Loyalty Card
By registering in the Friends of Good Food Programme (hereinafter the “Programme”), the holder of the loyalty card of AMBI CZ, s. r. o., with its registered office at Maiselova 38/15, Praha 1 Josefov, 110 00, Company ID No: 63984881, registered in the commercial register kept by the Municipal Court in Prague, section C, insert No 38156, (hereinafter “AMBI CZ”), as the controller, consents to the processing of personal data provided by them, all in accordance with applicable legal regulations, especially in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation, hereinafter the “Regulation”) and Act No 110/2019, on personal data processing, as amended, and Act No 480/2004, on certain information society services (hereinafter the “Act”).
Scope and Purpose of Processing
AMBI CZ processes personal data of the Programme member provided at the time of registration for the Programme – such as your identification and contact details that you have provided us upon registration, namely name, surname, date of birth, sex, email contacts.
AMBI CZ also processes personal data of the Programme member, which it obtained at any time during your membership in the Programme, as well as personal data relating to your purchase history in the network of individual restaurants and establishments of Ambiente included in the Programme and as a result of your use of our services, namely your loyalty card number, your loyalty account number, loyalty points balance, information about your purchases, information about your entitlements to discounts and other benefits, information about our previous communication or other contact.
AMBI CZ also processes data on how you have given us consent to process your personal data (usually by storing information about the manner and time of giving consent, incl. for example, your IP address from which you confirmed your registration for the Programme).
Personal data are processed for the following purposes:
Managing your loyalty account – to establish your loyalty account and assign a loyalty card, so you can register on our websites, where after logging in you can subsequently check the status of your loyalty points, control the settings of your loyalty account, update your identification and contact details;
Managing your loyalty points, as well as so that AMBI CZ could evaluate information created based on your use of our services, and so we can include you in various marketing campaigns and events we organise. As part of this processing, the holder of the Programme loyalty card will automatically be included in individual customer segments (groups of customers), based on which AMBI CZ will then send you targeted offers of goods and services. However, this decision-making has no legal effects for the loyalty cardholder;
Sending information about current offers and promotions;
Protecting the legitimate interests of AMBI CZ (in particular to prevent fraudulent actions, in an effort to prevent and stop violations of the Programme terms and to ensure the protection of legal rights);
Contact details may further be used to ensure mutual communication and for the purposes of enabling the Programme member to exercise rights related to the protection of personal data.
Processing that AMBI CZ carries out within the Programme is possible only based on your consent. Your consent to the processing of personal data for marketing purposes is voluntary and can be withdrawn at any time. However, without providing this consent, you will not be able to use our marketing services and be a member of our Programme.
Duration of Processing
The above-mentioned personal data will be processed for the duration of the membership in the Programme. However, if the loyalty card is not used for more than three years, the participation in the Programme will be terminated, and all personal data will be deleted and the loyalty card deactivated.
If you revoke the provided consent to process your personal data at any time before the expiry of the above-mentioned period, we will stop processing your personal data without undue delay after the revocation of this consent.
Security of Personal Data
Personal data are processed in electronic form in an automated manner or in printed form in a non-automated manner, by employees of AMBI CZ and processors’ employees.
Personal data are stored on secure servers in IT systems in the Czech Republic. Personal data are collected, processed, and stored exclusively within the territory of the Czech Republic, and there is no and will not be any transfer to other countries. AMBI CZ has taken appropriate technical and organisational measures against loss and destruction of Programme members’ data, against access by unauthorised persons to the data, their alteration, or dissemination. Personal data are collected and transferred by individual processors, which are Ambiente network restaurants, to AMBI CZ in an encrypted form using VPN encryption – RSA (1024 bit).
The customer account within the Programme may only be accessed after entering the personal password of the Programme member. It is essential that the Programme member does not share access data with third parties and always closes the window of their web browser after finishing activity in the customer account, especially if they use a shared computer. AMBI CZ does not take responsibility for the misuse of passwords unless it directly caused this situation.
Processors and Recipients of Personal Data
AMBI CZ may entrust the processing of personal data to processors, operators of restaurants in the Ambiente franchise project. The current list of all restaurants included in the Programme is available on the website www.ambi.cz and may be updated from time to time. These processors collect personal data of Programme members and enable cardholders to draw discounts and benefits of the Programme according to AMBI CZ instructions.
Personal data may further be provided to other companies that are engaged by AMBI CZ to assist with activities within the Programme, e.g., IT service providers, marketing agencies. Access of these persons and processing of personal data by a third party will always be conducted based on a personal data processing contract and under conditions stipulated by legal regulations.
Rights of Data Subjects
The Programme member has the following rights, which they may exercise at their discretion.
– The right to access personal data – the right to request free information about the processing of their personal data
– The right to data portability (i.e., to obtain personal data concerning them which they have provided to the controller, in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller).
– In the case of processing based on consent, the right to withdraw the consent at any time partially or entirely with future effect. Without the corresponding consent, the given processing will no longer be carried out. Consent can be withdrawn at the email or postal contact address of AMBI CZ mentioned below. Withdrawal of consent does not affect the legality of processing based on consent before its withdrawal.
– If the Programme member believes or finds that the processing of personal data is in conflict with the protection of their private and personal life or in conflict with relevant legal regulations, especially if personal data are inaccurate, incomplete, or are being processed for a given purpose without a corresponding legal reason, they may request correction and/or completion of inaccurate personal data
– The right to erasure of personal data (especially if personal data are no longer necessary for the purposes for which they were collected or otherwise processed or if consent to processing is withdrawn or objections to processing are raised and there are no overriding legitimate grounds for further processing)
– The right to restriction of processing of personal data (especially if the accuracy of personal data is contested or processing is unlawful and the erasure of personal data is refused and instead restriction of their use is requested or personal data are no longer needed for the purposes of processing, but the data subject requires them for the establishment, exercise, or defence of legal claims)
– The right to object – in case your personal data are processed based on our legitimate interests, you have the right to object so that our company no longer processes these personal data for the given purpose because your interests, rights, and freedoms (especially the right to privacy) in the given situation prevail over the legitimate interest of our company in further processing of personal data. If you raise such an objection against the processing of personal data for direct marketing purposes, our company will terminate such processing without undue delay.
– The right to lodge a complaint against the processing of their personal data with the Office for Personal Data Protection – Úřad pro ochranu osobních údajů, Pplk. Sochora 27, Postcode 170 00, Praha 7, www.uoou.cz.
In connection with the exercise of your rights and in case of any questions or information regarding the handling of personal data within AMBI CZ, please contact the controller at: ambikarta@ambi.cz or in writing by post at AMBI CZ, Maiselova 38/15, 110 00 Praha 1.
This Privacy Policy is effective from 14 February 2024.