Privacy policy

The purpose of this privacy policy (hereinafter “Privacy Policy”) is to inform you of all information concerning the processing of your personal data that you can provide to us through our website https://www.theminers.eu (hereinafter “Website”) or by participating in The Miners Coffee Club loyalty program. We encourage you to read this Privacy Policy. If you have any further questions about the processing of your personal data, please contact us by e-mail at roastery@theminers.eu or by post at any of the addresses below.

Your personal data is processed by the companies from our group The Miners, i.e.:

• Coffee Giants a.s., with its registered office at Tusarova 1438/10, Holešovice, 170 00 Prague 7, Czech Republic, ID No.: 06497616, registered with the Municipal Court in Prague, file reference B 27840;
• The Miners Roasters s.r.o., with its registered office at Boudníkova 2538/11, Libeň, 180 00 Prague 8, Czech Republic, ID No.: 09096159, registered with the Municipal Court in Prague, file reference C 330857.

These companies may be controllers or joint controllers (hereinafter “we” or “Controller”) under Articles 4 (7) and 26 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”) for selected processing activities, depending on whether they jointly or separately determine the purposes and means of processing your personal data.

We process your personal data for statutory purposes, for the performance of a contract, or on the basis of our legitimate interest. If the processing of personal data is not for any of these three reasons, then we will ask for your consent. We make sure that your personal data is processed in accordance with the following principles: 

• reasonable limits, meaning that we use your personal data to the extent necessary to fulfill the purpose for which it is provided; 
• transparency, in other words, we inform you in advance what personal data we process, why, for how long and to whom we transfer your personal data; and 
• security, we always work with technology and internal procedures to keep your personal data safe; as a matter of course, we monitor, evaluate and adopt our internal settings in line with developments in modern technology.

For better clarity and orientation, see definitions of some terms that are frequently repeated in this Privacy Policy:

E-shop

An online store operated by the Controller, available at https://www.theminers.eu;

Commercial Communication

Generally, an email, SMS message or push notification sent to the User for the purpose of promoting products and services;

Order

A transaction completed by the User by pressing the relevant “ORDER WITH PAYMENT OBLIGATION” button with the intention of the User to enter into a purchase contract for the goods (hereinafter “Contract”), which obliges the User to pay the price of the goods;

Personal Data

Any information about the User (i.e., the data subject) from which they can be directly or indirectly identified;

User

The natural person to whom the personal data relates, most commonly a customer or potential customer or user of our website;

Processor

Carries out Personal Data processing activities on the basis of a contract or other mandate for the Controller;

Processing of Personal Data

Any operation or set of operations which is performed upon Personal Data or sets of Personal Data, whether or not by automated processes, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other disclosure, alignment or combination, restriction, erasure or destruction;

Special Categories of Personal Data

Such Personal Data which reveals the racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, or sex life or sexual orientation of an individual. Genetic and biometric data are also considered to be a special category of data when they are processed for the purpose of uniquely identifying a natural person;

The Miners Coffee Club

A loyalty program designed to reward our loyal customers with points that can be redeemed for discounts and special offers operated by a third-party.

1. WHAT PERSONAL DATA DO WE PROCESS, HOW DO WE OBTAIN IT, FOR WHAT PURPOSE AND FOR HOW LONG DO WE KEEP IT

What Personal Data do we process?

We process the following Personal Data about you:

• name and surname,
• contact details (in particular: e-mail, telephone number),
• delivery address,
• billing data and bank details (data necessary for bookkeeping and payment for goods), a note on the Order,
• transaction history (amounts spent on purchases and the points earned) to administer The Miners Coffee Club loyalty program,
• the information you provide to us in the course of communication with us (in particular, this will include your questions and answers to your questions, communication with you),
• User account login and User account activity (in particular, the data filled in by the User in the User account, purchase history, time of registration, date of last profile update),
• IP address,
• cookies.

We do not process Special Categories of Personal Data.

For how long do we store your Personal Data?

We process your Personal Data to the extent necessary for the duration of the Contract and for the time necessary to exercise the rights and obligations arising from the contractual relationship between you and us and the possible exercise of claims arising from these contractual relationships (e.g. exercise of rights arising from defects in the goods in the context of a claim, the exercise of the warranty on the goods, etc.). Please note that in some cases the period for storing the Personal Data may be up to 15 years after the execution of the Contract.

How do we obtain Personal Data?

Publicly Available Personal Data. We may process Personal Data from publicly available sources, our marketing partners, and combine it with Personal Data that you voluntarily provided to us. We take steps to ensure that third parties are legally entitled to provide this information to us. For example, this will include demographic information, IP addresses and cookies. This is to improve the provision of our services and to promote the sale of our goods.

User Account, Newsletter, Query. You voluntarily provide us with Personal Data by setting up a User account for the E-shop and updating it subsequently. You can also voluntarily subscribe to our newsletters or tell us about a query.

Website. We also process information about when you visit and view our Website. This information may include, for example, your IP address, the date and time you accessed our Website, information about your internet browser, operating system or your language settings. We may also look at your Website activity history, such as which links you visit on our Website and which products you are shown. However, information about your activity on the Website is anonymized for your maximum privacy.

If you access our Website from a mobile phone or similar device, we may also process technical information about your mobile device (data about your mobile phone, etc.). This information is purely technical in nature and not connected with any specific User that could lead to their identification. We may collect this data as part of a log or through the use of cookies or other tracking technologies. The rules for the use of cookies and other tracking technologies are described in more detail in our Cookie Policy. 

Social Networks. We have profiles on Facebook and Instagram. Any information, communications or materials that are provided through a social media platform are also provided in accordance with the privacy policies of those platforms. The privacy policy is addressed separately within each of the aforementioned platforms.

What are the purposes and legal bases for the Processing of your Personal Data?

Fulfilling your Request 

We will process your Personal Data to perform the Contract that exists between us as a result of your decision to use our E-shop, Website or The Miners Coffee Club. This includes but is not limited to, replying to your message or enquiry via phone, e-mail, social media or contact form. For this purpose, we may process: your name, surname, contact details (e-mail address, phone number), content of your message.

Legal basis for such processing: performance of a contract in accordance with Art. 6 (1)(b) of the GDPR.

Provision of our Services

We will process your Personal Data to perform the Contract that exists between us as a result of your decision to use our E-shop, Website or The Miners Coffee Club. This includes, but is not limited to, storing your personal data in our company database, and processing your data upon your instructions. For this purpose, we may process: your name, surname, contact details (e-mail address, phone number), delivery address, invoicing and payment details, content of our communication via different channels, information related to the provided services.

Legal basis for such processing: performance of a contract in accordance with Art. 6 (1)(b) of the GDPR.

Personalized Advertising

If you give us consent, we engage in personalized advertising to enhance your shopping experience by showing you advertisements that are more relevant to your interests. To facilitate this, we process certain data about your activities and preferences. We work with third parties to display advertising on our Website or to manage and display our advertising on other sites. Our partners may use cookies or similar tracking technologies to serve you advertising or other content based on your preferences. In the case of cookies, please read the Cookie Policy for the retention period for each type of cookie.

If you do not wish to receive personalized advertising from us, you can opt out by adjusting your user preferences in your account settings, by using the opt-out links provided in our communications, or by contacting us directly at ask@theminers.eu.

Legal basis for such processing: consent to processing of personal data in accordance with Art. 6 (1)(b) of the GDPR.

Content Created on Blog 

We have a publicly accessible blog on our Website. If the Website allows you to add comments, please note that any information you put in a comment on our blog can be read and used by anyone. If your Personal Data appears on our blog and you wish to remove it, please contact us at ask@theminers.eu. Your participation and contribution to our blog are entirely voluntary, and you may withdraw your consent at any time by contacting us at ask@theminers.eu.

Legal basis for such processing: consent to processing of personal data in accordance with Art. 6 (1)(b) of the GDPR, which you provide by submitting your comment.

Competitions and Other Promotions 

We may conduct surveys, run contests or other promotions on our Website or through social media. Your participation in our promotions is voluntary. As part of these surveys, contests and promotions, we may ask you for Personal Data, such as your name, address, date of birth, phone number, e-mail address, username and similar information. We will use the Personal Data you provide to administer these promotions. We may share the Personal Data you disclose with our partners and affiliates in accordance with this Privacy Policy and our policies for promoting our goods and services.

Legal basis for such processing: consent to processing of personal data in accordance with Art. 6 (1)(b) of the GDPR and performance of a contract in accordance with Art. 6 (1)(b) of the GDPR.

Keeping you Informed

We may send you commercial communications if you give us consent or based on our legitimate interest to promote our goods and services unless you opt-out of receiving commercial communications by checking a box in any of our e-mail communications. e may also use the registered User's telephone number to distribute commercial communications by SMS. In this case, the User can unsubscribe from receiving SMS by sending a return SMS or short message to roastery@theminers.eu. You can object to the processing of your Personal Data on the basis of our legitimate interests at any time (see section 5. on your rights for more details).

If you register for our newsletter, we will send you interesting information and offers to promote our goods and services based on your consent. If you no longer wish to receive e-mails, then click on the unsubscribe link in the footer of each of our e-mails. If you still receive our news and offers via e-mails, you can object to receiving them (see section 5. on your rights below).

Legal basis for such processing: consent to processing of personal data in accordance with Art. 6 (1)(a) of the GDPR and legitimate interest to develop our business in accordance with Art. 6 (1)(f) of the GDPR.

Improving our Services 

We determine your satisfaction with your purchase through an e-mail questionnaire as part of the evaluation services in which our E-shop is involved. This is sent to you shortly after you make a purchase with us, unless you opt-out. We use the Processor who operates the evaluation service to send the questionnaire, evaluate your feedback and analyze our market position; we may pass on information about the goods you have purchased and your e-mail address in particular for this purpose.

Legal basis for such processing: legitimate interest to develop our business and our know-how in accordance with Art. 6 (1)(f) of the GDPR.

Fulfilling our Legal Obligations

Please note that we process some Personal Data if we are legally obliged to do so. The scope of Personal Data we process for this purpose depends on the requirements imposed on us by the public authorities and by applicable law. We are obliged under Section 31 of the Accountancy Act (No. 593/1991 Coll.) to keep accounting documents and accounting records (invoices) for a period of 5 years starting from the end of the accounting period to which they relate. We are also obliged under Section 47 of the Tax Administration Act (No 337/1992 Coll.) to keep the invoice for 3 years from the end of the tax period in which the tax liability related to the invoice arose. The invoice contains the following Personal Data: name, surname, e-mail address, billing address or other identification of the User and details of the purchased goods.

Please also note that we are obliged, pursuant to Section 35 of the Value Added Tax Act (No. 235/2004 Coll.), to archive tax documents for 10 years from the end of the tax period in which the transaction took place. The tax documents contain the following Personal Data: name, surname, e-mail address, billing address or other identification of the User and details of the goods purchased.

Legal basis for such processing: compliance with a legal obligation to which we are subject in accordance with Art. 6 (1)(c) of the GDPR.

2. WHAT MEASURES HAVE WE TAKEN TO PROTECT YOUR PERSONAL DATA?

Technical and Security Measures. Taking into account the likelihood of risks and the cost-effectiveness of possible measures as well as the technical possibilities, we have implemented technical security and organizational measures in all areas where Personal Data is processed (in particular, Website operation, E-shop operation, employee agenda, communication with customers).We use a secure information system that provides Personal Data with security appropriate to the state of the art, cost, nature, scope and purpose of the processing.

Organizational Measures. All employees who have access to Personal Data are bound by confidentiality and must respect our security policy. Access to all systems, including the information system, is personalized and covered by passwords. The information system keeps logs so that we can control the access of individual employees to individual databases. Employees are regularly trained.

3. DO WE TRANSFER YOUR PERSONAL DATA TO THIRD PARTIES?

Your Personal Data may be transferred to our business partners (Processors) or other third parties if required by law.

Processors. We only use vetted Processors with whom we have a written contract and who provide us with at least the same guarantees as we provide you. These are only Processors who are from the European Union, or countries that have been declared and recognized as safe, or countries with which we have standard contractual clauses in accordance with Article 46 of the GDPR, and who provide your Personal Data with a comparable level of protection as if the GDPR and Czech law were applied. All of these Processors are bound by confidentiality obligations and may not use the Personal Data you provide for any purpose other than that for which we have disclosed it in accordance with this Privacy Policy. 

Our current Processors of Personal Data are here.

Legal Obligations. We may transfer Personal Data to third parties other than the Processors if required to do so by law or in response to lawful requests by public authorities or a court order in litigation.

4. DO WE TRANSFER YOUR DATA TO COUNTRIES OUTSIDE THE EU/EEA?

We transfer your Personal Data to countries outside the European Union and the European Economic Area where we engage with external service providers. In such a case, we transfer your Personal Data only to a country that is considered to have an adequate level of protection in accordance with the EU Commission's decision or there are appropriate safeguards in place to protect your Personal Data, such as standard contractual clauses or binding internal company rules. Regardless of the country in which your Personal Data is processed, we take reasonable technical, legal and organisational measures to ensure that the level of protection is the same as in the European Union and the European Economic Area. If you wish to know more about international transfers of your Personal Data and the appropriate safeguards that we have in place to govern the transfer of your Personal Data you may contact us through email at ask@theminers.eu.

If we are involved in a merger, acquisition or other restructuring, your Personal Data may be transferred as part of that deal. We will notify you (for example, via a message to the email address associated with your user account) of any such deal and outline your options.

5. WHAT RIGHTS DO YOU HAVE?

You can ask us for access to your Personal Data and request that we correct, amend, delete or restrict the Processing of your Personal Data where it is inaccurate or has been processed in breach of applicable data protection laws. You have the right to data portability, to object to the processing of Personal Data, to withdraw consent to the processing of Personal Data and to not be subject to automated individual decision-making, including profiling (which we do not do).

Your rights regarding the processing of Personal Data can be exercised by e-mailing roastery@theminers.eu, in person, or by post to our address.

We endeavor to comply with your requests promptly, but no later than 1 month. However, there may be circumstances in which we cannot provide access (for example, where the information requested threatens the privacy of others or other legitimate rights, or where the cost of providing access would be disproportionate to the risks to the individual's privacy in the particular case). We may take reasonable steps to verify the identity of the User before taking any action on data subject rights.

Right of Access to Personal Data 

Under Article 15 of the GDPR, you have the right to access your Personal Data that we process, which includes the right to obtain a confirmation as to whether we process your Personal Data and information about the purposes of the processing, the categories of Personal Data concerned, the recipients to whom the Personal Data have been or will be disclosed, the intended duration of the processing, the existence of the right to request the Controller to rectify or erase Personal Data relating to Users or to restrict or object to the processing, the right to lodge a complaint with a supervisory authority, any available information about the source of the personal data if not obtained from Users, the fact that automated decision-making, including profiling, takes place, appropriate safeguards for the transfer of data outside the European Union, where the rights and freedoms of others will not be adversely affected, a copy of the Personal Data. In the event of a repeated requests, we are entitled to charge a reasonable fee based on administrative costs.

Right to Rectification of Inaccurate Data

According to Article 16 of the GDPR, you have the right to rectification of inaccurate Personal Data. We will make the rectification without undue delay, but always taking into account the given technical possibilities.

Right to Erasure

According to Article 17 of the GDPR, you have the right to erasure of Personal Data relating to you unless we can demonstrate legitimate legal grounds for processing such Personal Data. We have mechanisms in place to ensure the automatic anonymization or erasure of Personal Data when they are no longer needed for the purpose for which they were processed.

Right to Restriction of Processing

According to Article 18 GDPR, you have the right to restrict processing until the complaint is resolved if you contest the accuracy of your Personal Data, the grounds for processing or if you object to the processing.

Right to Notification of Rectification, Erasure or Restriction of Processing

According to Article 19 of the GDPR, you have the right to notification in the event of rectification, erasure or restriction of the processing of your Personal Data. We will notify individual recipients if Personal Data is rectified or erased, except where this proves impossible or requires disproportionate effort.

Right to Data Portability

According to Article 20 of the GDPR, you have the right to the portability of Personal Data relating to you that you have provided to us in a structured, commonly used and machine-readable format and the right to request the transfer of such data to another controller. If you provide Personal Data in connection with our contractual obligations or on the basis of consent and the processing is carried out by automated means, you have the right to receive such data in a structured, commonly used and machine-readable format. If technically feasible, the data may also be transferred to a controller designated by you, provided that the person acting on behalf of the respective controller is duly designated and can be authorized. If the exercise of this right would adversely affect the rights and freedoms of third parties, your request cannot be granted.

Right to Object to the Processing of Personal Data

According to Article 21 of the GDPR, you have the right to object to the Processing of your Personal Data where we process it based on our legitimate interest or for direct marketing purposes. If we do not demonstrate that there is a compelling, legitimate reason for the processing which overrides your interests or rights and freedoms, we will terminate the processing without undue delay on the basis of the objection. If the objection is made in the case of processing related to direct marketing, then we will terminate the processing without undue delay.

Right to Withdraw Consent to the Processing of Personal Data

Consent to the Processing of Personal Data may be withdrawn at any time. Please note that the withdrawal of your consent does not affect legality of the processing previously performed based on the originally granted valid consent.

Automated Individual Decision-Making, Including Profiling

You have the right not to be subject to any decision based solely on automated processing, including profiling, which would have legal effects on you or affect you in a similarly significant way. However, we point out that we do not carry out automated decision-making without the influence of human judgment with legal effects on the User.

6. CONCLUSION

This Privacy Policy may only be amended in writing. From time to time, we will amend the Privacy Policy (particularly with respect to changes in legislation). Users will be informed of this via our Website.

If you have any questions regarding our Privacy Policy, please contact us at ask@theminers.eu.

If you believe that the Processing of your Personal Data is not in accordance with the relevant legal regulations concerning the protection of Personal Data, you may file a complaint at any time with the Czech Office for Personal Data Protection, located at Pplk. Sochora 727/27, 170 00 Prague 7 - Holešovice (more information at https://www.uoou.cz/)

This Privacy Policy is effective from 01.01.2024.