Personal data processing principles

Tommi CZ s.r.o., with registered office in Písek, Za Nádražím 2569, Postal Code 39701, ID No.: 26095700 ("Company") complies in its activities with all the principles of personal data protection as they result from the Regulation of the European Parliament and of the Council EU 2016/679 on the protection of natural persons about the processing of personal data and the instructions to data subjects. The main objective of the Company in the area of personal data protection is to ensure consistency and a high level of protection of natural persons, our business partners, so that their data cannot be misused.

To this end, the Company has carried out an extensive internal audit, based on which it has implemented appropriate practical measures aimed at even greater protection of the personal data of customers, and natural persons.

The Company expressly declares that all data collected from customers is used exclusively for the Company's internal use and is not disclosed to third parties. An exception is made for external carriers, to whom the personal data of customers are transferred to the minimum extent necessary for the smooth delivery of goods, another exception is situations related to distribution or payment related to ordered goods.

In our business activities, we are always and above all ready to defend the interests of our customers and business partners to avoid interference with their rights, especially in the area of personal data protection, in particular we comply with the principles of transparency and fairness of processing. We always ensure that all the rights of our customers as data subjects are preserved (including the right to be informed, the right of access to personal data, the right to rectification, the right to erasure, the right to limited processing, the right to data portability, the right to object or the right not to be subject to automated individual decision-making, including profiling).

RIGHT OF ACCESS to Personal Data. The data subject may at any time request from the Company confirmation from the Company whether or not Personal Data concerning him or her is being processed, or whether or not automated decision-making, including profiling, if any, is taking place based on the processing of Personal Data. If Personal Data is processed, for what purpose, to what extent, to whom it is disclosed, for how long it will be processed, and whether he/she has the right to rectification, erasure, restriction of processing or to object. In addition, the Data Subject may request to be told where the Company obtained the Personal Data. The Data Subject has the right to obtain a copy of their Data.

PRÁVO NA OPRAVU Osobních údajů, což znamená, že Subjekt údajů může požádat Společnost o opravu či doplnění Osobních údajů, pokud by byly nepřesné či neúplné.

The RIGHT TO ERASE Personal Data means that the Company must erase the Data Subject's Personal Data if it is no longer needed for the purposes for which it was collected or otherwise processed if the Data Subject withdraws consent and there is no further reason for the processing, if the Data Subject objects to the processing and there are no overriding legitimate grounds for the processing, or if the processing or erasure is required by law.

THE RIGHT TO LIMIT PROCESSING OF PERSONAL DATA means that if a Data Subject makes a request that raises disputed issues about the processing of his or her Personal Data (e.g. disputed accuracy, disputed purpose or reason for processing), the Company may only store the Personal Data and further processing is subject to the Data Subject's express consent or for the establishment, exercise or defense of legal claims.

RIGHT TO DATA TRANSMISSIBILITY means that the Data Subject has the right to obtain his or her Data that he or she has provided to the Company with consent to process or for the performance of a contract in a structured, commonly used, and machine-readable format and, where technically feasible, the right to have the Company transfer that data to another controller.

THE RIGHT TO OBJECT to the processing of Personal Data means that the Data Subject may lodge a written or electronic objection to the processing of his or her Data with the Company. Once an objection has been raised, the Company may not further process the Personal Data unless it can demonstrate compelling legitimate grounds for processing that override the interests or rights and freedoms of the Data Subject.

If you have any questions, comments, or specific rights, please contact us at this email in writing at the Company's registered office.

In Písek24. 5. 2018

For the data controller - Tommi CZ s.r.o., Michal Zdražil,, +730 515 429 , in charge of the GDPR agenda