1. Introduction

Our company INTERSNACK a.s. operates its websites in order to inform you about our company and our products. These include the company website www.intersnack.cz and the websites of our products www.pombar.cz and www.chiochips.cz.

In connection with your use of our websites, we process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and in accordance with the relevant related legal regulations.

These rules explain how our company handles and processes your personal data. The following information applies exclusively to the websites operated by us. These rules do not apply to third-party websites to which our websites may link.

2. Data Controller

Data controller: INTERSNACK a.s.

Identification details: INTERSNACK a.s., with its registered office at Choustník 164, 391 18 Choustník, Company ID No.: 14504031, registered in the Commercial Register maintained by the Regional Court in České Budějovice, File No. B 51

(hereinafter also referred to as the “Operator”)

Contact e-mail: info@intersnack.cz.

Data Protection Officer: The Operator has not appointed a data protection officer.

3. Purpose and Legal Basis for the Processing of Personal Data

The Operator processes your personal data for the purpose of operating its websites.

Furthermore, the Operator may process personal data for the purpose of and on the grounds of fulfilling the Operator’s legal obligations under the relevant legal regulations or decisions of the competent public authorities, and also for the purpose of and on the grounds of the Operator’s legitimate interests, in particular for the purpose of verifying compliance with the terms of use of the website, the potential enforcement of rights and legal claims, and potential defence in disputes in connection with the use of the website or in proceedings conducted by public authorities in connection with the website.

Based on your consent, the Operator may also process personal data for other purposes for which you give your consent, e.g. for sending commercial, informational, educational or other communications.

4. Personal Data Processed by the Operator:

Personal data processed in connection with visits to our websites:

• Personal data processed in connection with visits to our website www.intersnack.cz:

During each visit to our websites, your browser automatically transmits to us your IP address, the date and time of access to the server, the URLs of individual visited web pages, where applicable the URL of the web page from which you accessed the given web page, the name of the requested file, the page from which the file was requested, the access status of the web server (file transferred, file not found, command not executed, etc.), the type and version of the browser, the operating system of the end device used, and the volume of data transferred (hereinafter collectively referred to as “access data”). We need this access data in order to display the website to you and to ensure system security. Without this data, it is not possible to operate the website or access it.

We use technical cookies only and do not use any analytics or tracking tools.

• Personal data processed in connection with visits to our website www.pombar.cz:

When visiting our website, the only personal data that may be technically processed originate from server logs. These may contain the IP address, the date and time of access to the server. No profiling or any other tracking of users takes place. Data such as browser type, device details, session ID, language settings, etc. are not processed.

We use technical cookies only and do not use any analytics or tracking tools.

• Personal data processed in connection with visits to our website www.chiochips.cz

We use technical cookies and, for analytical purposes, we use the Matomo tool, which helps us collect anonymised data on traffic and visitor behaviour.

When visiting our websites, we process the visitor’s anonymised IP address (the last part is masked, so it is not possible to uniquely identify a person), basic technical information about the device and browser (type, version, operating system, screen resolution), information about where the visitor came from (referral link, search engine, direct entry), the pages visited and the time spent on the website, and possibly actions performed on the website (clicks, file downloads, form submissions).

For the purpose of potential commercial, informational, educational or other communications, we may process in particular: first name, last name, residence, contact address, telephone number, e-mail. We may process these data on the basis of your consent. Providing the data is therefore voluntary and based on the user’s consent to such processing. You may withdraw your consent at any time, by e-mail to info@intersnack.cz or in another manner specified in the consent.

For the purpose of handling your suggestions, complaints, etc. that you send to our consumer helplines in connection with the use of our websites, we may process in particular: first name, last name, address, telephone number, e-mail, or other data necessary to handle your suggestions or complaints.

Furthermore, this may include data that the Operator processes for the purpose of and on the grounds of fulfilling the Operator’s legal obligations under the relevant legal regulations or decisions of the competent public authorities, or for the purpose of and on the grounds of the Operator’s above-mentioned legitimate interests.

5. Sources of Personal Data:

The Operator obtains personal data directly from users in the course of using the websites and in connection with the websites.

6. Recipients

The data you provide may be processed only by entities authorised by the Operator, in accordance with its instructions and for the same purpose as the Operator. This may include, for example, operators of consumer helplines, tax or legal advisers.

Personal data may be provided to the competent public authorities for the purpose of fulfilling the Operator’s legal obligations under the relevant legal regulations or decisions of the competent public authorities, or for the purpose of and on the grounds of the Operator’s above-mentioned legitimate interests.

No personal data processed in connection with visits to our websites are shared with any third party.

We process personal data exclusively within the EU. No transfer of personal data outside the EU takes place.

7. Period of Processing of Personal Data:

Personal data processed in connection with visits to our website www.intersnack.cz:

• Access data will be processed only for the necessary period and will be automatically deleted no later than after four weeks.

Personal data processed in connection with visits to our website www.pombar.cz:

• Server logs are automatically stored for 7 days, then overwritten and older records are automatically deleted.

Personal data processed in connection with visits to our website www.chiochips.cz

• We retain the visitor’s anonymised IP address (the last part is masked, so it is not possible to uniquely identify a person) for 6 months; thereafter the records are automatically anonymised or deleted.
• We retain basic technical information about the device and browser (type, version, operating system, screen resolution) for 13 months.
• We retain information about where the visitor came from (referral link, search engine, direct entry) for 6 months.
• We retain the pages visited and the time spent on the website, and possibly actions performed on the website (clicks, file downloads, form submissions) for 13 months.

Personal data processed in connection with the operation of the helpline are processed for the period strictly necessary to handle your complaint or suggestion, for no longer than three years.

Your other personal data provided on the basis of specific consent may be processed for the period stated in the consent.

The Operator may process your personal data for a longer period only if such longer retention is justified under the relevant legal regulations or decisions of the competent public authorities, or by the Operator’s legitimate interests.

8. Technical Data Security

The Operator applies appropriate and suitable technical and organisational measures to protect your personal data against unauthorised or accidental access, which are continuously updated. Technical measures consist in deploying technologies preventing unauthorised access by third parties to personal data. Organisational measures are a set of rules of conduct for the Operator’s employees. The Operator ensures that the necessary technical and organisational measures are also implemented by external suppliers.

9. Automated Individual Decision-Making

The Operator does not carry out automated individual decision-making or profiling.

10. Users’ Rights

In connection with the use of our websites, you have rights under the applicable legal regulations, in particular the following rights:

a) the right of access to personal data and the right to obtain from the Operator confirmation as to whether or not personal data concerning you are being processed, and the relevant information about such processing;

b) the right to rectification of personal data, or completion of incomplete personal data;

c) the right to withdraw consent to the processing of personal data where the Operator processes any personal data on the basis of consent, by contacting info@intersnack.cz;

d) the right to object to processing based on the Operator’s legitimate interests, unless there are overriding legitimate grounds for the processing;

e) the right to restriction of processing in cases where the user contests the accuracy of the personal data, for the period necessary for the Operator to verify the accuracy of the personal data; further in cases where the processing is unlawful and the user refuses erasure and requests restriction of use instead; or where the Operator no longer needs the personal data for the purposes of processing but the user requires them for the establishment, exercise or defence of legal claims; or where the user has objected to the processing of personal data for the purposes of the Operator’s legitimate interests, until it has been verified whether the Operator’s legitimate grounds override those of the user;

f) the right to erasure where the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; or where the personal data were processed on the basis of the user’s consent and the user withdraws that consent and there is no other legal basis for processing; or where the user objects to processing based on the Operator’s legitimate interests and there are no overriding legitimate grounds for processing; or where the personal data were processed unlawfully; or where the personal data must be erased to comply with a legal obligation;

g) the right to data portability where the processing is based on consent or a contract and is carried out by automated means;

h) the right to lodge a complaint with a supervisory authority if the data subject considers that the Operator does not process their personal data lawfully. The supervisory authority is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, e-mail: posta@uoou.cz, tel.: 234 665 125;

i) the right to be informed in the event of a personal data breach, if such breach is likely to result in a high risk to the rights and freedoms of the user.

11. Final Provisions

We may update these rules if necessary. We recommend checking the personal data processing rules regularly.