Privacy Policy

I. Basic Provisions

The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as "GDPR") is Karlovarská sůl s.r.o., ID No. 11669403, with registered office at Na Výhledě 1076/3C, Stará Role, 360 17 Karlovy Vary (hereinafter referred to as "the controller").

Contact details of the administrator:
Address: Na Výhledě 1076/3C, Stará Role, 360 17 Karlovy Vary
Phone: +420 793 913 590
E-mail: info@carlsbad-salt.com

Personal data means any information about an identified or identifiable natural person. The controller has not appointed a data protection officer.

II. Sources and categories of personal data processed

The controller processes personal data that you have provided to it or data obtained on the basis of the fulfilment of your order. In particular, identification and contact data and data necessary for the performance of the contract are processed.

III. Lawful basis and purpose of the processing of personal data

The lawful reason for processing personal data is:

• Performance of the contract between you and the controller pursuant to Article 6(1)(b) GDPR
• Legitimate interest of the controller in providing direct marketing according to Article 6(1)(f) GDPR
• Your consent to processing for direct marketing purposes pursuant to Article 6(1)(a) GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., unless an order for goods or services has been placed

The purpose of the processing is:

• Execution of your order and performance of rights and obligations under the contract
• Sending commercial communications and marketing activities

IV. Data retention period

The controller shall store personal data:

• For the period necessary to exercise the rights and obligations under the contract (15 years)
• For a period of time before consent is withdrawn for marketing purposes, not exceeding 10 years

After the retention period has expired, the controller shall delete the data.

V. Recipients of personal data (subcontractors of the controller)

The recipients of personal data are:

• Persons involved in the delivery of goods, services or payments
• Persons involved in ensuring the operation of services
• Marketing companies

The controller does not intend to transfer personal data to a third country or an international organisation.

VI. Your rights

Under the terms of the GDPR, you have the following rights:

• Right to access your personal data under Article 15 GDPR
• Right to rectification or restriction of processing under Articles 16 and 18 GDPR
• Right to erasure of data under Article 17 GDPR
• Right to object under Article 21 GDPR
• Right to data portability under Article 20 GDPR
• Right to withdraw consent to the processing of personal data

You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe that there has been a breach of data protection.

VII. Personal Data Security Terms and Conditions

The controller declares that it has taken all appropriate technical and organisational measures to safeguard personal data:

• Technical measures: the use of technologies for data storage security, encryption of access, communication and data stored on servers.
• Organisational measures: rules of conduct for employees to ensure the confidentiality of personal data.

The data is stored on servers located in the EU or countries with the same level of data protection.

VIII. Final Provisions

By submitting an order from the online form, you confirm that you have read this privacy policy and accept it in its entirety. The Controller reserves the right to change this policy at any time. The new terms will be published on the website www.carlsbad-salt.com and, if necessary, sent to your email address.

These terms and conditions will take effect on 18.7.2024.