1. You hereby give your consent to Leonarda, s.r.o. IČ: 25068075 with its registered office at Dittrichova 2024/5 120 00 Prague 2, (hereinafter referred to as the "Administrator") to process the following personal data in addition to the data that the company must process on the basis of legal regulations:
    • name and surname
    • address
    • e-mail
    • telephone number
  2. Name, surname, address, telephone number and e-mail are necessary for the purpose of its registration and business communication with the client. This data will be processed by the Administrator for a period of 2 years from the end of the registration. If you subscribe to the newsletter, the e-mail address will also be used for sending the newsletter and for marketing campaigns.
  3. You give your express consent to the above processing. The consent can be withdrawn at any time, for example by sending an email or a letter to the contact details of Leonarda, s.r.o. IČ: 25068075 with its registered office at Dittrichova 2024/5 120 00 Prague 2, email: eshop@chikatoro.com.
  4. The processing of personal data (not only the above, but also others, where there is an obligation to process by law) is performed by the Administrator, however, personal data may also be processed for the Administrator by the following processors:
    1. Data storage provider, IT systems and website maintenance providers
    2. Companies providing bookkeeping
    3. Companies providing tax advice
    4. Forwarding and transport companies
    5. The email address is passed on to the company processing marketing campaigns for the purposes of Leonard, s.r.o.
  5. Please note that you have the right to:
    • Right of access to personal data - the data subject has the right, if requested, to obtain information from the controller whether his personal data are being processed.
    • Right to rectification and completion - the data subject has the right to have inaccurate personal data corrected by the controller without undue delay. At the same time, with regard to the purpose of processing, he has the right to request the addition of incomplete personal data.
    • Right of erasure - represents, in other words, the expressed obligation of the controller to destroy personal data if at least one condition is met:
      • personal data are no longer needed for the purposes for which they were collected or otherwise processed,
      • the data subject withdraws the consent and there is no other legal reason for processing,
      • the data subject places a complain for the processing and there are no overriding legitimate reasons for the processing,
      • personal data have been processed illegally,
      • Personal data must be deleted in order to fulfill a legal obligation.
    • Right to the portability of personal data - the data subject has the right to obtain personal data concerning him provided to the controller in a structured, commonly used and machine-readable format and to pass it on to another controller through the original controller.
    • Right to restrict processing - The data subject has the right to have the controller restrict processing in any of the following cases:
      • the data subject denies the accuracy of the personal data for the time necessary for the controller to verify the accuracy of the personal data
      • processing is illegal and the data subject refuses to delete personal data and instead calls for restrictions on their use
      • The controller no longer needs personal data for processing purposes, but the data subject requires them for determination, enforcing or defending his legal claims
      • the data subject has raised an objection to the processing and it has not yet been verified whether the legitimate reasons of the controller outweigh the legitimate reasons of the data subject.
    • Right to lodge a complaint with the supervisory authority
    • Right to object to the processing - the data subject has the right at any time to object to the processing of personal data which are processed on the basis of legal grounds, for reasons relating to his specific situation:
      • processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority entrusted to the controller,
      • processing is necessary for the purposes of the legitimate interests of the controller or a third party concerned.