Personal Data Protection Policy

What entitles us to process your personal data?

You can rely on us to always process your personal data in accordance with the GDPR and always based on  a valid legal basis. According to Article 6 GDPR, we can only process your personal data if:

• you give us your freely given, specific, informed and unambiguous consent;
• the processing is required by law, and we do so in order to comply with a legal obligation;
• the processing is necessary for the performance of a contract to which you are a party, or in order to take steps prior to entering into such a contract
• we have a legitimate interest in processing your personal data and such legitimate interest is not overridden by your rights and freedoms regarding the protection of your privacy.

How do we process personal data?

NEWSLETTER

If you grant us your consent, we will process your personal data for the following purposes, for the following periods and based on the following legal basis:

If you are interested in news from our business and also from the Ambiente network, we would be happy to send you a marketing communication to your e-mail from time to time - but only if you give us your consent. 

You can find a list of all companies whose newsletters we may share with you [here].

If you no longer wish to receive these newsletters from us, you can always withdraw your consent by following the instructions below or by clicking the unsubscribe link included in every marketing communication.

Who else may have access to your personal data?

Your personal data may be disclosed to other companies engaged by us to support activities related to the distribution of newsletters, such as IT service providers or marketing agencies.

Access to personal data by these third parties and any processing on their part is always carried out based on a data processing agreement and under conditions set forth by applicable legal regulations

We are always happy to provide you with specific information regarding individual recipients of your personal data

We do not transfer personal data outside the EU.

What rights do you have in relation to the processing?

As we process your personal data, you have several rights under applicable data protection legislation. We would like to inform you of these rights, including the conditions under which they can be exercised and any possible limitations

Right of access

You have the right to contact us and request information as to whether or not we are processing your personal data. In addition, you may request further details about such processing, including the purposes, categories of data involved, recipients, retention periods and your other rights

You also have the right to obtain  a copy of all personal data we process about you. The only reason we may refuse to provide this is if doing so would adversely affect the rights and freedoms of other  data subjects.

Right to rectification

If you discover that the personal data we process about you is inaccurate (e.g. outdated address or contact details), you have the right to request that we rectify or complete incomplete personal data, based on a statement you provide.

Right to erasure (right to be forgotten)

We only process your personal data for the necessary period specified by us and delete it thereafter. However, you may also request that we erase your personal data if any of the following applies:

• the personal data is no longer necessary in relation to the purposes for which they were collected;
• you withdraw your consent on which the processing is based and there is no other legal ground for the processing;
• you object to the processing based on legitimate interest and we determine that your rights override our interests (in case of direct marketing, the data will be erased immediately);
• the personal data have been unlawfully processed;
• the personal data have to be erased for compliance with a legal obligation under Czech or European law.

Please note, we may not always be able to comply with your request. We may need to retain your data where necessary:

• for exercising the right of freedom of expression and information;
• for compliance with a legal obligation under Czech or European law;
• for reasons of public interest in the area of public health;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes;
• for the establishment, exercise or defence of legal claims.

Right to restriction of processing

You may request that we restrict the processing of your personal data – meaning we will store it but not otherwise process it – under the following circumstances:

• you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
• the processing is unlawful and you oppose the erasure of the personal data and requests the restriction of their use instead;
• we no longer need the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims;
• you object to processing based on legitimate interest, pending the verification whether our legitimate grounds override yours.

Right to portability

If your personal data is processed by automated means and the processing is based on your consent or necessity for the performance of a contract, you have the right to data portability. This means we will provide you with your personal data in a structured, commonly used and machine-readable format, or transmit it directly to another controller, if technically feasible.

Right to object 

If we process your personal data based on legitimate interest, you have the right to object to such processing. In the case of processing for direct marketing purposes, your objection does not require justification and we will stop processing your data for that purpose immediately, as required by GDPR.

For example, if we send you marketing emails about products or services similar to those you’ve previously purchased (based on the so-called "customer exemption"), you can object at any time by contacting us via email, by opting out during registration or purchase, or by clicking the unsubscribe link at the bottom of each marketing message.

In other cases, we have the right to review your objection and verify whether your rights override our legitimate interest.

Right to withdraw consent

If we process your personal data based on your consent, you may withdraw your consent at any time. In such cases, we will stop processing your data, and – unless otherwise required by law – we will delete it.

Please note that if there is another valid legal basis for processing your data, we may continue processing it even after you withdraw your consent.

Right to complain

If you believe that we are not handling your personal data properly, you have the right to file a complaint with the Office for Personal Data Protection or take your claims to court.

How can you contact us?

If you wish to exercise any of your rights, or if you have any questions or require further information regarding the processing of personal data by Akantýna, s.r.o., you can contact us here: ambikarta@ambi.cz or in writing to AMBI CZ, s.r.o., Maiselova 38/15, 110 00 Prague 1.

This Personal Data Protection Policy is effective as of 1. 3. 2025.