level of personal data protection.

VIII. Final Provisions

By submitting an order through the online form, you confirm that you have read and fully accept these privacy policy terms. The controller reserves the right to change these terms at any time. The new terms will be published on the website www.carlsbad-salt.com and, if necessary, sent to your email address.

These terms take effect on July 18, 2024.