Private policy and GDPR.
The personal data controller referred to in Article 4 (7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and the free movement of such data ("GDPR") is: McCormick sro, IN: 08012954, DIČ: CZ 08012954, address: Čakovická č.ev. 23, Prague 9, 190 00
registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 311527.
Email: mccormick-sro@seznam.cz
Data Protection Officer (DPO) has not been set up in accordance with Article 37 of the GDPR.
I.
Characteristics of personal data.
Personal Data means any information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as: name, identification number, location data, IP address, photo, email, username, password, phone number,
country, city, gender, label, age, height, weight, breast size, eye color, nationality, languages, sexual orientation, etc.)

II.
Sources and categories of personal data processed.
· The controller processes the personal information you have provided to him or the personal information that the administrator has obtained based on your service order or other legal act leading to the conclusion of the contract.
· The controller processes your identification and contact details and data necessary for the performance of the contract or other legal act, see Article 6 paragraph 1 section b) "processing is necessary to fulfill a contract to which the data subject is party or to implement measures taken prior to the conclusion of the contract the data subject's request; "
III.
Legal reason and purpose of personal data processing.
· The legal ground for the processing of personal data is the performance of a contract between you and the trustee under Article 6 (a). (b) GDPR, the legitimate interest of the controller in providing direct marketing (in particular for the purpose of sending commercial communications and newsletters) pursuant to Article 6 (1) (a); and). f) GDPR;
· Your consent to the processing for the purpose of providing direct marketing (especially for sending commercial communications and newsletters) pursuant to § 6 para. 1 let. a) and the VAT Act in conjunction with Section 7 (2) of Act No. 480/2004 Coll., on certain information society services, without ordering goods or services.
· The purpose of personal data processing is to process your order and exercise the rights and obligations arising from the contractual relationship between you and the administrator; When ordering, personal information required for successful order execution (name and address, contact) is required. The provision of personal data is a prerequisite for the conclusion and
performance of the contract; see Article 6 (1) (b) for sending commercial communications and other marketing activities.

IV.
Data retention period
· The Administrator stores personal data for as long as is necessary to exercise the rights and obligations arising from the contractual relationship between you and the Administrator and to exercise claims from these contractual relationships (for 5 years after termination of the contractual relationship).
· After the retention period of personal data referred to in the previous paragraph, the controller deletes personal data unless otherwise required by law.

V.
Recipients of personal data (subcontractors of controller-processors)
· Recipients of personal data (processors) are persons or companies involved in the delivery of services, contractual payments, provision of other services related to the operation of the escort4world.com website.
· Providing marketing services.

VI.
Your rights
· The right of access to their personal data under Article 13, Article 14 and Article 15 of the GDPR
· The right to rectify personal data under Article 16 or to limit processing under Article 18 of the GDPR
· The right to delete personal data under Article 17 of the GDPR.
· The right to object to the processing referred to in Article 1 (a). 21 GDPR and data portability rights under Article 20 GDPR.
· The right to be notified in the event of personal data breaches under Article 34 of the GDPR.
· The right to withdraw consent to the processing in writing or electronically to the address or e-mail of the administrator.

VII.
Privacy Policy
· The Administrator declares that he has taken all appropriate technical and organizational measures to protect personal data.
· The administrator declares that only personally authorized persons may access personal data

VIII.
Final Provisions
· By submitting an order from the online order form, you acknowledge that you are familiar with the privacy policy and accept it in its entirety.
· You agree to these terms by ticking the consent via the online form. By confirming your consent, you acknowledge that you are familiar with the terms of your privacy and that you accept them in full.
· The administrator is authorized to change these conditions. It will publish a new version of the Privacy Policy
on your website and will send you a new version of this Privacy Policy to your email address provided to you by the administrator.
· The administrator does not intend to transfer personal data to a third country (outside the EU) or an international organization.

Consent to the processing of personal data

Pursuant to Act No 110/2019 Coll., On the processing of personal data, and in accordance with Article 6 (1) (a) of Regulation (EU) 2016/679 of the
European Parliament and of the Council of 27 April 2016 on the protection of individuals in in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46
/ EC (General Data Protection Regulation), which entered into force on 25 May 2018, I hereby express my free, specific,
informed and unambiguous consent to the processing of sent data Data Manager for the needs of the Company's services to my person, I agree to collect, store and process personal data provided to me by Administrators, including audiovisual records and photos. The consent is issued for a period of 5 years from
the date of dispatch and can be revoked at any time by written notice to the Administrator. In connection with the "right to be forgotten" as defined in the GDPR Regulation, I may at the same time request the Administrator to delete all data acquired in connection with my services, except for data that cannot be deleted for legal reasons (archiving of accounting documents) .