Jérôme Lorieux (hereinafter also referred to as the “Company”) makes every effort to protect your personal data when processing it. In addition to Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “General Data Protection Regulation (GDPR)”), we comply with the applicable laws of the Czech Republic, in particular Act No. 110/2019 Coll., on the Processing of Personal Data.
All personal data we collect is processed only for legitimate purposes, for a limited period of time, and using the highest possible level of security.
By using this website, you agree to the Company’s policy regarding the handling of personal data. This policy may be amended by publishing a new version on this page.
The controller of your personal data is:
Jérôme Lorieux
+34 666 571 407
ateliercuisinemallorca@gmail.com
The protection of personal data of customers, all partners, and employees of the Company is our priority. If you have any questions regarding the processing of your personal data, please do not hesitate to contact us at the email address ateliercuisinemallorca@gmail.com.
Below you will find information about what personal data we process about our customers and website visitors, the legal grounds for processing, the purposes for which we use the data, whether we act as a controller or processor, whether we may transfer the data to others, and information about your rights related to the processing of personal data, including how to exercise them.
Why and on what legal basis we process your personal data
We process personal data of our customers, employees, and partners primarily on the basis of contract performance, legitimate interest, or compliance with legal obligations where required by law (e.g. Act No. 89/2012 Coll., No. 235/2004 Coll., No. 563/1991 Coll., and others). As a controller, we process only the data necessary to handle your order and provide services if you are our customer (contract performance), and if you are our employee, the data necessary for employment administration (legal obligation). On the basis of legitimate interest, we process, for example, your identification and contact data and information about ordered services for the purpose of protecting legal claims and for our internal records or control.
For the purpose of protecting legal claims, property protection, and our internal records and control, we process your data for the duration of the limitation period of 10 years and one year thereafter, taking into account claims raised at the end of the limitation period. In the event of judicial, administrative, or other proceedings, we process your personal data to the necessary extent for the entire duration of such proceedings and for the remaining part of the limitation period after their conclusion.
We also process, on the basis of our legitimate interest, your identification and contact data and data on ordered services for the purpose of sending offers by email; our legitimate interest here is the promotion of our products and services. For this purpose, we use personal data for a period of 36 months from the last order.
If you visit the Company’s website, we process data about your behavior on the website on the basis of our legitimate interest in order to obtain information that will allow us to improve the website in the future; our legitimate interest here is improving our services, creating statistics and reports, in particular monitoring website traffic, individual pages, and measuring advertising effectiveness; our legitimate interest is also measuring the effectiveness of our website and advertising expenditure.
We obtain data about your behavior on the website mainly, but not exclusively, from cookies, and for these purposes we use personal data for a period of 13 months.
What personal data we process
The data we process may include the following, depending on the nature of our relationship:
- identification data, meaning in particular name and surname, company ID (IČO) and VAT number (DIČ), and your position in the organization if you represent a legal entity,
- contact data, meaning personal data that enables us to contact you, in particular email address, phone number, and address,
- data on ordered products and services that you or your company have ordered from us, bank account numbers, or data on complaints submitted,
- data about your behavior on the website, data about the device from which you access our website, such as IP address and derived location, device identification, its technical parameters such as operating system and its version, screen resolution, browser used and its version, as well as data obtained from cookies and similar technologies for device identification,
- data related to visits to our premises or contact with employees, such as phone calls, messages sent via email or other technologies, including identifiers such as IP address.
Use of cookies
This website uses cookies for its functionality. When you visit our website, we store and subsequently read small files called cookies on your device. A cookie is a file of letters and numbers that may contain personal data and is stored in your web browser or on your computer’s hard drive. Some cookies are necessary for the proper display and functioning of the website, while others are used for analytics, traffic measurement, ad targeting, etc.
If you do not disable the use of third-party cookies and the transfer of your data to advertising and social networks in your browser and continue to use our website, we consider this as your consent to the use of such cookies and the transfer of your data to advertising and social networks. You can withdraw your consent at any time by disabling this function in your browser.
Who our processors are and to whom we may transfer your data
The Company does not transfer, sell, or otherwise disclose your personal data to third parties unless required by law or by a contract concluded between you and the Company.
The Company may use partners for its activities to whom it transfers certain personal data that it legitimately processes, provided that all required technical and organizational measures are met. All processors are carefully selected and meet all requirements, in particular under Article 28 of the General Data Protection Regulation (GDPR). Our processors include, but are not limited to, external accountants, marketing agencies, cloud service providers, or service companies.
Transfer of personal data outside the EEA
The Company does not transfer your personal data outside the European Economic Area (EEA).
Data retention period
We retain your personal data for a period corresponding to the nature of processing, the purpose of processing, and its legal basis. The retention period may therefore be derived, for example, from the duration of your contract with the Company, legal obligations, legitimate interests, or the period necessary to determine, exercise, or defend our legal claims. In all cases, however, we respect the principle of storage limitation and retain your data only for the time strictly necessary to fulfill the given purpose.
Your rights related to the processing of personal data
We respect your rights as a data subject and are committed to enabling you to exercise them. If at least one of the above reasons applies and the personal data is not necessary for other processing, we will be happy to comply with your request if you contact us via email at ateliercuisinemallorca@gmail.com. We will handle your request without undue delay, no later than 30 days from receipt. In justified cases, we are entitled to extend this period by 60 days; in such case, we will inform you of the extension and the reasons in advance.
- Right of access – you have the right to be informed about what data we process about you. This depends on the nature of our relationship – more information can be found in the introductory part of this Privacy Policy.
- Right to rectification – if you find that the information we process is incomplete or inaccurate, please contact us and we will correct it.
- Right to erasure – you have the right to have your personal data erased in certain specific cases, in particular the following situations:
- you have withdrawn your consent to processing,
- your data is no longer needed for the purpose for which it was collected,
- you object to processing based on legitimate interest and the Company determines that your interests prevail in the balancing test.
- Right to restriction of processing – provided certain conditions are met, you have the right to request that we do not process your data for a limited period, particularly in situations where the legal basis is unclear, the data is inaccurate, we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or if you have objected to processing and the objection has not yet been resolved.
- Right to data portability – under the conditions set out in the GDPR, you have the right to obtain your personal data in a structured, commonly used, and machine-readable format.
- Right to object to processing – you have the right to object to the processing of personal data carried out on the basis of our legitimate interest. We will comply with your objection unless we have compelling legitimate grounds to continue such processing.
- Right to lodge a complaint with a supervisory authority – the exercise of the above rights does not affect your right to lodge a complaint with the competent supervisory authority. You may exercise this right especially if you believe that we process your personal data unlawfully or in violation of generally binding legal regulations. You may file a complaint with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7.
Automated processing of personal data, including profiling
At Jérôme Lorieux, no profiling or automated processing or decision-making within the meaning of Article 4(4) of the General Data Protection Regulation (GDPR) takes place.
