Privacy Policy

1. Basic Provisions

Company Elevate GASTRO s.r.o., ID: 73691208, with its registered office at Na hlavní 95/48, 182 00 Praha (hereinafter referred to as the "Controller"), as the controller of personal data, complies with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR).

This document contains information about the processing of personal data that the Controller carries out in connection with the provision of its services.

2. Data Controller

Elevate GASTRO s.r.o.
Company ID: 73691208
Registered office: Na hlavní 95/48, 182 00 Praha
-

Contact details:
E-mail: gdpr@elevategastro.cz
Phone: +420 123 456 789
Data box: abcdefg

Data Protection Officer: Jan Novák
E-mail: dpo@elevategastro.cz

3. Processed Personal Data

The Controller processes the following categories of personal data:

3.1. Data from Clients and Business Partners

• Identification data (name, surname, title)
• Contact details (email, phone, address)
• Company data (company name, ID, VAT number)
• Payment data (account number, payment history)
• Communication content (emails, messages, notes)

3.2. Data from Websites

• Technical data (IP address, cookies, browser)
• Form data (contact forms, inquiries)
• Website usage data (visit statistics)

3.3. Employee and Collaborator Data

• Personal data according to labor law regulations
• Data for payroll purposes
• Data for personnel purposes

4. Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

• Performance of contract - processing necessary for the performance of contractual obligations
• Legitimate interest - processing for marketing purposes, service improvement
• Consent - processing based on explicit consent of the data subject
• Legal obligation - processing required by legal regulations

5. Purposes of Processing

We process personal data for the following purposes:

5.1. Service Provision

• Planning and implementation of gastronomy services
• Communication with clients and partners
• Invoicing and accounting matters
• Handling complaints and client support

5.2. Marketing and Communication

• Sending business offers and news
• Marketing analyses and surveys
• Customer relationship management

5.3. Legal Obligations

• Fulfillment of tax and accounting obligations
• Archiving of contractual documentation
• Resolution of legal disputes

6. Data Retention Period

We retain personal data only for the period necessary to fulfill the processing purposes:

• Contractual relationships - for the duration of the contract and 10 years after its termination
• Tax documents - 10 years from the end of the tax period
• Marketing purposes - 3 years from the last interaction
• Cookies - depending on cookie type, maximum 2 years
• Employee data - according to labor law regulations

After the specified period, personal data is deleted or anonymized.

7. Recipients of Personal Data

Personal data may be disclosed to the following categories of recipients:

7.1. Internal Recipients

• Employees of the Controller to the extent necessary for performing their work duties
• Statutory bodies of the company

7.2. External Recipients

• IT service providers - providers of hosting and cloud services
• Accounting and tax advisors - for accounting and tax purposes
• Legal representatives - for resolving legal matters
• Marketing agencies - for marketing campaigns
• State authorities - in cases stipulated by law

All recipients are bound by a personal data processing agreement or other legal obligation of confidentiality.

8. Your Rights

In accordance with GDPR, you have the following rights:

8.1. Right of Access

You have the right to obtain confirmation as to whether your personal data is being processed, and if so, you have the right to access this data.

8.2. Right to Rectification

You have the right to rectification of inaccurate personal data and to have incomplete personal data completed.

8.3. Right to Erasure

You have the right to erasure of personal data where there are no legitimate grounds for its further processing.

8.4. Right to Restriction of Processing

You have the right to restriction of processing of personal data under specific circumstances.

8.5. Right to Data Portability

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

8.6. Right to Object

You have the right to object to processing of personal data for direct marketing purposes.

8.7. Right to Lodge a Complaint

You have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection with its seat in Prague.

You can exercise all rights at the email address: gdpr@elevategastro.cz

9. Data Security

The Controller has implemented all appropriate technical and organizational measures to ensure the protection of personal data:

• Encryption of data transfers using SSL/TLS protocols
• Regular backups and system updates
• Access rights and user authentication
• Physical security of premises and equipment
• Regular employee training on data protection
• Incident response procedures

10. Final Provisions

This privacy policy becomes effective on January 1, 2024.

The Controller reserves the right to change these policies at any time. The current version of the policies is always published on the website www.elevategastro.cz.

If you have any questions regarding the protection of personal data, do not hesitate to contact us: