Marketing consent

The user of the operator’s services, as the subject of personal data, by his free decision (by ticking a box, pressing a button) indicates that he is aware of all the facts listed below and agrees to the further processing of his personal data for the purposes of the website operator’s business activities (or consent to the processing of personal data for purposes of sending newsletters, if he has given special consent).

Personal data is processed by the administrator to the extent that the user has provided it to the administrator, for the reason, scope and for the following purposes:

1. For the purposes of sending newsletters and other commercial communications, the administrator processes personal data based on consent in the scope of:

• email,
• telephone.

This personal data is also processed for the purpose of presenting customized product offers of the administrator and contractual partners of the administrator. By granting consent, the user also agrees to the download, processing, storage and use of data by the administrator for the following purposes: i) for internal use by the administrator, for the development of the administrator’s products and presenting users with a customized offer of the administrator’s products; ii) for processing and publishing (including forwarding to contractual partners of the controller) in aggregated or in an anonymous form (e.g. for the purposes of various studies, statistical reports, infographics, case studies, etc.).

The data subject has the right to object at any time to the controller processing personal data for this purpose.

The processing of personal data for this purpose will take place for the duration of the consent granted, at most for the duration of the contractual relationship with the operator. Consent can be revoked at the email address podpora@kardi.ai. In case of withdrawal of consent, the user’s personal data will be deleted by the administrator.

As a subject of personal data, the user has the following rights in accordance with the GDPR:

• Right to withdraw consent. Where the user’s consent is required for the purposes of personal data processing, the user is entitled to withdraw consent at any time, in particular by sending an email from the user’s email address or by clicking on the unsubscribe link in the newsletter.
• Right of access. The user has the right to access the personal data that is processed about him, and at the same time the right to information about what personal data is processed about him, for how long, what are the purposes of its processing, to whom it is made available and whether it is used for automated decision-making (or how this automated decision-making works).
• Right to rectification. If the user discovers that incomplete or incorrect personal data are being processed about him, he has the right to correct personal data or, if the purpose of processing such personal data requires it, to supplement them.
• Right to erasure. The right of the user is also the right to delete personal data that is stored and processed about him.
• Right to portability – another right that the user can exercise is the so-called right to portability. On the basis of this right, the user can request the provision of personal data that was provided to the administrator based on the user’s consent and that is processed automatically by the administrator. Upon request, the administrator will provide user personal data that meet these conditions in a commonly used, structured and machine-readable format, or based on the user’s request, it will be transferred to another administrator as determined, if it is technically feasible.
• Right to restriction of processing. In cases where the user feels that his personal data processed by the administrator is incorrect, he has the right to request that the administrator limit the processing of personal data to the time necessary to verify the accuracy of the user’s personal data and correct them if necessary.
• The right to object to the processing of personal data for the purpose of direct marketing, if such consent has been granted by the data subject. The user has the right to object to the administrator processing personal data for the purpose of direct marketing (e.g. for the purpose of sending commercial messages). In this case, the controller will immediately stop processing personal data for this purpose.
• Right to complain. In the event that all the above-mentioned rights are insufficient from the user’s point of view, or in the opinion that the administrator violates the above-mentioned rights in any way, the user has the option of filing a complaint with the supervisory authority. The complaint can be lodged by contacting the Office for the Protection of Personal Data, which is available at: https://www.uoou.cz/podatelna-uradu/os-1006.