Privacy policy
pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).
If you provide us with your personal data, we act as the data controller:
BULK Vanilla s.r.o.
Registered office: Karlínské náměstí 235/13, Karlín, 186 00 Prague 8, Czech Republic
Company ID (IČ): 088 89 759
Registered with the Municipal Court in Prague, File No. C 327093
We wish to inform you about how we process your personal data and about your rights in connection with such processing.
For information on cookies, please refer to the cookie dialog tool available on our Website.
1. For What Purposes Do We Process Your Personal Data?
-
Mutual communication
-
Promotion of our events and products
-
Targeted communication via our Website and product promotion
-
Targeted communication via our social media channels and product promotion
-
Cooperation with business partners
Description of our purposes
We strive to be open and transparent. This also means being accessible for communication with all those interested in our products. For this reason, we publish our email address and operate profiles on communication platforms such as Instagram, Facebook, and Messenger, through which you can contact us at any time with questions regarding our products.
To ensure effective, accurate, and clear communication, we process certain personal data (including unstructured personal data contained in email correspondence or messages via channels such as Instagram, Facebook, Messenger, etc.).
We may also process your personal data in the form of photographs, audio or audiovisual recordings, names and surnames, email addresses, or social media usernames. These are processed for the purposes of promoting our events, services, and products and strengthening our brand and reputation—for example, announcing new products, issuing marketing materials, or publishing photographs and audiovisual recordings (in which you may appear) on our social media profiles such as Instagram and Facebook, or on our Website.
To further develop our business, we seek potential clients and business partners. To this end, we also use third-party services on our Website (e.g., Google Analytics) to identify potential customers, partners, and collect statistical data in support of sales. In these cases, data are anonymised; nonetheless, we inform you in the interest of transparency.
To achieve the objectives defined above, we may also use social networks (e.g., Instagram, Facebook) to process personal data voluntarily provided by you (username, name, surname, email address). For this purpose, marketing tools such as Google Tag Manager, Facebook Pixel, SDK, and functions such as “Custom Audiences” and “Lookalike Audiences” may be applied.
If you are our customer or business partner, we need your personal data for the performance of our business relationship (e.g., for preparing orders, concluding contracts, and fulfilling contractual obligations). Such data appear on orders/contracts, may be included in invoices and tax documents, and may also appear in unstructured form in email or other communications.
2. Legal Basis for Processing
-
If you contact us by email or another channel, we process your personal data based on our legitimate interests under Article 6(1)(f) GDPR.
-
For contacting you and supporting our services, we process your personal data based on legitimate interests under Article 6(1)(f) GDPR.
-
For Website visitor statistics, we process personal data based on legitimate interests under Article 6(1)(f) GDPR.
-
For fulfilment of business relationships, we process your personal data based on contractual necessity under Article 6(1)(b) GDPR (if you do not provide your personal data, we cannot conclude a contract with you).
3. What Personal Data Do We Process?
-
Name, surname, email address, username, telephone number
-
Name, surname, email address, username, telephone number, photographs, audiovisual recordings, audio recordings
-
Name, surname, email address, username, IP address, cookies
-
Name, surname, Company ID, VAT ID, address/registered office, business name (where it includes your personal name), payment card details
4. Data Retention
-
Data obtained through communication channels are retained until you unsubscribe from our contact database.
-
Data are stored only for as long as necessary to achieve the given purpose.
-
For contractual relationships, data are retained for the duration of the contract and subsequently for the limitation period necessary to defend legal claims and to comply with statutory tax obligations.
5. Data Sharing
Recipients are third parties to whom we lawfully outsource certain activities. Categories of recipients include:
-
Google Ireland Limited
-
Facebook Ireland Limited
-
GoPay s.r.o.
-
Online payment gateway: Terms
-
We may also be required to provide data to public authorities, particularly courts and law enforcement bodies, to the extent required by law.
6. Data Sources
We obtain data directly from you, including:
-
Prospective customers and business partners
-
Participants at events we organise or attend
-
Visitors to our Website
-
Visitors to our social media profiles
-
Customers and business partners
7. Automated Decision-Making
We do not use automated individual decision-making.
8. Transfers to Third Countries
Your personal data are processed within the Czech Republic and other EU Member States. Data may be processed in third countries only if the European Commission has recognised them as providing an adequate level of protection or if appropriate safeguards are in place (e.g., binding corporate rules or EU Standard Contractual Clauses).
9. Additional Information
In justified cases, personal data may be processed for legal purposes, compliance with state authorities, or monitoring for potential legal protection. Data may also be archived in the public interest or for scientific, historical, or statistical research.
10. Your Rights
As a data subject, you have the following rights (as detailed in Chapter III GDPR):
-
Right of access to personal data we process about you
-
Right to rectification of inaccurate or incomplete data
-
Right to restriction (blocking) of processing
-
Right to erasure (“right to be forgotten”) where data are no longer necessary or unlawfully processed
-
Right to object to processing where processing is not justified
-
Right not to be subject to automated decision-making
-
Right to data portability in a structured, machine-readable format
-
Right to withdraw consent at any time
-
Right to lodge a complaint with a supervisory authority
11. Exercising Your Rights
BULK Vanilla s.r.o.
Registered office: Karlínské náměstí 235/13, Karlín, 186 00 Prague 8, Czech Republic
Email: orders@bulkvanilla.eu
Postal address: Karlínské náměstí 235/13, Karlín, 186 00 Prague 8, Czech Republic
We strive to protect your privacy and process your data in accordance with GDPR and all applicable laws. If you disagree with the way we handle your data, you may lodge a complaint with the competent supervisory authority.
You can find your local supervisory authority here: EU Data Protection Authorities.