GDPR
Privacy policy
Who is the data controller?
The data controller is EatMe baby, s.r.o., IČO 23629029 (EatMe Bistro), EatMe Bistro, Dolní nám. 25/40, 779 00 Olomouc Pasáž masné krámy. You can contact us regarding your personal data by email info@eatmebistro.cz or by telephone on +420 601 234 567.
What data do we process?
When you set up an account in the loyalty scheme, we process:
- first name and surname,
- email address (including its verification status),
- telephone number,
- password — never in plain text, only as an irreversible hash,
- loyalty ID (QR code) and points balance, including a history of points credited,
- the date of the last visit recorded at the till.
Why do we process data?
We process your name, email address, telephone number and loyalty programme data for the purpose of operating the loyalty programme (account management, crediting points, enabling you to redeem them) — this is necessary for the performance of the contract between you and us, which you enter into by creating an account. We also use your email address to verify your account and to communicate with you regarding your account.
News and special offers are sent by email only with your express consent, which you give when you register and which you can withdraw at any time via your account or by writing to our contact email address.
Who we share data with
We pass on your name, email address, telephone number and loyalty ID to our till platform, Elementary POS, which keeps a record of points and visits and acts as a data processor in accordance with our instructions. We use our domain’s email account to send verification emails. We do not sell or pass on any data to third parties for their own marketing purposes.
How long do we retain data?
We retain your data for the duration of your account. If you request the closure of your account or the erasure of your data, we will delete your personal data, except where retention is required by law (e.g. accounting records).
Your rights
With regard to your personal data, you have the right to:
- to access the data we hold about you,
- to correct inaccurate or incomplete details — you can correct most of them directly in your account,
- the right to erasure (the right to be forgotten),
- to restrict processing,
- data portability,
- to withdraw consent to the processing of personal data for marketing purposes at any time,
- to lodge a complaint with the Office for Personal Data Protection (uoou.cz).
To exercise any of these rights, please contact us via the email address or telephone number given above.