Cart

 

 

PRIVACY POLICY

Adam Stefan Czap and BiyrLab (the “BiyrLab” or “we”) process the personal data of BiyrLab Customers, including food ordering, and visitors to the biyrlab.com website (the “Website”).

The term “BiyrLab Services” used in this Privacy Policy refers to both the Website. The terms “Customer” and “you” in this Privacy Policy refer to our Company’s customers and prospects, our affiliates’ customers and prospects, agents and prospects, and BiyrLab Customer. You become a BiyrLab Customer as soon as you register for the BiyrLab Service and establish a Customer Account or create an Order.

In our privacy policy, we describe, among other things, the types of personal data we process, the way we process them and how you, the data subject, can exercise your rights (eg the right to object, the right to access).

This Privacy Policy may be amended as necessary due to changes in data processing practices or other reasons. The current version of this policy can be found on the Website. We will not substantially change this Privacy Policy or limit your rights without prior notice to you.

1. PERSONAL DATA ADMINISTRATORS

This Privacy Policy applies to the processing of personal data by BiyrLab.

Adam Stefan Czap and BiyrLab act as joint data controllers in connection with the processing of Customer’s personal data in the countries listed below. This means that BiyrLab and Adam Stefan Czap determine the purposes and means of the processing of personal data.

Adam Stefan Czap has been designated as the person responsible for processing all requests and inquiries from data subjects related to the processing of personal data by BiyrLab on behalf of local joint administrators.

2. CONTACT DETAILS OF BiyrLab

Name: Adam Stefan Czap 

IČ: 01117025 

Address: Pod Císařkou 3262, Praha 150 00

E-mail address: info@biyrlab.com

biyrlab.com 

Name: BiyrLab

BiyrLab has appointed a Data Protection Officer, whom you can contact via the above contact details.

3. PERSONAL DATA WE PROCESS AND THEIR SOURCES

The personal data we collect and process can be divided into two main categories: data and analytical data.

Customer data

Customer Data is your personal data on whose behalf you use the BiyrLab Services (the “Customer”), which is provided directly to us. We are entitled to collect the Customer’s data in various ways, including on the basis of a contract for the provision of services with the Customer or registration for the BiyrLab Services, ordering an information newsletter or filling in a form. Please note that we also collect information about all transactions and payments you make through the BiyrLab Services.

Data necessary to use the Biyrlab Services

The following personal data that we collect and process is necessary for the proper performance of the contract entered into between you and us, for the purposes of our legitimate interests in fulfilling our contractual obligations to the Customer and for the purpose of fulfilling our legal obligations.

After concluding the contract for the provision of services with the Customer, he will provide us with your full name and e-mail address.

When registering for the BiyrLab Services and setting up a customer account, you must provide us with the following information:

  • name and surname
  • telephone number
  • email address
  • information about your payment card such as its number and expiration date (data necessary to order food through the BiyrLab Services, which, however, BiyrLab does not store because it uses third party services for payment processing purposes)

Customer data that you provide voluntarily

You can share your customer experience by providing us with the following information:

Additional account information:

  • photo
  • delivery address
  • location data (if you agree to the processing of your location data)
  • Additional information that you provide either when you create a customer account or later when you edit your profile

More information. We may also process other information that you voluntarily provide to us, such as:

  • information that you provide as part of the evaluation of our services
  • marketing consent or disagreement
  • information you provide to us by phone or email or in a chat, including call recordings with our customer service department

In addition to the customer data you provide to us, we also process some of your personal data that is provided to us by a third party.

Analytical data

Although we do not commonly use analytics data to identify you as an individual, we sometimes recognize you from it, either alone or in combination or in conjunction with customer data. In such situations, according to the valid legal regulations, analytical data can also be considered as personal data, and we handle them in this way.

We are entitled to automatically collect the following Analytical Data when you visit or communicate within the BiyrLab Services:

Device information. We collect the following information about the technical equipment you use when you use the BiyrLab Services:

  • device, its identification number and IMEI
  • Country
  • IP address
  • search engine type and version
  • operating system
  • internet service provider
  • your device’s ad identifier
  • visitor identifier

Usage information. We collect information on how you use the BiyrLab Services:

  • time spent within BiyrLab Services
  • communication within the BiyrLab Services
  • information about orders you place through the BiyrLab Services
  • The URL of the website you visit before and after the BiyrLab Services
  • the date and time of your BiyrLab Service visits
  • sections of the BiyrLab Services that you visit
  • the products you are looking for within the BiyrLab Services

Cookies

We use a variety of technologies, including cookies and web beacons, to collect and store Analytical Data and other information when Customer visits the BiyrLab Services.

Cookies are small text files sent and stored on your device, which allow us to identify visitors to the BiyrLab Services and enable them to use them and create summary information about our visitors. We use cookies to improve the BiyrLab Services and services for our Customer. Cookies will not damage your device or files. We use cookies to tailor the BiyrLab Services and provide information in accordance with the interests of our individual Customers. Some cookies are necessary for the purpose of using and running the BiyrLab Service and are used, for example, to remember your choice of language and country. Other cookies collect information about how the BiyrLab Service is used, such as frequently visited content, in order to improve it. We may also use cookies for the purpose of advertising on the BiyrLab Services platform and on selected third-party platforms.

The customer is entitled to set up his internet search engine and thus reject cookies or be notified of any new cookies. Information on how to set cookies on some frequented search engines can be found, for example, via the following links:

Safari
Google Chrome
Internet Explorer
Mozilla Firefox

Please note that some parts of the BiyrLab Services may not work properly if you reject cookies.

Web beacon is a technology that allows you to identify website visitors and e-mail readers and, for example, find out that an e-mail has been read.

Web analytics services

BiyrLab uses Google Analytics and other web analytics services to generate analytics data and reports on how visitors use the Website and how to improve BiyrLab Services. An overview of Google Analytics can be found at Google Analytics. You can opt out of Google Analytics through the following search engine: Google Analytics opt-out add-on.

4. PURPOSES AND LEGAL REASONS FOR PROCESSING YOUR PERSONAL DATA

Purposes

There are several purposes for which BiyrLab processes your personal data. Some of the following may apply at the same time:

for the purpose of providing the BiyrLab Services and fulfilling our contractual obligations (legal reason: performance of the contract and legitimate interest)

BiyrLab processes your personal data in order to be able to offer you the BiyrLab Services on the basis of a contract you enter into with it or for other reasons necessary for the performance of the contract concluded between you and BiyrLab. BiyrLab is also entitled to process personal data if this is necessary for an interest that is legal and important to BiyrLab.

We use the data, for example, to process your requests, communicate with you, process your payment and any (possible) financial compensation, and provide our partners (couriers) with the information necessary to prepare or deliver your order. If you contact customer service, we will use the information you provide to answer your questions or resolve your complaint.

in order to fulfill our legal obligations (legal reason: fulfillment of legal obligations)

BiyrLab processes your data in order to fulfill its legal obligations. This data includes the data necessary to fulfill the obligation to keep accounts and provide information to competent authorities, such as financial administration.

for the purpose of handling complaints and court proceedings (legal reason: legitimate interest)

BiyrLab is entitled to process personal data related to the handling of complaints, debt collection and court proceedings. We are also authorized to process data in order to prevent fraud and misuse of our services and to ensure the security of data, systems and networks.

for customer communication and marketing purposes (legal reason: legitimate interest)

BiyrLab processes your personal data in order to contact you regarding the BiyrLab Services and inform you of related changes. Your personal data is also used for the purpose of marketing the BiyrLab Services. Processing is based on legitimate interest, ie when we personalize our offers, provide you with more relevant services and analyze information about your interests and feedback for the purpose of developing our services.

in order to improve quality and analyze trends (legal reason: legitimate interest)

In order to improve the quality of the BiyrLab Services, BiyrLab is also entitled to process information about how you use it, eg by analyzing trends in the use of the BiyrLab Services. Personal data can also be used, for example, for customer satisfaction reports, so that we can ensure that our services meet your needs. Whenever possible, we only use aggregate data that is not personalized for this purpose.

Legal reasons for processing

We process your personal data in order to meet our contractual obligations to you and legal obligations. We also process your personal data for the purpose of our legitimate interest, namely the management of our company, the maintenance and development of our business activities and the creation and maintenance of relationships with customers. If we use your data for the purposes of our legitimate interest, we always balance both our interests and your right to privacy, eg we offer you the opportunity to reject marketing messages in a simple way and we use data that is not personalized, if possible.

In some sections of the BiyrLab Services, you may be asked to give your consent to the processing of personal data. We do not process personal data without your consent. You can revoke your consent at any time.

5. TRANSMISSION OF DATA TO COUNTRIES OUTSIDE EUROPE

BiyrLab stores your personal data mainly within the European Economic Area. However, the entities that provide us with services and our operations are located in several places. For this reason, we and the entities that provide us with the services are entitled to transfer your personal data and have access to them even in jurisdictions outside the European Economic Area and the Customer’s permanent residence.

We take steps to ensure an adequate level of protection of the Customer’s personal data in the jurisdictions where they are processed. We provide adequate protection when transferring personal data outside the European Economic Area on the basis of a series of agreements with entities that provide us with services, in particular standard contractual clauses, or in another form.

We will provide you with detailed information on the transfer of personal data when you contact us at any of the above addresses.

6. BENEFICIARIES

We only share your personal information within BiyrLab and only when reasonably necessary for the purposes set out in this Privacy Policy.

We only share your personal information with a third party outside BiyrLab under the following conditions:

for the purposes set forth in this Privacy Policy, we share information with authorized service providers

We share your personal information with a third party (eg the courier who delivers the order) to the extent that it needs it in order to provide the BiyrLab Services. We are also authorized to provide your personal information to our affiliates or authorized entities and partners who provide or cooperate with us (including data storage, accounting, sales and marketing) to process for us, and to entities that provide payment services, to process your payments for us.

If personal data is processed by a third party on behalf of BiyrLab, we take appropriate contractual and organizational measures to ensure that your personal data is processed solely for the purposes set out in this Privacy Policy, in accordance with all applicable laws, our guidelines and in accordance with the relevant confidentiality obligations and security measures.

Please keep in mind that if you provide your personal data to a third party directly, eg via a link in the BiyrLab Services, this data will be processed in accordance with that third party’s policies and standards.

Partners for the purpose of providing BiyrLab Services

We pass on your personal data necessary to provide the BiyrLab Services to a third party, such as the Partner who prepares or delivers the order, the courier service that delivers the order.

for legal reasons and on the basis of legal procedures

We may share your personal information with a third party outside BiyrLab if we believe in good faith that access to and use of personal information is reasonably necessary to: (i) comply with all applicable laws and regulations or court decisions; (ii) detect, prevent and resolve fraud, crime, security and technical issues; or (iii) protect the interests, property and safety of BiyrLab, the Customer and the public, as required by law. If possible, we will inform you of such processing of personal data.

for other legitimate reasons

If BiyrLab is involved in a merger, acquisition or sale of a business, we are entitled to pass on your personal data to an interested third party. However, we will continue to maintain the confidentiality of all your personal information. We will inform all our affected Customers about the transfer of personal data and that their handling will be governed by other personal data protection principles.

with express consent

Sharing your personal information with a third party outside BiyrLab is only possible with your express consent. You have the right to withdraw this consent at any time free of charge; contact us for this purpose.

7. STORAGE PERIOD

BiyrLab does not store your personal information longer than permitted by law and as necessary to provide the BiyrLab Services or their respective parts. The storage time depends on the nature of the information and the purpose of its processing. The maximum storage time may therefore vary depending on the purpose. BiyrLab takes reasonable steps to keep accurate personal information and delete personal information that is incorrect or unnecessary.

Most of the Customer’s personal data related to his BiyrLab Customer account will be deleted 90 days after the Customer cancels this account. After this period, only such personal data of the Customer specified in his customer account, the processing of which is required by law or which are reasonably necessary to meet our legal obligations or satisfy our legitimate interests, such as handling complaints, accounting, internal reporting and settlement, may be stored. . All personal data of the Customer related to his customer account will be deleted 10 years after the Customer has canceled his BiyrLab Services account, except for personal data necessary in certain exceptional situations, such as legal proceedings.

We store analytical data for Customers who do not have a BiyrLab Services account for a period of 90 days.

8. YOUR RIGHTS

Right of access

You have the right to access your personal data and information about what personal data we process. You have the opportunity to view certain personal data through a customer account of BiyrLab Services, or request a copy of personal data. Use the contact details above.

The right to withdraw consent

If the processing is based on the Customer’s consent, the Customer is entitled to revoke this consent at any time free of charge. Withdrawal of consent may lead to restrictions on the use of the BiyrLab Services. Withdrawal of consent does not affect the lawfulness of the processing prior to its withdrawal.

Right to make corrections

You have the right to correct and supplement the incorrect and incomplete information we hold about you; contact us for this purpose. You may correct or update certain personal information through your BiyrLab Customer Account.

Right to delete

You are also entitled to ask us to delete your personal data from our system, eg when the data is no longer needed for the purpose for which it was collected. We will comply with your request unless we have a valid reason not to do so. Please note, however, that if you wish to delete your data, we will no longer be able to provide you with the BiyrLab Service or any portion thereof.

The right to object

You have the right to object to a certain use of personal data if this data is processed for a purpose other than that necessary to provide the BiyrLab Services or to fulfill legal obligations. E.g. you can request that we do not process your personal data for direct marketing or profiling purposes. If you object to the further processing of personal data, you may have limited access to the BiyrLab Services.

The right to restrict processing

You have the right to request restrictions on the processing of personal data, eg if the data has not yet been deleted or corrected or the objection has been settled, or if we have no legitimate reason to process your data. If processing is restricted, we will only store your personal data, but will no longer process it. E.g. if you object to the accuracy of your personal data, this data will not be processed until it is ensured that this data is accurate. However, your ability to use the BiyrLab Services may be limited in such cases.

Right to data portability

If the data is processed automatically and on the basis of a contract or consent, you have the right to obtain the personal data you have provided to us in a structured and commonly used format and to pass it on to a third party.

How to exercise these rights

You will exercise the above rights by letter or e-mail sent to our address above, in which you will provide the following information: name, address, e-mail address and telephone number. We are entitled to request additional information necessary to confirm the identity of the Customer. We have the right to reject or charge a request that is unreasonably repeated, disproportionate, or manifestly unfounded.

9. DIRECT MARKETING

Based on the relationship between you as a customer and BiyrLab, we are entitled to send you information, news and offers concerning the BiyrLab Service. In other cases, we use your data for direct marketing only with your express consent. The customer has the right to prohibit us from using his personal data for the purposes of direct marketing, market research and profiling for the purposes of direct marketing. The customer exercises this right by contacting us at the above address or using the functions of the BiyrLab Services and refusing to send direct marketing messages (Profile à Settings à Push marketing opt-out) or using the link to cancel the sending of direct marketing messages.

10. FILING A COMPLAINT

If the Customer believes that we are processing his personal data in violation of applicable data protection legislation, he is entitled to file a complaint with the relevant authority for personal data protection supervision. The customer is also entitled to lodge a complaint with the competent data protection authority in his country of residence.

11. INFORMATION SECURITY

We apply administrative, organizational, technical and physical measures to protect the personal data we collect and process. These measures include, but are not limited to, encryption, firewalls, security devices, and access rights systems. The purpose of our security controls is to maintain an adequate level of data confidentiality, integrity, availability, resilience and ability to recover. We regularly test the security of BiyrLab Services, systems and other assets.

In the event of a breach of security, which is likely to have a negative impact on the privacy of Customers, we will notify the relevant Customers and other parties involved, including the competent authorities, if applicable under applicable data protection legislation, as soon as necessary.