1. INTRODUCTION

We strive to protect your personal data and privacy.

This privacy policy (hereinafter referred to as the "Policy") explains how we may collect and process your personal data. You will also find here information about your rights in relation to the personal data we process.

"Personal data" is any information that can be used to identify you or that is associated with you as a natural person.

Please do not provide us with any personal information if you do not want it to be used as described in this Policy.

These Principles apply to the processing of your personal data related in particular to:

  1. by providing information that you request from us;
  2. using our services;
  3. sending information about the events that we organize or about the events of our tenants in the form of an information newsletter; and
  4. using our website or profiles on the social networks Facebook (Meta Platforms) and Instagram and the Internet video file sharing server YouTube.

2. COLLECTION OF INFORMATION

2.1. General

We collect personal data directly from you (even if you communicate with us e.g. via e-mail), from our clients (especially from tenants of commercial premises in the OC SHOPLAND KARLOVY VARY complex, Chebská 370, 360 06 Karlovy Vary - Dvory) or by own activities (e.g. polls or report photos at marketing events held in the OC SHOPLAND KARLOVY VARY complex).

Furthermore, we may obtain personal data from third parties, such as recruitment agencies, information or service providers, publicly available records, etc.

We may collect current and historical personal data including your name, contact details, employer identification, positions and details of enquiries/complaints. We may also collect personal data about your subsequent dealings with us, including any contact that has taken place between us, whether in person, by telephone, by e-mail or online.

The provision of personal data may be either a legal or contractual requirement. We will inform you properly and in a timely manner about this fact, as well as whether you, as a data subject, are obliged to provide the relevant personal data, and about the possible consequences of not providing this data. 

Your personal data will not be used to make decisions purely on the basis of automated processing or profiling.

2.2. Potential business cooperation

If you are interested in doing business with our company and provide us with personal data via e-mail, this data will only be used as part of an internal assessment process and will not be passed on to anyone outside our company. Exceptionally, it may happen that we are forced to provide your personal data to third parties in connection with legal regulations, e.g. at the request of state administration authorities.

2.3. Personal data obtained from a third party who is not the subject of this data

In the event that your personal data was not obtained directly from you, we will inform you in an appropriate manner about the source from which the personal data originates and, where appropriate, whether the data originates from publicly available sources.

3. PROCESSING

3.1. We may process your personal data if:

  1. it is necessary for the performance of the contract with you or our clients; or
  2. you give your consent to this processing; or
  3. we consider such processing necessary to fulfill our legitimate interests in accordance with your reasonable expectations and minimal impact on your privacy; or
  4. this is required by law or other legal regulation.

We use your personal data to:

  1. for marketing purposes, especially for sending Newsletters, Magazines and any commercial messages; 
  2. providing and improving our services;
  3. maintaining and developing our relationship with you;
  4. improving our internal organization;
  5. fulfilment of our legal obligations;
  6. monitoring and analysis of our business.

We will only keep your personal data for as long as is reasonably necessary in the circumstances or as required by law. Personal data collected in connection with the provision of our services will not be stored for a longer period of time than is required by valid and effective legal regulations, or not for longer than is necessary for the purposes for which they are processed. 

3.2. The personal data we process mainly includes:

  1. basic information such as your first and last name and your relationship to us or our clients;
  2. contact details, such as postal address, email address and telephone number;
  3. financial information, such as payment information;
  4. information regarding the use of our website (see Information about cookie files - CN);
  5. information you provide to us in order to use our services;
  6. information that you provide to us in order to establish a commercial relationship;
  7. Your visual records (photographs) and any other information you provide to us yourself;
  8. Your personal data, which you publish in your comment below our post when you visit the OC SHOPLAND KARLOVY VARY profiles on the social networks Facebook (Meta Platforms) and Instagram, or the OC SHOPLAND KARLOVY VARY profile on the Internet video sharing server YouTube, or if in your you mention us or the KARLOVY VARY Shopping Center in a post or comment; under certain circumstances we may also process personal data that you share publicly in your profile, for example email address, date of birth, telephone number, information about employment, education, family relationships, current place of residence and hometown;
  9. all the information we see when you send us a message or you start a chat with us, in particular through the Facebook Messenger platform, and which you send to us in a message, and in particular the time of sending the message, your first and last name (or pseudonym), profile picture, gender, country and language that you have chosen in the settings , time zone, whether you also use Instagram, etc.; however, if you do not comment on anything, tag any content published by us on social networks or on the YouTube internet server, or send us a message, we will not process any of your personal data.

4. TRANSFER AND SHARING

We do not sell or otherwise provide your personal data to other commercial entities.

4.1. We may share your personal information with third parties if:

  1. you have given us your consent;
  2. we have a legal obligation to do so;
  3. due to organizational changes within our company or the transfer of all or part of our business, we will have to transfer your information to new entities or third parties;
  4. in cases where it is important to pass on information to third parties with whom we cooperate (e.g. co-sponsored events);
  5. we transfer anonymous statistical information about our website users and related user information to trusted third parties, including analysts and search engine providers.

4.2. We may share your personal information with certain trusted third parties in accordance with the agreements we have with them. It is mainly about:

  1. our professional advisors and auditors;
  2. contractors who provide us with certain support services, such as sending a Newsletter;
  3. providers of information systems and IT service providers;
  4. third parties involved in organizing events for our customers.

For the reasons set forth in this Policy, your personal information may be disclosed to government agencies, courts, and law enforcement agencies. We will use our best efforts to notify you in advance unless prohibited by law.

For information about entities with which we currently cooperate and to whom we transfer some personal data, please refer to the list of recipients.

5. INFORMATION SHARING WITH JOINT ADMINISTRATOR AND WITHIN BRANCHES

We may share processed personal data with other companies within the group of which our company is a part, as well as with the joint administrator of OC SHOPLAND KARLOVY VARY by Cushman & Wakefield, s.r.o., with registered office at Purkyňova 2121/3, Nové Město, 110 00 Prague 1, ID number: 496 12 620, registered in the commercial register maintained by the Municipal Court in Prague, section C, entry 20834.

6. SECURITY

We apply measures necessary to securely store information in electronic or physical form and to prevent unauthorized access, changes or disclosure of information. Our information security policy is supported by a number of security standards, processes and procedures. We store information in areas with limited access or in electronic databases that require login details and passwords. We require our data storage providers to meet applicable industry security standards. All partners, employees and service providers who have access to confidential information are subject to confidentiality obligations.

7. COOKIES

Information about which cookies we use is available here.

8. YOUR RIGHTS

Regulations on the protection of personal data grant you the following rights:

8.1. Right of access, which is your right to request information (confirmation) from us as to whether or not your personal data is being processed. If we process your personal data, you have the right to receive them from us together with other information related to their processing.

8.2. By exercising the right to rectification, you will obtain the correction of inaccurate personal data concerning you without undue delay. Taking into account the purposes of processing, you as a data subject have the right to supplement incomplete personal data, including by providing an additional statement.

8.3. The right to erasure is our obligation to dispose of the personal data we process about you if at least one condition is met:

  1. personal data are no longer needed for the purposes for which they were collected or otherwise processed;
  2. you revoke your consent to the processing of your personal data and there is no other legal reason for processing them on our side;
  3. you object to the processing of your personal data and there are no overriding legitimate reasons for the processing on our side;
  4. personal data were processed illegally;
  5. personal data must be deleted to comply with our legal obligation;
  6. (f)    personal data was collected in connection with the offer of information society services. 

The above conditions do not apply if the processing of personal data is necessary:

  1. for the exercise of the right to freedom of expression and information; 
  2. for the fulfillment of a legal obligation that requires processing according to the law of the European Union or a member state of the European Union (e.g. according to the law of the Czech Republic), which applies to us, or to fulfill a task carried out in the public interest with which we are entrusted;
  3. for reasons of public interest in the field of public health;
  4. for the purposes of archiving in the public interest, for the purposes of scientific or historical research or for statistical purposes, if it is likely that the right to erasure would make it impossible or seriously jeopardize the fulfillment of the objectives of the said processing; or
  5. for the determination, exercise or defense of legal claims.

8.4. The right to restriction of processing is your right to have us restrict the processing of your personal data if:

  1. you deny the accuracy of the personal data that we process about you, for the time required for us to verify the accuracy of your personal data;
  2. the processing of your personal data is unlawful, but you refuse to delete it and instead request the restriction of its use;
  3. the processing of your personal data is no longer necessary on our part, but you require it for the determination, exercise or defense of your legal claims; or
  4. you have objected to processing for the fulfillment of a task carried out in the public interest or for the purposes of our legitimate interests or those of a third party, including related profiling, until it has been verified whether our legitimate reasons outweigh your legitimate reasons.

If the processing has been restricted on the basis of one of the above-mentioned reasons, the personal data concerned, with the exception of their storage, may only be processed with your consent or for the purpose of establishing, exercising or defending legal claims, for the protection of another natural or legal person or for reasons of important public interest of the European Union or a member state of the European Union. We are obliged to inform you in advance about the cancellation of restrictions on the processing of your personal data. 

We are obliged to inform you in advance about the cancellation of restrictions on the processing of your personal data.

8.5. The right to portabilityis your right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and the right to transfer that data to another controller, if:

  1. the processing of personal data is based on consent or a contract; and
  2. processing is done automatically.

When exercising your right to portability, you have the right to have your personal data transferred directly to another administrator. This does not apply if the transfer is not technically possible. The right to portability does not apply to processing necessary to fulfill a task carried out in the public interest or in the exercise of public authority.

8.6. The right to object to the processing of your personal data to fulfill a task carried out in the public interest or for the purposes of our legitimate interests or the legitimate interests of a third party, including profiling. If you exercise your rights, we will not further process your personal data until we prove serious and legitimate reasons that must prevail over your rights and interests. Furthermore, we may process such personal data if it is necessary for the exercise and defense of legal claims. In the event that an objection is raised to processing for direct marketing purposes, our legitimate grounds are no longer examined. 

8.7. Others
If we process personal data based on your consent, you have the right to revoke this consent at any time. Revocation of consent does not affect the legality of processing based on consent that was given before its revocation. 

If you would like to exercise any of your rights, please contact us at the address below. 

The information we process about you should be up-to-date and accurate. Please inform us of any changes to your personal data at the address below.

If you are not satisfied with the way we process your personal data, you have the right to file a complaint with the relevant supervisory authority, which in the Czech Republic is the Office for Personal Data Protection, Plk. Sochora 27, 170 00 Prague 7, e-mail: posta@uoou.gov.cz, official WWW: uoou.gov.cz.

9. MARKETING COMMUNICATIONS

If you are our customer, we can send you current messages related to our service offer. If you are not our customer, we need to obtain your consent before sending our unsolicited communications. If you no longer wish to receive our marketing communications, please let us know so that we can remove you from our distribution lists. You can contact us at the address below, or use the so-called "opt-out" option on each of our unsolicited communications.

10. UPDATE

We regularly review this Privacy Policy and reserve the right to change it.

11. CONTACTS AND OTHER INFORMATION

Administrator of personal data:
Shopping Mall Karlovy Vary s.r.o., with registered office Londýnská 730/59, 120 00 Prague

And
Cushman & Wakefield, s.r.o., with registered office Purkyňova 2121/3, Prague 1, 110 00 Prague,
Deputy personal data manager: Center Manager, Property Manager, Facility Manager
Delivery address: Správa centra SHOPLAND KARLOVY VARY Karlovy Vary, Chebská 370, 360 06 Karlovy Vary - Dvory
E-mail: adventumkarlovyvary@gmail.com
Phone number: +420 720 982 385

Last updated: April 2024