Privacy Policy

Our company – Blanc Rosenthal s.r.o., Company ID: 236 76 205, with its registered office at Děčínská 552/1, 180 00 Prague 8 – Střížkov, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 430993 (hereinafter referred to as “Blanc Rosenthal”), values the trust of its customers.

In these Personal Data Protection Principles (hereinafter referred to as the “Principles”), we inform you about the manner in which we process your personal data that we obtain in connection with your visit to our website www.blancrosenthal.cz.

These Principles govern the processing of your personal data as our customers, prospective customers of our products and services, and visitors to the websites operated by us, always to the extent of the personal data corresponding to your relationship with us.

1. Introductory Provisions

Dle článku 4 bod 7 nařízení Evropského parlamentu a Rady (EU) 2016/679 o ochraně fyzických osob v souvislosti se zpracováním osobních údajů a o volném pohybu těchto údajů a o zrušení směrnice 96/46/ES (dále jen jako „GDPR“) je správcem osobních údajů:
- Společnost: Blanc Rosenthal, s.r.o.
- IČO: 236 76 205
- Sídlem: Děčínská 552/1, 180 00 Praha 8 -Střížkov
- Zapsaná v obchodním rejstříku vedeným Městským soudem v Praze, oddíl C, vložka 430993
(dále jen jako „Správce“)
Pro účely těchto Zásad se osobními údaji rozumí veškeré informace identifikované nebo identifikovatelné fyzické osobě, identifikovatelnou fyzickou osobou je pak fyzická osoba, kterou lze přímo či nepřímo identifikovat, zejména odkazem na určitý identifikátor, a to kupříkladu: jméno a příjmení, obchodní firma, identifikační číslo, e-mailová adresa, telefonní číslo, fakturační adresa, doručovací adresa, IP adresa, lokační údaje, síťový identifikátor, operační systém, cookies, nebo jeden či více zvláštních prvků fyzické, fyziologické, genetické, psychické, ekonomické, kulturní nebo společenské identity fyzické osoby (dále jen jako „Osobní údaje“).
Správce nemá povinnost a ani nejmenoval pověřence pro ochranu osobních údajů.
Správce při zpracování Osobních údajů postupuje v souladu se zákonem č. 110/2019 Sb., o zpracování osobních údajů, jako i nařízením GDPR.
Účastníkem je jakákoliv fyzická osoba, podnikající či nepodnikající, jako i osoba právnická, která nakupuje služby od společnosti Blanc Rosenthal, jakožto i osoba která o jejich služby projeví zájem, a návštěvníky jimi provozovaných webových stránek (dále jen jako „Účastník“).
Správce zpracovává veškeré Účastníkem sdělené Osobní údaje vždy transparentním způsobem, co znamená, že Účastník ví, za jakým účelem své Osobní údaje Správci poskytuje.

2. Purposes and periods of processing personal data

Processing of personal data in connection with visiting websites

In connection with browsing the website, the Administrator processes log files on access to these websites, namely: the website from which the User accesses them, the IP address, the date and time of access, data about the User's browser and operating system. The Administrator processes this data for the purpose of its legitimate interests in ensuring the protection of the website and improving its functioning. The User's consent is not required by law for the processing of these log files.
In order to improve the functioning of the Administrator's website, as well as to optimize marketing activities, the Administrator uses cookies on its website. Cookies serve to distinguish individual Users accessing the website and do not allow for the personal identification of the Website Users without further ado.
In case of disagreement with the collection of Cookies, the User has the option to prohibit their use.

Types of cookies used

Cookie	Duration	Description
wt_consent	1 year	It is used to remember users' consent preferences to be respected on their subsequent visits to the website. It does not collect or store any personal information about website visitors.

3. Protection of personal data and the method of its processing

If the Participant refuses to provide the Administrator with his/her Personal Data, it is not possible to conclude a contract with him/her or provide him/her with the performance resulting from it. The Participant's personal data are a necessary prerequisite for the provision of a specific service by the Administrator.
The Participant is obliged to provide the Administrator with only complete and truthful Personal Data. The Participant is primarily and exclusively responsible for the correctness, accuracy and truthfulness of the Personal Data provided by the Participant.
The Administrator takes all technical and organizational measures to ensure the protection of Personal Data and to exclude the possibility of unauthorized or accidental access to Personal Data, its alteration, destruction or loss, unauthorized transfers, its other unauthorized processing, as well as other misuse of the Participants' Personal Data. The Administrator complies with all obligations set forth in generally binding legal regulations in the field of personal data protection.
The Administrator processes the Participants' Personal Data automatically and manually and keeps records of processing activities. When processing Personal Data of the Administrator, no decision is made based solely on automated processing without human assessment, which would have legal effects or otherwise significantly affect the Participants whose Personal Data the Administrator processes in accordance with these principles.
On the website www.blancrosenthal.cz Blanc Rosenthal uses cookies. To process some of them, we need the consent of the Participants, which the Participant gives by clicking on "Accept all" in the website bar, or they can agree to them individually in "Settings". If the Participant just closes the bar, he does not give consent, and Blanc Rosenthal will process only the necessary technical cookies.

4. Transfer of personal data to third parties

The information provided by the Participant is primarily processed by the Administrator and its employees. When processing Personal Data, the Administrator uses modern secure and control mechanisms that ensure the maximum possible data protection. All persons who have access to the Personal Data of the Participants in the performance of their work or contractual obligations are bound by a legal or contractual obligation of confidentiality, and this obligation continues even after the termination of the employment relationship with the Administrator.
The Administrator is authorized to transfer the Participant's Personal Data to third parties, only for the following purposes: completion of the order process, technical and IT support, activities of experts, lawyers and auditors, handling complaints.
When fulfilling its obligations and duties and providing services, the Administrator uses professional and specialized services of other entities. If these suppliers process the Personal Data that the Administrator transfers to them, they have the status of processors of Personal Data.
The Administrator always transfers the Personal Data of the Participants to the processors only to the extent strictly necessary for the purposes of processing and exclusively for the purposes of providing the Administrator's services. As a specific processor, the Administrator selects only persons who provide him with maximum guarantees of technical and organizational security of the protection of the Personal Data transferred. The Administrator has concluded a contract with all processors, and no processor is authorized to use the provided Personal Data for its own, marketing or any other purposes. The processors are companies with their registered office both in the Czech Republic and in other Member States of the European Union.
The Administrator has a legal obligation to provide the Personal Data of the Participants to state authorities and authorities upon request (e.g. the Police of the Czech Republic, state authorities within the framework of inspections, etc.).

5. Rights related to the protection of personal data

Rights of Participants in connection with the protection of Personal Data:
1.1. the right to request access to their Personal Data from the Administrator: The Participant has the right, subject to the legal conditions, to receive from the Administrator free of charge, upon request, information on whether the Administrator processes their Personal Data; if so, they also have the right to access these Personal Data. Upon request, the Administrator shall provide the Participant with all information on the processing of the Personal Data where they are the Administrator.
1.2. the right to correct the provided Personal Data: if the Participant discovers any inaccuracy or error in the processed Personal Data, they have the right to notify the Administrator of this. The Administrator shall then immediately correct this error;
1.3. the right to delete the provided Personal Data: provided that the purpose for which the Administrator processes the Personal Data ceases to exist, the Administrator shall automatically anonymize or destroy all Personal Data of the Participants. However, if the Administrator processes the Personal Data of the Participant based on his/her consent, the Participant has the right to withdraw this consent at any time, in which case the Administrator shall immediately delete the Personal Data. However, the right to deletion is not absolute, and if the Administrator has an objective obligation to continue to store the Personal Data (e.g. for accounting purposes), only those Personal Data that the Administrator no longer needs for the original purposes of the processing will be deleted;
1.4. right to restriction of processing of Personal Data: The Participant has the right to have the Administrator restrict the processing of his/her Personal Data if:
a) he/she disputes the accuracy of the Personal Data, for a period of time necessary for the Administrator to verify the accuracy of such data; or
b) the processing is unlawful and the Participant refuses the erasure of the Personal Data and requests instead the restriction of their use; or
c) the Administrator no longer needs the Personal Data for the purposes of the processing, but the Participant requires them from the Administrator for the establishment, exercise or defense of his/her legal claims; or
d) the Participant has objected to the processing, until it is verified whether the legitimate reasons of the Administrator outweigh the legitimate reasons of the Participant;
1.5. the right to file a complaint with the Office for Personal Data Protection;
1.6. the right to transfer Personal Data to another administrator: if Personal Data are processed by automated means based on the consent of the Participant or on the basis of a concluded contract, the Participant has the right to a copy of his/her Personal Data, which he/she has provided to the Administrator, in a structured, commonly used and machine-readable format, which will be delivered to the Participant or another person chosen by him/her;
1.7. the right to object to the processing of Personal Data: in the event of non-fulfilment of the prerequisites set out in legal regulations, the Participant has the right to object to the processing of his/her Personal Data, if the legal basis for the processing is the legitimate interests of the Administrator;
1.8. the right to withdraw consent to the processing of personal data: if consent is the legal basis for the relevant processing of Personal Data, the Participant has the right to withdraw this consent at any time.
The Participant may exercise his rights specified in Article V, paragraph 5.1. of these Principles by submitting his request to info@blancrosenthal.cz, or in writing to the address of the Administrator's registered office.
If the Participant believes that the Administrator is processing his Personal Data in violation of the protection of his private and personal life, or in violation of applicable legal regulations, he may:
3.1. ask the Administrator for explanations, at the e-mail address info@blancrosenthal.cz;
3.2. raise an objection to the processing of Personal Data and request the elimination of the situation thus created (by making corrections, supplementing data, deleting data).
If the Participant exercises his/her right under this Article, the Administrator is obliged to respond to him/her no later than 30 days from the receipt of the complaint.
In the event of exercising any of the Participant's rights under this Article, the Administrator has the right to request proof of the Participant's identity.
In the event of repeated and unjustified requests for a physical copy of the Personal Data being processed, the Administrator shall charge the Participant a fee for the administrative costs associated with this.

6. Final provisions

All legal relationships arising in connection with the processing of Personal Data are governed by the law of the Czech Republic, regardless of where the website was accessed from. The Czech courts are competent to resolve any disputes arising between you and the Administrator.
Participants can contact us, as the Administrator of Personal Data, with their questions or complaints by e-mail to info@blancrosenthal.cz, by phone at +420 777 795 895, or in writing to the address of the Administrator's registered office, Děčínská 552/1, 180 00 Prague 8 -Strřížkov.
Participants also have the right to contact the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz), with its registered office at Pplk. Sochora 27, 170 00 Prague 7.
This data protection policy is effective from 01.11.2025 and is available on the Controller's website.