GDPR

Personal data controller

OBSIDIAN, a.s., with its registered office at Napajedelská 220, 765 02 Otrokovice

Personal data processor

OBSIDIAN, a.s., with its registered office at Napajedelská 220, 765 02 Otrokovice. Personal data may also be processed by any employee of the controller.

1. Consent text

By checking this box before submitting the order in accordance with Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”), which entered into force on 25 May 2018, I consent to the collection, storage, and processing of my personal data that I have provided to the controller.

2. What data will be processed?

First name and surname, as well as business name, e-mail address, telephone number, and IP address, if applicable.

3. For what purposes will personal data be processed and stored? 3.1 Personal data, which are:

The controller will collect, store and process the first and last name or, if applicable the business name, and the e-mail address, telephone number, IP address for the following purposes: sending the controller’s commercial and marketing offers.

4. For what period will personal data be retained?

The controller will keep the personal data for as long as necessary. The controller will retain personal data for a maximum period of 10 years.

5. By which means will personal data be processed and stored?

Personal data will be processed: by machine (automated) through computers and computer programmes in written form.

6. The data subject’s rights, information and access to personal data

As a data subject, I have the right to access, rectify, or erase my personal data, or restrict its processing. I have the right to request information on what personal data is processed and I have the right to request an explanation regarding the processing of personal data. I also have the right to object to processing, as well as the right to data portability (i.e. the right to obtain the personal data concerning me that I have provided to the controller in a structured, commonly used and machine-readable format; see Article 20 of the GDPR for more details). I have the right to withdraw my consent at any time, without prejudice to the lawfulness of the processing based on consent given before its withdrawal, if processing is based on Article 6(1)(a) or Article 9(2)(a) of the GDPR. This means that I do not have such a right, in particular if the processing is necessary for compliance with a legal obligation to which the controller is subject (in particular, obligations related to money laundering legislation). As a data subject, I have the right to request information about the processing of my personal data, which the controller is obliged to provide to me without undue delay. The content of the information is determined by the provisions of Article 15 of the GDPR. The controller has the right to request a reasonable fee for the provision of the information, not exceeding the costs necessary to provide such information. As a data subject, you have the right to contact the controller or the Office for Personal Data Protection if you have any doubts about compliance with the obligations relating to the processing of personal data. The controller declares that there is no automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR. The controller declares that personal data are not processed for scientific or historical research purposes, or for statistical purposes. The controller declares that it will process personal data: by machine (automated) using computers and computer programmes in written form;

7. Final provisions

As a data subject, I declare that I am aware of my rights under Chapter III of the GDPR. I declare that all the data provided are accurate and true and are provided voluntarily. The controller declares that it will collect personal data to the extent necessary to fulfill the purpose and will process it only in accordance with the purpose for which it was collected. This consent is the free and conscious expression of the will of the data subject, the content of which is the consent of the data subject to the processing of personal data.