Privacy Policy
-
The personal data controller under Article 4, point 7 of the European Parliament and Council Regulation (EU) 2016/679 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”) is:
25 COFFEE ROASTERS s.r.o. ID: 199 77 123 Registered office: Roztocká 45/37, Sedlec, 160 00 Prague (hereinafter referred to as “controller”) -
The controller's contact details are:
Address: Roztocká 45/37, Sedlec, 160 00 Prague Email: salesb2c@25coffeeroasters.com Phone: +420 607188715 Website: https://25coffeeroasters.com/ -
Personal data refers to all information about an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
-
The controller has not appointed a data protection officer.
As part of our business activities as a controller, we process personal data mainly about our customers and users of our website.
What Personal Data Do We Process?
Personal Data You Provide to Us:
When you order goods and services, we need personal data to:
- Deliver the goods;
- Communicate any order-related issues;
- Inform you about the status of your order;
- Send you necessary documents related to the ordered goods.
Personal Data We Process for the Above Purposes:
- Identification Data
- First and last name;
- Username;
- Password;
- ID, VAT number (if purchasing as an entrepreneur).
- Contact Data
- Delivery address or billing address;
- Email;
- Phone number.
- Your Purchase History
- Data about ordered goods and services;
- Chosen delivery method;
- Chosen payment method;
- Account number from which the payment was made, or to which a refund should be sent in case of withdrawal from the contract.
If you contact us via email or customer service, we will process your personal data provided in this communication.
When paying by card online, you will be redirected to a secure payment gateway server. Your card details are not sent to our company but directly to the payment gateway provider in a secure transmission. The payment gateway further transmits the data to the respective banking institution, again in a secure transmission.
-
Personal Data of Third Parties Provided to Us:
If you provide us with personal data of third parties, it is your duty to inform the concerned person and obtain their consent to these personal data protection conditions.
-
Personal Data We Process Automatically:
When visiting our website, we may collect certain information:
- IP address;
- Date and time of access to our website;
- Information about the operating system;
- Information about your behavior on our website.
These data are anonymized for privacy reasons and cannot be linked to a specific user.
Why Do We Collect and Process Your Personal Data?
Our reasons for processing personal data:
- Purchase of goods and services – personal data is essential for completing transactions, communication with customers, processing orders, and delivering goods.
- Customer Care – personal data helps improve communication, resolve customer inquiries, and enhance our services, such as handling complaints and returns without the need to provide proof of purchase.
- User Account – personal data allows access to your user profile where you can view your order status.
- Marketing Purposes:
- Email Marketing – we send newsletters based on your consent. You can easily unsubscribe from these communications by sending an email or contacting us by phone to request the cancellation of these communications.
- Competitions – to enhance the credibility of marketing actions and competitions, we may photograph or record the winner with prior notice. The photo or video may only be used for presenting the competition's results.
- Governmental Control – we may process personal data for inspections conducted by public authorities.
Legal Bases for Processing Personal Data:
Contract fulfillment and closure – we process personal data for the purpose of concluding a purchase contract and delivering goods.
Legitimate Interest – we process personal data to provide relevant content that is of interest to you.
Consent – we process personal data based on your consent for sending commercial communications. Consent can be withdrawn at any time by notifying us via email: salesb2c@25coffeeroasters.com, or by phone at +420 607188715.
Transferring Personal Data to Third Parties
Instances where we transfer your personal data to third parties, where we act as the controller of your personal data:
Delivery of Goods
We transfer your personal data to the carrier to deliver the ordered goods. We provide the carrier with the recipient's name, delivery address, and phone number for contact purposes. If payment is made upon delivery, we also provide the amount to be paid. The carrier is authorized to process your personal data solely for the purpose of delivering the goods and must delete them immediately afterward.
Accounting, Administration, Marketing, Programming Activities
Personal data is processed as necessary during order processing, issuing documents, sending commercial communications, programming updates to our website, etc. We utilize external specialists for some of these activities. These entities are bound by confidentiality and cannot use your personal data for any other purpose.
Government Authorities
If a governmental authority requires us to provide your personal data, we are obliged to comply.
Insurance Company
In case of damage to goods received from you, e.g., for service, we submit your personal data to the insurance company with which we have an insurance contract. Personal data is used solely for processing the insurance claim.
Use of Cookies
Cookies are text files containing information that are downloaded to your device when you visit our website. Cookies are sent back to the website or another website that recognizes them upon each visit.
Cookies perform various functions, such as enabling efficient navigation between pages, remembering your preferences, and generally improving user experience. They also ensure that online advertisements are better tailored to your interests and behavior.
Our website uses the following cookies:
- Necessary Cookies: required for website operation, allowing login to secure areas and other basic functionalities. This category cannot be disabled;
- Analytical/Statistical Cookies: help us recognize and count visitors and understand how they use the website, which helps us improve site functionality. These cookies are only activated with your prior consent;
- Advertising Cookies: used to track preferences and display ads and other content that best matches your interests and online behavior. These cookies are only activated with your prior consent.
Please note that third parties (including external service providers) may also use cookies and/or access data collected by cookies on the website.
More information about cookies and their current list can be found via individual internet browsers, usually in the Developer Tools section.
Consent can be given via a checkbox in the cookie banner. You can later refuse cookies or set your browser to accept only certain cookies.
More information on managing cookies in specific browsers can be found at:
- Internet Explorer - https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome - https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en
- Firefox - https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
- Safari - https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac
- Opera - https://help.opera.com/en/latest/web-preferences/#cookies
- Microsoft Edge - https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
How Long Do We Process Your Personal Data?
We will process your personal data for the duration of the contractual relationship.
Personal data necessary to fulfill all our contractual or legal obligations must be processed regardless of your consent for the period stipulated by the relevant legal regulations (e.g., tax documents must be retained for at least 10 years).
If personal data is processed based on consent, they will be processed until you withdraw your consent.
Data Security
Your personal data is safe with us. We have implemented technical and organizational measures to prevent unauthorized access and misuse of your personal data. All measures are regularly checked and continuously improved. All communication between you (your device) and our servers is encrypted.
Login details are hashed, and all data stored on servers in data centers with restricted secure access are thoroughly checked and audited.
We use measures that correspond to current technological capabilities and provide adequate security.
Your Rights Regarding Personal Data Processing
Right of Access
You have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we transfer it, who else besides us processes it, and what your other rights are regarding the processing of your personal data. You can learn all this in this "Customer Data Protection" document. If you are unsure about which personal data we process about you, you can request an overview of these data as part of your right of access.
Right to Correction
If you find that the personal data we process about you is incorrect, inaccurate, or incomplete, you can either correct it yourself in your user account or contact us (salesb2c@25coffeeroasters.com, +420 607188715) so we can correct or complete it without undue delay.
Right to Erasure
In certain cases, you have the right to have your personal data erased. However, this right does not apply to data on documents we must retain by law. If we need your personal data to establish, exercise, or defend our legal claims, your request may be refused (e.g., if we have an outstanding claim against you or if a complaint is being processed). Your personal data will be erased without undue delay if any of the following reasons are met:
- We no longer need your personal data for the purposes for which we processed them;
- You withdraw your consent to the processing of personal data, and there is no other reason for further processing;
- You object to the processing of personal data, and upon evaluating the objection, it is found that in the specific situation, your interest outweighs our interest in processing the personal data;
- You believe that our processing of personal data no longer complies with generally binding regulations.
Please send your request for data deletion/removal to salesb2c@25coffeeroasters.com.
Right to Restriction of Processing
In certain cases, you can use the right to restrict the processing of personal data. We must restrict the processing of personal data when:
- You dispute the accuracy of personal data until we agree on what data is correct;
- We process your personal data without a sufficient legal basis (e.g., beyond what we need to process), but you prefer restriction over erasure (e.g., if you expect to provide us with such data in the future);
- We no longer need your personal data for the aforementioned processing purposes, but you require them for the establishment, exercise, or defense of your legal claims;
- You object to processing. While we investigate whether your objection is justified, we must restrict the processing of your personal data.
Right to Lodge a Complaint
Exercising the above rights does not affect your right to file a complaint with the relevant supervisory authority. You can exercise this right especially if you believe that we process your personal data unlawfully or in violation of generally binding legal regulations. You can lodge a complaint about our personal data processing with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7.
However, we would appreciate it if you first address any complaints directly with us. We always strive to resolve any misunderstandings to the satisfaction of both parties.
These Personal Data Protection Terms are valid and effective from 01.07.2024.