INFORMATION ON THE PROCESSING OF PERSONAL DATA IN CONNECTION WITH PARTICIPATION IN BAT MARKETING SURVEYS

In this document you will find information on the processing of personal data by British American Tobacco (Czech Republic), s.r.o. , Company ID: 617 75 339, with its registered office at Karolinská 654/2, Prague 8 - Karlín, Postal Code: 186 00, registered in the Commercial Register maintained by the Municipal Court in Prague under File No. .C 35426, (hereinafter referred to as the "Company" or "BAT"), in connection with your participation in BAT marketing surveys (hereinafter referred to as "Surveys")

1. BASIC CONCEPTS

1.1. In the introduction, we would like to inform you about some of the basic terms with which this information works and which are also defined in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 94/46/EC ("GDPR").

1.2. "Personal Data" means any information about an identified or identifiable natural person. This is a person who can be directly or indirectly identified, in particular by reference to a certain identifier (name, company ID, location data, network identifier).

1.3. A "data subject" is a specific person whose personal data is at issue in a given case.

1.4. "Processing" means any operation or set of operations with personal data (e.g. recording, arrangement, storage, etc.)

1.5. "Controller" means the person who determines the purposes and means of the processing of personal data.

1.6. "Processor" means a person who processes personal data for the controller.

1.7. "Recipient" means the person to whom the personal data has been provided.

1.8. The data subject's "consent" is any freely given, specific, informed and unambiguous indication of his or her wishes by which the data subject authorises the processing of his or her personal data.

2. PURPOSES AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

2.1. Your personal data is processed by BAT as a controller for the purpose of conducting Surveys on the basis of a contract for participation in a marketing survey.

2.2. The Company obtains personal data directly from the data subject, i.e.from you, when concluding a contract via the registration form here (contact details or other data that you provide in connection with registration) and subsequently when you participate in individual Surveys (answers to questions, etc.). Filling in the data in the registration form is necessary for the conclusion of a contract with you.

3. CONTACT DETAILS OF THE COMPANY

3.1. In matters relating to the processing of personal data, you may contact the Company via the following contacts:
email:
contact@mytobaccostudy.com
dpo@kantartns-see.com

4. CATEGORIES OF PERSONAL DATA

4.1. For the purposes set out in Article 2, the Company processes in particular the following data:

  1. identification data (name, surname);
  2. contact details (e-mail address, telephone number);
  3. information that you provide when participating in Surveys or that may result from your participation in Surveys (answers to inquiries, etc.);
  4. contact details (e-mail address, telephone number);
  5. technical data to verify the uniqueness of your participation in the Surveys (cookies or other identifiers).

5. PROCESSING TIME

5.1. Your data will be processed for a period of one year from the date of expiry of the limitation period of all claims arising from the contract for participation in marketing research.

6. RECIPIENTS AND PROCESSORS OF PERSONAL DATA

6.1. The personal data provided by you may be further transferred/made available to other recipients. These are contractual partners of the Company (carriers, IT service providers, or providers of tax, legal or other services), as well as public authorities (authorities, courts, law enforcement authorities) and others.

6.2. Your personal data will be processed in connection with participation in the Survey by the Insights Division of Kantar BBSS SEE with the mailing address 23, James Boucher Blvd, 1700 Sofia, and its affiliates Kantar TNS CSOP-Romania, with a correspondence address of 1 Arh. Louis Blanc Str., fl. 3, District 1, Bucharest. These companies carry out Surveys for BAT, i.e. these companies will not be controllers of your personal data and cannot process your personal data for purposes other than the Surveys.

7. RIGHTS OF DATA SUBJECT

7.1. The Company processes personal data in relation to the data subject fairly and in a lawful and transparent manner. The data is collected for certain, explicit and legitimate purposes. The Company makes sure that personal data is accurate and, if necessary, updated. The Company takes all reasonable steps to ensure that personal data that are inaccurate, taking into account the purposes for which they are processed, are erased or rectified without delay.

7.2. The data subject may request information and access to personal data from the controller in accordance with Articles 13 and 14 of the GDPR, in particular the right to request:

  1. the identity and specific data of the controller,
  2. disclosure of the purposes of processing for which the personal data are intended,
  3. access to personal data,
  4. rectification, erasure or restriction of personal data processing,
  5. termination of the processing of personal data.

7.3. The data subject may also object to the processing. If the processing is based on consent (Article 6(1)(a) or Article 9(1)(a)). Article 2(b) a) GDPR), the data subject has the right to withdraw consent to the processing of personal data, without prejudice to the lawfulness of processing based on consent given before its withdrawal.

7.4. If you have given the Company your consent to the processing of personal data, you can withdraw this consent at any time, completely free of charge.

7.5. If you believe that your data is processed by the Company in violation of legal regulations, you can file a complaint with the supervisory authority – the Office for Personal Data Protection. However, in order to remedy this as quickly as possible, we recommend that you first contact the Company.

7.6. In case of any questions regarding the processing of your personal data or if you wish to update or correct your personal data, or if you want to request their deletion or restriction of processing, or if you wish to object to processing, please contact the Company via the contacts listed in Article 3.

8. PRIVACY POLICY

8.1 BAT cares about the protection of the rights of data subjects and the proper security of personal data, so when processing personal data, bat takes care to ensure the highest possible level of security through appropriate technical and organizational measures corresponding to the possible risks of the relevant processing.