Protection of personal data

I, as a data subject, hereby grant my consent to the processing of personal data and information about the processing of personal data to Royal Crystal s.r.o., with registered office at Vídeňská 182/102j., Brno - Dolní Heršpice, 619 00, ID No. 26238357, registered in the Commercial Register maintained by the Regional Court in Brno, Section C, Insert 38848, as the controller of personal data (hereinafter referred to as the "Controller") in accordance with Article 6(1)(a) and Article 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council dated 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "GDPR"), I freely and unambiguously consent to the processing of my personal data (hereinafter referred to as "consent") under the conditions set out below:

The personal data of the data subject will be processed on the basis of the legitimate interest of the Controller for the purpose of direct marketing.

The reason for the provision of the personal data by the data subject is the data subject's interest in fulfilling the purpose of processing the personal data which would not be possible without the provision of the personal data. The Controller undertakes to process accurate personal data only for the following purposes:

• sending commercial messages (direct marketing).

The Controller undertakes not to process personal data in a way that is incompatible with the above purpose.

The Controller undertakes to process personal data only to the extent necessary in relation to the purpose for which it is processed.

The scope of personal data provided on the basis of the consent is as follows:

• name and surname
• email address
• telephone number

(hereinafter referred to as "Personal Data").

The Controller undertakes to process Personal Data for a period of 5 years. After this period, the Controller is obliged to destroy the Personal Data.

The Controller declares that the Personal Data will be disclosed to the relevant employees of the Controller that are obliged to maintain the confidentiality of the data, as well as the security measures the disclosure of which would compromise the security of the Personal Data.

The Controller declares that Personal Data will be transferred to PS Works s.r.o., with registered office at Jungmannova 1310/10, 697 00 Kyjov, ID No.: 28306201 (hereinafter referred to as the "Webmaster") for the above purposes, as this company provides web administration for the Controller. The obligation of confidentiality of Personal Data also applies to the respective employees of the processor.

The Controller also declares that it will not transfer Personal Data to third countries or any international organisation.

The processing of Personal Data of the data subject will not involve automated decision-making.

The Controller hereby informs the data subject that profiling (a form of automated processing of the data subject's personal data consisting in the use of personal data to evaluate certain personal aspects relating to the data subject, in particular to analyse or estimate aspects relating to personal preferences and interests) will take place. The Controller uses profiling only for the purpose of personalising commercial communications to specific data subjects (targeted advertising).

The data subject shall have the right to withdraw the consent given to the processing of Personal Data at any time without any restriction or damage, either at the address of the Controller's registered office or at the email address

The Controller shall inform the data subject of the rights arising from the GDPR, in particular:

• the right of access to Personal Data (the data subject has the right to obtain confirmation from the Controller as to whether or not Personal Data concerning him or her are being processed - Article 15 of the GDPR)
• the right to rectification (the data subject has the right to have inaccurate Personal Data concerning him or her rectified by the Controller without undue delay, as well as the right to have incomplete Personal Data completed - Article 16 of the GDPR)
• the right to erasure (the data subject has the right to have the Controller erase the Personal Data concerning the data subject without undue delay if one of the grounds set out in Article 17 of the GDPR applies)
• the right to restriction of processing (the data subject has the right to have the Controller restrict processing in the cases set out in Article 18 of the GDPR)
• the right to data portability (the data subject has the right to obtain the Personal Data concerning him or her which he or she has provided to the Controller in a structured, commonly used and machine-readable format and to transmit those data to another controller, without hindrance from the Controller to whom the Personal Data have been provided, in the cases provided for in Article 20 of the GDPR)
• the right not to be subject to any decision based solely on automated processing (the data subject has the right not to be subject to any decision based solely on automated processing, including profiling which has legal effects concerning him or her or similarly significantly affects him or her pursuant to Article 22 of the GDPR)
• the right to lodge a complaint with the supervisory authority, which is Úřad pro ochranu osobních údajů (Office for Personal Data Protection), located at Pplk. Sochora 727/27, postal code 170 00, Prague 7.

In accordance with Article 30(1)(a) GDPR, the Controller provides the contact details of the Data Protection Officer on request. All your questions, suggestions or other submissions related to the processing of your Personal Data can be directed to the Data Protection Officer - Michal Okleštěk, email address:

The data subject hereby declares that he/she has been duly informed by the Controller about the processing of Personal Data in accordance with the provisions of Article 13 of the GDPR and that the above personal data is accurate and true and is provided to the Controller voluntarily.