Are you over 18 years old?


Data privacy policy

In accordance with:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), as amended (hereinafter referred to as the "GDPR Regulation"),
  • Act No. 101/2000 Coll., on the protection of personal data, as amended (hereinafter referred to as the "Act"),

In this document, we provide you with basic information about your rights related to the processing of your personal data by the Personal Data Administrator, that being Pivovar ZUBR a.s., Company Identification Number: 47676906, Komenského č. 3490/35, 75151 Přerov, Pivovar Litovel a.s., Company Identification Number: 47676914, Palackého 934, 78401 Litovel, Brewery HOLBA, a.s., Company Identification Number: 64610276, Pivovarská st. 261, 78833 Hanušovice, FONTÁNA Kroměříž, spol. s r.o., Company Identification Number: 47915544, Malý Val 1586, 78701 Kroměříž, PMS Přerov a.s., Company Identification Number: 14617099, Komenského 3490/35, 750 02 Přerov (hereinafter collectively referred to as "Members of the PMS Group" or each individually also as "Members of the PMS Group").

Who processes your personal data?

The Personal Data Administrator, i.e. the person who determines the purpose, means and decides on the scope and method of processing your personal data, is always the Member of the PMS Group, to whom you provided your data. If you have provided your information to multiple PMS Group Members, each PMS Group Member primarily manages data relating to the services and products distributed by it. A member of the PMS Group is also entitled to entrust the processing of your personal data to a third party (external personal data processor pursuant to GDPR Regulation).

The respective member of the PMS Group is always responsible for the correctness and legality of the processing of personal data.

Why is your personal data processed?

Personal data may be processed if at least one of the following legal reasons exists:

  1. the data subject has consented to the processing of personal data for one or more specific purposes,
  2. processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of measures taken prior to the conclusion of the contract at that data subject’s request,
  3. processing is necessary to fulfil the legal obligation applicable to the administrator,
  4. processing is necessary for the protection of the vital interests of the data subject or of another individual,
  5. processing is necessary for the performance of a task carried out in the public interest or during the exercise of the public powers entrusted to the administrator,
  6. processing is necessary for the purposes of the legitimate interests of the controller or a third party, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data take precedence over those interests.

What data will be processed, for what purpose and for how long?

Personal data such as first and last name, academic titles, business (business name), date of birth, place of residence, place of business, trade license, company registration number and tax identification number, are processed in order to comply with obligations related to the economic (business) activity of these persons, and legal requirements in accounting, taxes archiving etc.

Personal data such as the name and addresses of business establishment (delivery address), business establishment specifications (location, size, equipment, etc.), bank details, contact addresses and information (e.g. telephone, e-mail), and information regarding past business activities and activities in relation to the PMS Group Members are processed in order to fulfil the obligations arising from the respective business contract (fulfilment of contractual obligations).

Personal data such as first and last name, academic titles, business name (name), date of birth, place of residence, place of business, trade license, company registration number, tax identification number, business establishment identification, bank details, contact addresses and data (e.g. telephone, e-mail), information regarding personal or business activity in relation to the PMS Group Members, and information regarding payments, receivables and liabilities, will be processed in accordance with the specifically granted consent for the processing of data for the purpose of marketing activities by the PMS Group Members, especially information (in writing, by telephone, by e-mail, etc.) about organized events, products, services and other activities by PMS Group Members and their business partners, including offers of these services and products, inter alia in the form of commercial communications by electronic means carried out pursuant to Act 480/2004 Coll., as well as for marketing analyses conducted with the aim of adapting the PMS Group Members’ offer to your needs.

The authorization to process personal data arises only on the basis of the titles (reasons) foreseen by the GDPR Regulation and the Act, i.e. in particular based on your written consent to the processing of personal data (validly granted, even partially) before the effective date of the GDPR Regulation or on the basis of the fulfilment of the PMS Group Members’ statutory obligations, or in accordance with the legitimate interests of PMS Group Members as personal data controllers.   

Personal data will be processed only for the time necessary to fulfil the purpose of the processing, but for no more than ten (10) years from the date of signing the written consent to the processing of personal data (if granted), then for the duration of the business relationship (if one was concluded) and for the period specified in the relevant legislation.

This does not affect your right, as the data subject, to request the termination of the processing of personal data at any time (see below).

How will your personal data be processed, stored and protected?

Personal data can be processed, evaluated and profiled manually or automatically (using computer technology).

Personal data will be securely stored in electronic or paper form, including storage in the appropriate software.

Personal data will be processed by persons specifically authorized to do so and properly trained, and will be protected electronically or physically against loss and misuse.

Only those PMS Group Members’ employees for whom access is necessary to fulfil the intended purpose of processing and who are obliged to maintain the confidentiality of the data, even after their employment relationship, have access to the processed personal data.

In the case of the transfer of personal data to a third party outside the PMS Group Members (especially personal data processor within the meaning of the GDPR Regulation), a proper contract will be signed with this person (processor) to guarantee the protection of personal data under the GDPR Regulation.

In connection with the termination of the contractual relationship, the business partners’ personal data for which there is no longer a reason for processing will be completely disposed; even after the termination of the contractual relationship, written documents will be processed for the prescribed period, the preservation of which is imposed on the PMS Group Members by special legal regulations, particularly in the area of taxes, archiving, etc., and documents necessary to protect the PMS Group Members’ rights.

How can you exercise your privacy rights?

As a data processing entity, you have the following rights, in particular:

  1. provide your personal data only on the basis of your free and voluntary decision (right not to provide data),
  2. revoke your consent to data processing (if any) at any time, min. in the same form (in writing, by mail or orally) as this consent was given; in case of doubt, this appeal must be delivered in writing to the relevant PMS Group Member’s registered office,

Revocation of consent shall not affect the right of the controller to process personal data for any other legal reason.

  1. request information regarding if and what personal data is being processed,
  2. request clarification regarding the processing of personal data,
  3. request access to this personal information,
  4. raise objections against the processed personal data,
  5. request that the personal data shall be updated, corrected, supplemented, restricted or deleted
  6. request the complete deletion of personal data (right to be forgotten),
  7. exercise the right not to be subject to automated individual decision-making and profiling,
  8. request the transfer of personal information to another administrator,
  9. In accordance with the Act, in case of doubt about the lawfulness of the processing of personal data, turn to the Office for Personal Data Protection, Company Identification Number: 708 37 627, registered office Pplk. Sochora 27, 170 00 Prague 7 with a request for remedial measures,

You may exercise your rights in the same way that you have provided your personal data; in case of doubt, exercise your rights via written submission delivered to the PMS Group Members' registered office.