Privacy Policy
CONTROLLER’S CONTACT DETAILS
Blog platform: Bites of Prague www.bitesofprague.com
e-mail: info@bitesofprague.com
SCOPE
This privacy notice tells you what to expect us to do with your personal information when you make contact with us. The personal information we process is provided to us directly from you for one of the following reasons:
- You have made a complaint or inquiry to us (legal basis – legitimate interests; retention period – 3 years),
- You have made an information request to us (legal basis – legitimate interests; retention period – 3 years),
- You have subscribed to our e-newsletter (legal basis – consent and legitimate interests; retention period – from your last action 2 years, after this period we will refresh our legal basis and we will ask you if we can still keep in touch with you),
- You have left a comment under our review (legal basis – legitimate interests; retention period – the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue).
MARKETING
We use your e-mail address to send you our e-newsletter. With your button click on SUBSCRIBE you are giving us consent to process your personal data. After leaving a comment under our review we rely on our legitimate interests to send you an e-newsletter. You have the right to withdraw your consent, or to object to the processing of your personal data for this purpose at any time. If at any point you want to withdraw your consent please check the footer of our e-newsletter or email us. If you do that, we’ll update our records immediately to reflect your wishes. Please take note that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. We do not use any marketing cookies.
COMMENTS
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
MEDIA
As you can see, part of our reviews is also photos of food and interior from a visited place. We are not aiming to process the personal data of the data subject and to respect this, if it is possible, we blur necessary parts of photos to minimize the risk of direct identification of a person. We set basic criteria for determining whether or not this particular activity of taking photos is being done for personal or household purposes in the context of the exempt from the data protection regulation and full data controller responsibilities as it is established in Art. 2 (2) (c) GDPR and the way we see it, this processing falls out of the scope of GDPR.
Please, in case you have any complaints or concerns about the photo we posted on our site, do not hesitate to contact us with an explanation, of why we should remove it, and we will take a look at it together.
COOKIES
If you leave a comment on our site you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
With your consent, we also process analytics cookies on the basis of Section 89, Paragraph 3 of Act No. 127/2005 Coll., On Electronic Communications. For more detailed information about the cookies we use, please see our Cookie Policy. The lawful basis we rely on for the processing of analytics information is Art. 6 (1) (f) GDPR – legitimate interests. You have the right to object to the processing of your personal data for this purpose.
EMBEDDED CONTENT FROM OTHER WEBSITES
Blog posts on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
WHAT RIGHTS DO YOU HAVE OVER YOUR DATA?
Under GDPR, you have rights stated in Art. 15-22 GDPR, which we need to make you aware of. The rights available to you depend on our reason for processing your information
Your right to access
You have the right to get confirmation whether or not your personal data are processed by us and you can obtain access to this personal data and other information.
Your right to rectification
You have the right to ask us to rectify incorrect, inaccurate, or incomplete personal data.
Your right to erasure
You have the right to ask us to erasure your personal data in certain circumstances in accordance with Art. 17 GDPR (right to be forgotten), i.e. if we no longer need your personal data.
Your right to restriction of processing
You have the right to restriction of processing personal data, where one of the following grounds referred to in Art. 18 of GDPR applies.
Your right to data portability
You have the right to ask that we transfer the information you gave us from one organization to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.
Your right to object to processing
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal which is based on our legitimate interests. We shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims. The different situation is, where you object to our processing for marketing purposes, the personal data will no longer be processed for such purposes.
Does the handling of your personal data involve automated individual decision-making, including profiling?
Not applicable.
CHANGES TO THIS PRIVACY POLICY
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
IS THERE ANY SITUATION WE DISCLOSE YOUR INFORMATION TO THIRD PARTIES?
Not really, we do not use any data processors and we do not share your data with social media. Under certain conditions outlined in law, there can be a situation in which we may disclose your information to third parties, (such as law enforcement authorities) if it is necessary and proportionate for lawful, specific purposes.
WILL YOUR PERSONAL DATA BE TRANSFERRED TO A THIRD COUNTRY OR INTERNATIONAL ORGANIZATION?
Data stored by us will not be transferred to third countries or international organizations.
Google Analytics
In the case of using Google analytics cookies, we would like to stress that the analytics script does have not complete data about you. The geographic location of the server where your data is being anonymized is located in the EU. The sole purpose of this tracking is to know the number of visitors from mobile and desktop to decide what to implement for the blog in the future.
Standard contractual clauses are legal clauses written by the European Commission. They are part of a contract between Google Ireland Ltd. and Google LLC, and Google LLC must follow them. Standard contractual clauses tell Google LLC what it can and cannot do with your data.
You can deactivate the analysis by Google Analytics on our website and other websites at http://tools.google.com/dlpage/gaoptout.
CONCERNS
We keep high standards when it comes to processing your personal information. If you have queries or concerns, please contact us at info@bitesofprague.com and we’ll respond to you as soon as possible.
COMPLAINTS
If you remain dissatisfied, you can make a complaint about the way we process your personal information to a competent Data protection authority. There is one in each EU Member State. The place of our central administration is the Czech republic. Contact details of The Office for personal data protection of the Czech Republic: The Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7 Czech Republic, posta@uoou.cz, https://www.uoou.cz/.