Privacy Policy

1. Content of the document. These personal data processing policies describe how we process the personal data of visitors, customers of the online store, and other individuals. Here, you will learn in particular what personal data we process, why and on what basis we do so, to whom we transfer it, and what rights you have in connection with its processing. All personal data processing is carried out in accordance with the European Union’s General Regulation No. 2016/679 on the protection of personal data, commonly referred to as GDPR.
2. Our position. All the described personal data processing activities are carried out in the capacity of the controller by the commercial company Ingredi Europa s.r.o., with its registered office at Krajánkova 3176/2, 141 00 Prague, Company ID: 28544668, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 149265, VAT ID: CZ28544668 (for greater clarity, hereinafter referred to as “we”). This means that we determine the purposes described below for which we collect your personal data, determine the means of processing, and are responsible for its proper execution.
3. Scope of personal data processing. The personal data we process includes:
   1. identification data (in particular, first name and surname or, in the case of entrepreneurs, identification number and tax identification number),
   2. contact details (in particular, address, email address, and phone number),
   3. data about orders and transactions (in particular, ordered goods and services, selected payment and delivery methods, and other information related to the order),
   4. data about mutual communication (in particular, the content and other data related to communication between us and you),
   5. data about registration and settings (in particular, data related to your user account if you register with us, and data about the settings of our services),
   6. data about the use of our website (in particular, IP address, data about your device, data obtained through the use of cookies, or data about what you do on our website).

Why and how do we process your personal data?

1. Website operation. If you visit our website, we process your personal data to ensure its proper functioning based on our legitimate interest in providing our services via the internet.
2. User account. Based on a contract, we process your personal data when managing user accounts in our online store.
3. Improvement and development of our services. We also process your personal data for the purpose of measuring website traffic and creating statistics and records that help us evaluate and develop our services, based on our legitimate interest in monitoring website traffic and developing and optimizing our services.
4. Assessing your satisfaction. To assess your satisfaction with our services, we process your personal data based on our legitimate interest in obtaining your feedback. We also do this as part of the Verified by Customers program through email questionnaires, which we send to you each time you make a purchase from us, unless you opt out of receiving them. For sending questionnaires, evaluating feedback, and analyzing our market position, we provide the program operator with information about the purchased goods and your email address. Your personal data is not transferred to any third party for their own purposes. You can object to receiving questionnaires under the Verified by Customers program at any time by refusing further questionnaires using the link in the email with the questionnaire. If you object, we will no longer send you questionnaires.
5. Security and testing. To protect our website and all other services from cyberattacks and fraud, as well as for testing new functionalities and changes to the website, we process your personal data based on our legitimate interest in securing and improving our services.
6. Protection of legal claims and internal control. We process your personal data based on our legitimate interests for the purpose of protecting legal claims and maintaining our internal records and controls.
7. Sending commercial communications to customers. If we obtain your electronic contact details in connection with an order or our services, we may also process your personal data for the purpose of further offering our goods and services through commercial communications, based on our legitimate interest in promoting ourselves, unless you have refused such communications.
8. Sending commercial communications based on consent. Based on your consent, we process your personal data for the purpose of sending commercial communications.
9. Online advertising. To display personalized advertisements on our website and third-party websites, we may process data about your use of our website. Depending on the type of advertising, the basis is either our legitimate interest in promoting ourselves, or, for certain types of advertising, it may be your consent if we request it and you choose to grant it.
10. Fulfillment of our legal obligations. We also process your personal data for the purposes and based on fulfilling our legal obligations, particularly related to providing information to public authorities.
11. Fulfillment and conclusion of contracts. We process your personal data based on and for the purpose of fulfilling our obligations arising from contracts concluded between us and you, and for the conclusion of these contracts. For this purpose, we may also process the personal data of recipients and other beneficiaries of goods and any additional services.
12. Customer support. To handle your requests related to orders, we process your personal data based on the obligation to fulfill contracts concluded between us and you, and for the conclusion of these contracts. When handling other potential requests, we process your personal data based on our legitimate interest in providing our services and ensuring appropriate support.
13. Retention period. We store personal data only for the period necessary to achieve the stated purposes of processing personal data. Once the purpose of processing ceases, we promptly dispose of the personal data. Typically, we retain personal data for the duration of the limitation period (standardly 3 years) and one year after its expiration, taking into account possible claims raised at the end of the limitation period. Beyond this, the following specific retention periods apply:
    1. Data related to a user account is retained for the entire duration of the account’s existence until its deletion.
    2. In the case of judicial or other proceedings, we process your personal data to the necessary extent for the entire duration of such proceedings and the remaining part of the limitation period after their conclusion.
    3. For sending commercial communications to customers, we process your personal data until you refuse such communications.
    4. For sending commercial communications based on your consent, we process your personal data until you revoke your prior consent to the processing of personal data.
    5. For fulfilling legal obligations, we process personal data for the period necessary to meet these obligations.

To whom are personal data transferred?

1. Processors. For the processing of personal data, we also use the services of other entities acting as processors, who process personal data solely according to our instructions. These include, in particular:
   1. IT service providers and other technology suppliers,
   2. operators of analytical and marketing tools,
   3. providers of communication tools,
   4. operators of programs for assessing customer satisfaction, e.g., Verified by Customers (Heureka.cz).
2. Controllers. We may make your personal data available to other entities acting as controllers:
   1. our suppliers involved in fulfilling the contract, particularly carriers and payment system operators,
   2. operators of advertising systems and social networks.
3. Transfer outside the EU. In some cases, your personal data may be transferred outside the European Economic Area, either based on a decision on adequate protection under Article 45 of the GDPR, appropriate safeguards under Article 46 of the GDPR, or an exception under Article 49 of the GDPR.

Your rights

1. Rights of the data subject. Regarding your personal data, you have the right:
   1. to request the correction of inaccurate or outdated personal data, meaning that if you find that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected or completed without undue delay,
   2. to request confirmation of whether processing is taking place, and if it is, information regarding this processing to the extent specified in Article 15 of the GDPR, as well as a copy of the processed data (we are entitled to charge a fee for additional copies to cover necessary costs),
   3. in some cases, to have your personal data erased. We will erase your personal data without undue delay if we no longer need it for the purposes for which it was processed, or if you exercise your right to object to processing and we find that we no longer have legitimate interests justifying such processing, or if it becomes evident that our processing of personal data is no longer in compliance with generally binding regulations. However, this right does not apply if the processing of your personal data remains necessary for fulfilling our legal obligations, for archiving purposes, scientific or historical research, statistical purposes, or for establishing, exercising, or defending our legal claims.
   4. to exercise the right to restrict the processing of personal data. This right allows you, in certain cases, to request that your personal data be marked and not subject to any further processing operations – in this case, however, not permanently (as with the right to erasure), but for a limited period. We must restrict the processing of personal data if you dispute the accuracy of the personal data until we agree on what data is correct, or if we process your personal data without a sufficient legal basis (e.g., beyond what we are required to process), but you prefer restriction over erasure of such data (e.g., if you anticipate providing us with such data again in the future), or if we no longer need the personal data for the purposes mentioned above, but you require it for establishing, exercising, or defending your legal claims, or if you object to processing and we are obliged to restrict the processing of your personal data for the period during which we investigate whether your objection is justified.
   5. to request the transfer of personal data in cases of processing based on your consent or a contract,
   6. to object to the processing of personal data that occurs based on our legitimate interest. We will stop processing your personal data unless we have compelling legitimate grounds to continue such processing. In the case of an objection to marketing activities, we will cease these activities in any case,
   7. to express your disagreement at any time with the processing of your personal data for the purpose of sending commercial communications, as well as to revoke your prior consent to the processing of personal data for another purpose at any time, unless it involves processing for the purpose of fulfilling our obligations arising from contracts, fulfilling our legal obligations, or another purpose arising from our legitimate interests.
2. How to exercise your rights. You can exercise your rights in one of the following ways:
   1. by email to our email address.
3. Right to lodge a complaint with a supervisory authority. If you become convinced that we have violated the GDPR in processing your personal data, you have the right to file a complaint with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7 (http://www.uoou.cz).

Cookies

1. Files stored on your device for later access (temporary files). Our website may use cookie technology (and possibly other similar technologies, such as Web Storage). This means that we store small data files in a designated space in your device’s memory, which allow us to provide you with the service and further improve it. For simplicity, we will refer to all these technologies collectively as “cookies” hereinafter.
2. Cookies necessary for providing the service. Some cookies are technically necessary for providing the service. This means that their storage cannot be avoided while maintaining the functionality of the service. These include, in particular, cookies for:
   1. storing your choices related to an order,
   2. storing website settings,
   3. logging into a user account,
   4. ensuring IT security.
3. Other types of cookies. We use some cookies to provide you with a higher quality service that is more tailored to your preferences. As part of this, we may store cookies on your device:
   1. to ensure the analysis of traffic and usage of the website, including third-party cookies,
   2. for advertising purposes to display tailored advertisements on our website and other websites, including third-party cookies,
   3. to enable integration with social networks, including third-party cookies,
   4. to determine your geographical location.
4. Cookie storage settings. You can adjust cookie settings through the options available on our website. Using the relevant settings on your device, you can also manage the use of cookies on our website, for example, by blocking cookies if you do not agree with their use on our site. If you choose this option, please note that some parts of the service may not function correctly.