1. Introduction
Our company, INTERSNACK a.s., operates its websites in order to inform you about our company and our products. These are the company website www.intersnack.cz and the websites of our products www.pombar.cz and www.chiochips.cz.
In connection with your use of our websites, we process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and in accordance with related applicable legal regulations.
These rules explain how our company handles and processes your personal data. The following information applies exclusively to websites operated by us. These rules do not apply to third-party websites to which our websites may link.
2. Personal Data Controller
Personal Data Controller: INTERSNACK a.s.
Identification details: INTERSNACK a.s., with its registered office at č.p. 164, 391 18, Choustník, Company ID No.: 14504031, registered in the Commercial Register maintained by the Regional Court in České Budějovice, file No. B 51
(hereinafter also the “Controller”)
Contact e-mail: info@intersnack.cz.
Data Protection Officer: The Controller has not appointed a data protection officer.
3. Purpose and Legal Basis for the Processing of Personal Data
The Controller processes your personal data for the purpose of operating its websites.
Furthermore, the Controller may process personal data for the purpose of and on the grounds of fulfilling the Controller’s legal obligations under applicable legal regulations or decisions of competent public authorities, and also for the purpose of and on the grounds of the Controller’s legitimate interests, in particular for the purpose of verifying compliance with the terms of use of the websites, possible enforcement of rights and legal claims, and possible defence in disputes in connection with the use of the websites or in proceedings conducted by public authorities in connection with the websites.
On the basis of your consent, the Controller may also process personal data for other purposes to which you give your consent, for example for sending commercial, informational, educational or other communications.
4. Personal Data Processed by the Controller
Personal data processed in connection with visits to our websites:
Each time you visit our websites, your browser automatically transmits to us your IP address, the date and time of access to the server, the URLs of the individual websites visited, and, where applicable, the URL of the website from which you accessed the relevant website, the name of the requested file, the page from which the file was requested, the access status of the web server (file transferred, file not found, command not executed, etc.), the type and version of the browser, the operating system of the end device used, and the volume of data transferred (collectively referred to as “access data”).
We need this access data in order to display the websites to you and to ensure system security. Without it, it is not possible to operate or access the websites.
We use only technical cookies and do not use any analytics or tracking tools.
- Personal data processed in connection with visits to our website www.pombar.cz:
When you visit our websites, the only personal data that may be technically processed comes from server logs. These may contain the IP address and the date and time of access to the server. No profiling or any other tracking of users takes place. Data such as browser type, device, session ID, language settings, etc. are not processed.
We use only technical cookies and do not use any analytics or tracking tools.
- Personal data processed in connection with visits to our website www.chiochips.cz:
We use technical cookies and, for analytical purposes, the Matomo tool, which helps us collect anonymised data on website traffic and visitor behaviour.
When you visit our websites, we process the visitor’s anonymised IP address (the last part is masked, so it is not possible to clearly identify the person), basic technical information about the device and browser (type, version, operating system, screen resolution), information about where the visitor came to the websites from (link, search engine, direct entry), pages visited and time spent on the websites, and, where applicable, actions taken by the visitor on the websites (clicks, file downloads, completion of forms).
When you visit our websites, we process technical data related to the website visit and security, and we use only necessary technical cookies: IP address, date and time of form submission, and technical information about the browser and device. When cookies (technically necessary cookies) are used, the following are processed in particular: pseudonymous session identifier, security / CSRF token, and technical identifiers related to login or a trusted device. Cookies do not store ordinary identification data (name, address, e-mail).
We use the eTracker tool in its standard configuration (cookieless tracking), whereby we do not set marketing or analytical cookies and do not process directly identifiable personal data. We use only necessary technical cookies and only technical usage data are processed: anonymised IP address, browser information, referrer URL and time data. The IP address is anonymised at an early stage, no persistent user profiles are created, the data are anonymised or pseudonymised and cannot be used to directly identify users.
For the purpose of possible commercial, informational, educational or other communications, we may process in particular: first name, surname, place of residence, contact address, telephone number and e-mail. We may process this data on the basis of your consent. Provision of the data is therefore voluntary and based on the user’s consent to such processing. You may withdraw your consent at any time by e-mail at info@intersnack.cz or in another manner specified in the consent.
For the purpose of handling your submissions, complaints, etc. that you send to our infolines in connection with the use of our websites, we may process in particular: first name, surname, business name, address, telephone number, e-mail, information about the products to which the communication, submission or complaint relates (e.g. EAN code, batch number and production time), the subject and content of the message, and other data voluntarily completed by the visitor or other data necessary to handle your submissions or complaints.
It may also include data processed by the Controller for the purpose of and on the grounds of fulfilling the Controller’s legal obligations under applicable legal regulations or decisions of competent public authorities, or for the purpose of and on the grounds of the Controller’s legitimate interests stated above.
5. Sources of Personal Data
The Controller obtains personal data directly from users within the scope of using the websites and in connection with the websites.
6. Recipients
The data you provide may be processed only by entities authorised by the Controller, in accordance with its instructions and for the same purpose as the Controller. These may include, for example, operators of consumer infolines, tax advisors or legal advisors.
Personal data may be provided to competent public authorities for the purpose of fulfilling the Controller’s legal obligations under applicable legal regulations or decisions of competent public authorities, or for the purpose of and on the grounds of the Controller’s legitimate interests stated above.
No personal data processed in connection with visits to our websites are shared with any third party.
We process personal data exclusively within the EU. Personal data are not transferred outside the EU.
7. Period of Processing of Personal Data
Personal data processed in connection with visits to our website www.intersnack.cz:
- Access data will be processed only for the necessary period and will be automatically deleted no later than after four weeks.
Personal data processed in connection with visits to our website www.pombar.cz:
- Server logs are automatically stored for 7 days, after which they are overwritten and older records are automatically deleted.
Personal data processed in connection with visits to our website www.chiochips.cz:
- We store the visitor’s anonymised IP address (the last part is masked, so it is not possible to clearly identify the person) for 6 months, after which the records are automatically anonymised or deleted.
- We store basic technical information about the device and browser (type, version, operating system, screen resolution) for 13 months.
- We store information about where the visitor came to the websites from (link, search engine, direct entry) for 6 months.
- We store the pages visited and the time spent on the websites, and, where applicable, actions taken by the visitor on the websites (clicks, file downloads, completion of forms), for 13 months.
Personal data processed in connection with visits to our website www.goldfish.eu/cz/:
Technically necessary cookies:
- session and CSRF cookies are stored only for the duration of the session or for a short technical period
- trusted_device and REMEMBERME cookies may be stored
The eTracker tool used is operated in so-called cookieless mode. In this mode, data (e.g. IP address) are anonymised at an early stage of processing and are not stored as data relating to specific identifiable persons. The processed data serve exclusively statistical purposes, individual user profiles are not created, and the data cannot be subsequently attributed to specific natural persons. For this reason, there is no long-term storage of personal data in relation to specific users.
We process personal data processed in connection with the operation of the infoline for the period strictly necessary to handle your complaint or submission, and no longer than three years.
Your other personal data provided on the basis of separate consent may be processed for the period specified in the consent.
The Controller may process your personal data for a longer period only if such longer retention is justified on the basis of applicable legal regulations or decisions of competent public authorities, or by the Controller’s legitimate interest.
8. Technical Data Security
For the purpose of securing your personal data against unauthorised or accidental disclosure, the Controller applies appropriate and suitable technical and organisational measures, which are continuously updated. Technical measures consist in the deployment of technologies preventing unauthorised access by third parties to personal data. Organisational measures are a set of rules of conduct for the Controller’s employees. The Controller ensures that the necessary technical and organisational measures are also implemented by external suppliers.
9. Automated Individual Decision-Making
The Controller does not carry out automated individual decision-making or profiling.
10. User Rights
In connection with the use of our websites, you have rights under the applicable legal regulation, in particular the following rights:
- the right of access to personal data and the right to obtain confirmation from the Controller as to whether or not personal data concerning you are being processed, and to obtain relevant information about such processing;
- the right to rectification of personal data, or completion of incomplete personal data;
- the right to withdraw consent to the processing of personal data where the Controller processes any personal data on the basis of consent, at info@intersnack.cz;
- the right to object to processing based on the Controller’s legitimate interest, unless there are overriding legitimate grounds for the processing;
- the right to restriction of processing of personal data where the user contests the accuracy of the personal data, for a period enabling the Controller to verify the accuracy of the personal data; further where the processing of personal data is unlawful and the user opposes the erasure of the personal data and requests instead the restriction of their use; or where the Controller no longer needs the personal data for the purposes of processing, but the user requires them for the establishment, exercise or defence of legal claims; or where the user has objected to the processing of personal data for the purposes of the Controller’s legitimate interests, pending verification of whether the Controller’s legitimate grounds override the legitimate grounds of the user;
- the right to erasure of personal data where the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; or where the personal data were processed on the basis of the user’s consent and the user withdraws that consent and there is no other legal ground for the processing; or where the user has objected to the processing of personal data based on the Controller’s legitimate interests and there are no overriding legitimate grounds for the processing; or where the personal data were processed unlawfully; or where the personal data must be erased in order to comply with a legal obligation;
- the right to data portability where the processing is based on consent or a contract and is carried out by automated means;
- the right to lodge a complaint with a supervisory authority if the data subject believes that the Controller is not processing his or her personal data lawfully. The supervisory authority is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, e-mail: posta@uoou.cz, tel.: 234 665 125;
- the right to be informed in the event of a personal data breach if the relevant personal data breach is likely to result in a high risk to the rights and freedoms of the user.
11. Final Provisions
We may update these rules if necessary. We recommend that you review the personal data processing rules on an ongoing basis.
