Personal Data Controller

OBSIDIAN, a.s., with its registered office at Napajedelská 220, 765 02 Otrokovice

Personal Data Processor

OBSIDIAN, a.s., with its registered office at Napajedelská 220, 765 02 Otrokovice. Any employee of the controller is also authorized to process personal data.

1. Text of Consent

By ticking the box before submitting the order in accordance with Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter "the GDPR Regulation"), which entered into force on 25 May 2018, I consent to the collection, retention, and processing of my personal data provided by me to the controller.

2. What data will be processed

First and last name, or, as the case may be, business name, email address, telephone number, IP address.

3. For what purposes will the personal data be processed and retained 3.1 Personal data, which are:

First and last name, or, as the case may be, business name, email address, telephone number, IP address, will be collected, retained, and processed by the controller for the following purposes: for sending commercial and marketing offers and notices of the controller.

4. Period for which the personal data will be retained

The controller will retain personal data for the minimum period necessary. The controller will retain personal data for a maximum period of 10 years.

5. How will the personal data be processed and retained?

Personal data will be processed: by machine (automated) through computers and computer programs in written form

6. Rights of the data subject, information and access to personal data

As a data subject, I have the right to access my personal data, I have the right to its correction or erasure, or restriction of processing. I have the right to request information about what personal data is being processed and I have the right to request an explanation regarding the processing of personal data. Furthermore, I have the right to object to the processing, as well as the right to data portability (i.e. the right to obtain personal data concerning me, which I have provided to the controller, in a structured, commonly used and machine-readable format, see details in Art. 20 of the GDPR Regulation). I have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal, if the processing is based on Art. 6(1)(a) or Art. 9(2)(a) of the GDPR Regulation. This means that I do not have such a right, in particular, if the processing is necessary for compliance with a legal obligation to which the controller is subject (in particular obligations relating to the LVTČ - Prevention of Money Laundering and Terrorist Financing). As a data subject, I have the right to request information about the processing of my personal data, and the controller is obliged to provide me with this information without undue delay. The content of the info is given by the provisions of Article 15 of the GDPR Regulation. The controller has the right to demand a reasonable fee for providing the information, not exceeding the costs necessary to provide the information. As a data subject, in case of doubt about compliance with the obligations related to the processing of personal data, I have the law to contact the controller or the Office for Personal Data Protection. The controller declares that the processing does not involve automated decision-making, including profiling, as referred to in Art. 22(1) and (4) of the GDPR Regulation. The controller declares that personal data are not processed for purposes of scientific or historical research or for statistical purposes. The controller declares that it will process the personal data: by machine (automated) through computers and computer programs; in written form;

7. Final provisions

As a data subject, I declare that I am aware of my rights under Chapter III of the GDPR Regulation. I declare that all data provided are accurate and true and are provided voluntarily. The controller declares that it will collect personal data to the extent necessary to fulfill the purpose and will process it only in accordance with the purpose for which it was collected. This consent is a free and conscious expression of the will of the data subject, the content of which is the permission of the data subject to the processing of personal data.