Skip to content
Login
English

Privacy Policy

These Privacy Policy principles are drafted in accordance with the requirements of the Regulation of the European Parliament and the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR"), particularly Articles 13 and 14 of GDPR specifying the information obligation of the Data Controller, as well as applicable legal regulations in force within the Czech Republic.

Your personal data is processed in a manner that ensures its proper security, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, through the use of appropriate technical and organizational measures.

All our employees have been duly trained in personal data processing. Our company, as the controller and processor of your personal data, has implemented appropriate security, technical, and organizational measures to ensure the highest level of personal data protection. Data protection procedures and policies have been established in accordance with GDPR to ensure compliance with legal requirements, reliability of data processing operations, and enforceability of all rights available to you as a data subject.

Who is the Controller of Your Personal Data

The Controller of your personal data is:

SmartJídlo s.r.o.,
Registered Office: Průmyslová 1492/12, 735 35 Horní Suchá
(hereinafter referred to as the "Controller").

Categories of Personal Data Processed by the Controller

The Controller processes personal data necessary to identify you. This data includes:

  • Name and surname
  • Residential address
  • Delivery address
  • Date of birth
  • Email address
  • Phone number
  • Company name
  • Identification number

What Personal Data Is Processed by the Controller

At SmartJídlo s.r.o., we collect the following personal data:

  1. Name and Surname, Company Name – Processed if you are registered as a user of the SmartLunch Program.
  2. Phone Number – Processed if you contact us by phone or voluntarily provide your phone number via email, contact forms, or postal mail. Necessary for service provision, including addressing unexpected situations.
  3. Email Address – Processed when you provide it through email, forms, or phone. Used to confirm services or communicate regarding the services provided. If you consent to marketing or subscribe to our newsletter, we send marketing communications a few times per month.
  4. Credit Card Data – Collected only from employees paying for their ordered meals.
  5. IP Address – Collected for technical and statistical purposes, including demographic information such as connection region.
  6. Other Data – May be processed in specific cases or voluntarily provided by users (e.g., through forms, email, or phone).

Purpose of Processing Personal Data

The provision of personal data is primarily necessary for the following purposes:

  • Using services offered by the SmartLunch Program.
  • Providing services you order.
  • Responding to inquiries and enabling communication via email, mail, or phone.
  • Managing your customer account on our website.
  • Sending marketing and commercial content based on your consent.
  • Sending newsletters about promotions and offers. Subscriptions are voluntary and can be canceled at any time.

Sources of Your Personal Data

All personal data is collected directly from you as the data subject.

Duration of Personal Data Processing

Personal data is processed only as long as necessary to achieve the purposes stated in this Privacy Policy. It may be retained longer if required by applicable laws or for continuous services.

To Whom Your Personal Data May Be Disclosed

Personal data may be disclosed to entities processing data on our behalf. As the Data Controller, we enter into data processing agreements with such entities, which are only authorized to process data for specified purposes.

Data may be disclosed to:

  • Hosting service providers for our website.
  • Entities providing essential website operational services.
  • Restaurants preparing meals for users.

Transfer of Personal Data Outside the EU

The Data Controller does not transfer your personal data to any third country outside the EU or to international organizations.

Your Rights Regarding Personal Data Processing

Under GDPR, you have the following rights:

  1. Right to Access – To know the scope of processed personal data.

  2. Right to Rectification – To correct inaccurate personal data.

  3. Right to Erasure – To have data erased when no longer legally required to process.

  4. Right to Withdraw Consent – To withdraw consent for data processing at any time. Withdrawal does not affect processing already conducted based on prior consent.

  5. Right to Object – To object to data processing based on legitimate interests unless overriding legal grounds exist.

  6. Right to Data Portability – To transfer data to another controller if processing is based on consent or contractual necessity.

  7. Right to File a Complaint – To lodge complaints with the Czech Data Protection Authority:

    Office for Personal Data Protection
    Pplk. Sochora 27, 170 00 Prague 7
    Phone: +420 234 665 800
    Email: posta@uoou.gov.cz

For more information, contact the Controller directly:
SmartJídlo s.r.o.
Email: podpora@smartlunch.com

Use of Cookies

Our website uses cookies to tailor its functionality to your individual needs. You may choose whether data and information will be remembered for easier future use of our website. Personalization can be disabled in your browser settings.

By using our website, you agree to the terms outlined in this Privacy Policy. For matters not addressed herein, applicable legal regulations shall apply.