The company Di Carlo, s.r.o. with its registered office at Prague 4 - Šeberov, K Hrnčířům 96, Postal Code 14900, identification number: 28486978, registered in the Commercial Register kept at the Municipal Court in Prague, Section C, Insert 145151 (hereinafter referred to as "Di Carlo"), is obliged as a personal data controller to protect your personal data and to comply with the obligations arising from generally binding legal regulations.

Personal data
Di Carlo collects personal data of users of the website www.dicarlo.cz (hereinafter referred to as the "Website") in the scope of data of registration, reservation, contact and order forms (hereinafter referred to as "forms") available online on the Website.

Di Carlo's authorisation to process personal data
Di Carlo is entitled to process users' personal data even without their consent in order to (i) ensure the proper functioning of the website and the fulfilment of Di Carlo's rights and obligations towards website users and (ii) Di Carlo's legitimate interests (e.g. processing personal data for statistical purposes, informing customers about Di Carlo's activities, preventing hacking attacks, etc.) for a minimum period of 2 years after the first use or visit to the website or use of the forms. Di Carlo is also entitled to process personal data in order to comply with the obligations imposed on Di Carlo by public law.

Di Carlo is also entitled to process certain personal data of website users on the basis of the consent given for the processing of personal data, if this consent has been granted.

Di Carlo is entitled to process personal data for the purposes expressed in the consent, as well as for the purposes of carrying out marketing activities, creating surveys, analyses and business statistics on purchasing behaviour and website behaviour and sending commercial communications and invitations to events organised by Di Carlo or in cooperation with Di Carlo's partners, and analyses relating to purchasing behaviour and website behaviour, mainly consisting in the evaluation of client data in order to suitably adapt the product offer and improve the quality of the services provided, including profiling. Profiling is the processing of personal data consisting in the evaluation of certain personal aspects of website users, such as personal preferences, interests and purchasing behaviour. The use of this procedure enables Di Carlo to communicate effectively with website users, in particular to address them with a more precisely targeted offer of goods and services that are of genuine interest to them.

On the basis of the consent granted, Di Carlo is also entitled to carry out automated processing of personal data (i.e. without any physical intervention of the person - only automated means are used for processing), whereby such automated processing may have an impact on the offers and/or benefits intended for a specific website user (automated decision-making). Automated decision-making may be an integral part of some marketing processing of personal data, in particular when targeting specific offers and benefits to website users. As a result, individual website users may receive different benefits and offers, or some of the offers and/or benefits provided may only be available to selected website users.

In exceptional cases, Di Carlo is authorised to carry out the processing of personal data physically.

Transfer of personal data
Di Carlo may transfer personal data to third parties (i) under the conditions provided for by generally binding legal regulations, (ii) if the transfer is necessary to ensure the proper functioning of the website, (iii) to Di Carlo's establishments, (iv) to other persons under the conditions of the consent given for the processing of personal data.

On the basis of Di Carlo's mandate, personal data may be processed by processors in the Czech Republic and abroad; personal data may be transferred in particular to IT service providers, logistics services, marketing agencies, call centre operators and providers of postal and delivery services.

Rights of users of the
website Every user of the website who has provided Di Carlo with his/her data has the right to

• request Di Carlo to access, rectify, erase and/or restrict the processing of your personal data;
• the portability of personal data to another controller, if technically feasible;
• to withdraw your consent to the processing of your personal data at any time, including the right to have your personal data deleted or anonymised without undue delay, provided that there is no other legal basis for processing it; you can withdraw your consent electronically, by email at info@dicarlo.cz or in writing at the address of Di Carlo's registered office.

Any website user who has provided Di Carlo with personal data also has the right to

• object to the processing of personal data, unless the personal data is processed on the basis of consent;
• object to the processing of personal data for direct marketing purposes concerning him or her, which includes profiling if it concerns direct marketing.

Website users can exercise the above rights by emailing: info@dicarlo.cz