Adam Stefan Czap and BiyrLab (the “BiyrLab” or “we”) process the personal data of BiyrLab Customers, including food ordering, and visitors to the biyrlab.com website (the “Website”).
1. PERSONAL DATA ADMINISTRATORS
Adam Stefan Czap and BiyrLab act as joint data controllers in connection with the processing of Customer’s personal data in the countries listed below. This means that BiyrLab and Adam Stefan Czap determine the purposes and means of the processing of personal data.
Adam Stefan Czap has been designated as the person responsible for processing all requests and inquiries from data subjects related to the processing of personal data by BiyrLab on behalf of local joint administrators.
2. CONTACT DETAILS OF BiyrLab
Name: Adam Stefan Czap
Address: Pod Císařkou 3262, Praha 150 00
E-mail address: firstname.lastname@example.org
BiyrLab has appointed a Data Protection Officer, whom you can contact via the above contact details.
3. PERSONAL DATA WE PROCESS AND THEIR SOURCES
The personal data we collect and process can be divided into two main categories: data and analytical data.
Customer Data is your personal data on whose behalf you use the BiyrLab Services (the “Customer”), which is provided directly to us. We are entitled to collect the Customer’s data in various ways, including on the basis of a contract for the provision of services with the Customer or registration for the BiyrLab Services, ordering an information newsletter or filling in a form. Please note that we also collect information about all transactions and payments you make through the BiyrLab Services.
Data necessary to use the Biyrlab Services
The following personal data that we collect and process is necessary for the proper performance of the contract entered into between you and us, for the purposes of our legitimate interests in fulfilling our contractual obligations to the Customer and for the purpose of fulfilling our legal obligations.
After concluding the contract for the provision of services with the Customer, he will provide us with your full name and e-mail address.
When registering for the BiyrLab Services and setting up a customer account, you must provide us with the following information:
Customer data that you provide voluntarily
You can share your customer experience by providing us with the following information:
Additional account information:
More information. We may also process other information that you voluntarily provide to us, such as:
In addition to the customer data you provide to us, we also process some of your personal data that is provided to us by a third party.
Although we do not commonly use analytics data to identify you as an individual, we sometimes recognize you from it, either alone or in combination or in conjunction with customer data. In such situations, according to the valid legal regulations, analytical data can also be considered as personal data, and we handle them in this way.
We are entitled to automatically collect the following Analytical Data when you visit or communicate within the BiyrLab Services:
Device information. We collect the following information about the technical equipment you use when you use the BiyrLab Services:
Usage information. We collect information on how you use the BiyrLab Services:
We use a variety of technologies, including cookies and web beacons, to collect and store Analytical Data and other information when Customer visits the BiyrLab Services.
The customer is entitled to set up his internet search engine and thus reject cookies or be notified of any new cookies. Information on how to set cookies on some frequented search engines can be found, for example, via the following links:
Please note that some parts of the BiyrLab Services may not work properly if you reject cookies.
Web beacon is a technology that allows you to identify website visitors and e-mail readers and, for example, find out that an e-mail has been read.
Web analytics services
BiyrLab uses Google Analytics and other web analytics services to generate analytics data and reports on how visitors use the Website and how to improve BiyrLab Services. An overview of Google Analytics can be found at Google Analytics. You can opt out of Google Analytics through the following search engine: Google Analytics opt-out add-on.
4. PURPOSES AND LEGAL REASONS FOR PROCESSING YOUR PERSONAL DATA
There are several purposes for which BiyrLab processes your personal data. Some of the following may apply at the same time:
for the purpose of providing the BiyrLab Services and fulfilling our contractual obligations (legal reason: performance of the contract and legitimate interest)
BiyrLab processes your personal data in order to be able to offer you the BiyrLab Services on the basis of a contract you enter into with it or for other reasons necessary for the performance of the contract concluded between you and BiyrLab. BiyrLab is also entitled to process personal data if this is necessary for an interest that is legal and important to BiyrLab.
We use the data, for example, to process your requests, communicate with you, process your payment and any (possible) financial compensation, and provide our partners (couriers) with the information necessary to prepare or deliver your order. If you contact customer service, we will use the information you provide to answer your questions or resolve your complaint.
in order to fulfill our legal obligations (legal reason: fulfillment of legal obligations)
BiyrLab processes your data in order to fulfill its legal obligations. This data includes the data necessary to fulfill the obligation to keep accounts and provide information to competent authorities, such as financial administration.
for the purpose of handling complaints and court proceedings (legal reason: legitimate interest)
BiyrLab is entitled to process personal data related to the handling of complaints, debt collection and court proceedings. We are also authorized to process data in order to prevent fraud and misuse of our services and to ensure the security of data, systems and networks.
for customer communication and marketing purposes (legal reason: legitimate interest)
BiyrLab processes your personal data in order to contact you regarding the BiyrLab Services and inform you of related changes. Your personal data is also used for the purpose of marketing the BiyrLab Services. Processing is based on legitimate interest, ie when we personalize our offers, provide you with more relevant services and analyze information about your interests and feedback for the purpose of developing our services.
in order to improve quality and analyze trends (legal reason: legitimate interest)
In order to improve the quality of the BiyrLab Services, BiyrLab is also entitled to process information about how you use it, eg by analyzing trends in the use of the BiyrLab Services. Personal data can also be used, for example, for customer satisfaction reports, so that we can ensure that our services meet your needs. Whenever possible, we only use aggregate data that is not personalized for this purpose.
Legal reasons for processing
We process your personal data in order to meet our contractual obligations to you and legal obligations. We also process your personal data for the purpose of our legitimate interest, namely the management of our company, the maintenance and development of our business activities and the creation and maintenance of relationships with customers. If we use your data for the purposes of our legitimate interest, we always balance both our interests and your right to privacy, eg we offer you the opportunity to reject marketing messages in a simple way and we use data that is not personalized, if possible.
In some sections of the BiyrLab Services, you may be asked to give your consent to the processing of personal data. We do not process personal data without your consent. You can revoke your consent at any time.
5. TRANSMISSION OF DATA TO COUNTRIES OUTSIDE EUROPE
BiyrLab stores your personal data mainly within the European Economic Area. However, the entities that provide us with services and our operations are located in several places. For this reason, we and the entities that provide us with the services are entitled to transfer your personal data and have access to them even in jurisdictions outside the European Economic Area and the Customer’s permanent residence.
We take steps to ensure an adequate level of protection of the Customer’s personal data in the jurisdictions where they are processed. We provide adequate protection when transferring personal data outside the European Economic Area on the basis of a series of agreements with entities that provide us with services, in particular standard contractual clauses, or in another form.
We will provide you with detailed information on the transfer of personal data when you contact us at any of the above addresses.
We only share your personal information with a third party outside BiyrLab under the following conditions:
We share your personal information with a third party (eg the courier who delivers the order) to the extent that it needs it in order to provide the BiyrLab Services. We are also authorized to provide your personal information to our affiliates or authorized entities and partners who provide or cooperate with us (including data storage, accounting, sales and marketing) to process for us, and to entities that provide payment services, to process your payments for us.
Please keep in mind that if you provide your personal data to a third party directly, eg via a link in the BiyrLab Services, this data will be processed in accordance with that third party’s policies and standards.
Partners for the purpose of providing BiyrLab Services
We pass on your personal data necessary to provide the BiyrLab Services to a third party, such as the Partner who prepares or delivers the order, the courier service that delivers the order.
for legal reasons and on the basis of legal procedures
We may share your personal information with a third party outside BiyrLab if we believe in good faith that access to and use of personal information is reasonably necessary to: (i) comply with all applicable laws and regulations or court decisions; (ii) detect, prevent and resolve fraud, crime, security and technical issues; or (iii) protect the interests, property and safety of BiyrLab, the Customer and the public, as required by law. If possible, we will inform you of such processing of personal data.
for other legitimate reasons
If BiyrLab is involved in a merger, acquisition or sale of a business, we are entitled to pass on your personal data to an interested third party. However, we will continue to maintain the confidentiality of all your personal information. We will inform all our affected Customers about the transfer of personal data and that their handling will be governed by other personal data protection principles.
with express consent
Sharing your personal information with a third party outside BiyrLab is only possible with your express consent. You have the right to withdraw this consent at any time free of charge; contact us for this purpose.
7. STORAGE PERIOD
BiyrLab does not store your personal information longer than permitted by law and as necessary to provide the BiyrLab Services or their respective parts. The storage time depends on the nature of the information and the purpose of its processing. The maximum storage time may therefore vary depending on the purpose. BiyrLab takes reasonable steps to keep accurate personal information and delete personal information that is incorrect or unnecessary.
Most of the Customer’s personal data related to his BiyrLab Customer account will be deleted 90 days after the Customer cancels this account. After this period, only such personal data of the Customer specified in his customer account, the processing of which is required by law or which are reasonably necessary to meet our legal obligations or satisfy our legitimate interests, such as handling complaints, accounting, internal reporting and settlement, may be stored. . All personal data of the Customer related to his customer account will be deleted 10 years after the Customer has canceled his BiyrLab Services account, except for personal data necessary in certain exceptional situations, such as legal proceedings.
We store analytical data for Customers who do not have a BiyrLab Services account for a period of 90 days.
8. YOUR RIGHTS
Right of access
You have the right to access your personal data and information about what personal data we process. You have the opportunity to view certain personal data through a customer account of BiyrLab Services, or request a copy of personal data. Use the contact details above.
The right to withdraw consent
If the processing is based on the Customer’s consent, the Customer is entitled to revoke this consent at any time free of charge. Withdrawal of consent may lead to restrictions on the use of the BiyrLab Services. Withdrawal of consent does not affect the lawfulness of the processing prior to its withdrawal.
Right to make corrections
You have the right to correct and supplement the incorrect and incomplete information we hold about you; contact us for this purpose. You may correct or update certain personal information through your BiyrLab Customer Account.
Right to delete
You are also entitled to ask us to delete your personal data from our system, eg when the data is no longer needed for the purpose for which it was collected. We will comply with your request unless we have a valid reason not to do so. Please note, however, that if you wish to delete your data, we will no longer be able to provide you with the BiyrLab Service or any portion thereof.
The right to object
You have the right to object to a certain use of personal data if this data is processed for a purpose other than that necessary to provide the BiyrLab Services or to fulfill legal obligations. E.g. you can request that we do not process your personal data for direct marketing or profiling purposes. If you object to the further processing of personal data, you may have limited access to the BiyrLab Services.
The right to restrict processing
You have the right to request restrictions on the processing of personal data, eg if the data has not yet been deleted or corrected or the objection has been settled, or if we have no legitimate reason to process your data. If processing is restricted, we will only store your personal data, but will no longer process it. E.g. if you object to the accuracy of your personal data, this data will not be processed until it is ensured that this data is accurate. However, your ability to use the BiyrLab Services may be limited in such cases.
Right to data portability
If the data is processed automatically and on the basis of a contract or consent, you have the right to obtain the personal data you have provided to us in a structured and commonly used format and to pass it on to a third party.
How to exercise these rights
You will exercise the above rights by letter or e-mail sent to our address above, in which you will provide the following information: name, address, e-mail address and telephone number. We are entitled to request additional information necessary to confirm the identity of the Customer. We have the right to reject or charge a request that is unreasonably repeated, disproportionate, or manifestly unfounded.
9. DIRECT MARKETING
Based on the relationship between you as a customer and BiyrLab, we are entitled to send you information, news and offers concerning the BiyrLab Service. In other cases, we use your data for direct marketing only with your express consent. The customer has the right to prohibit us from using his personal data for the purposes of direct marketing, market research and profiling for the purposes of direct marketing. The customer exercises this right by contacting us at the above address or using the functions of the BiyrLab Services and refusing to send direct marketing messages (Profile à Settings à Push marketing opt-out) or using the link to cancel the sending of direct marketing messages.
10. FILING A COMPLAINT
If the Customer believes that we are processing his personal data in violation of applicable data protection legislation, he is entitled to file a complaint with the relevant authority for personal data protection supervision. The customer is also entitled to lodge a complaint with the competent data protection authority in his country of residence.
11. INFORMATION SECURITY
We apply administrative, organizational, technical and physical measures to protect the personal data we collect and process. These measures include, but are not limited to, encryption, firewalls, security devices, and access rights systems. The purpose of our security controls is to maintain an adequate level of data confidentiality, integrity, availability, resilience and ability to recover. We regularly test the security of BiyrLab Services, systems and other assets.
In the event of a breach of security, which is likely to have a negative impact on the privacy of Customers, we will notify the relevant Customers and other parties involved, including the competent authorities, if applicable under applicable data protection legislation, as soon as necessary.