PRIVACY POLICY

1. INTRODUCTORY PROVISIONS

1.1. What rules do we follow when handling personal data?

In handling personal data, we act in accordance with the laws of the Czech Republic and the directly applicable regulations of the European Union, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), Act No. 110/2019 Coll., on the processing of personal data, as amended, and Act No. 480/2004 Coll., on certain information society services, as amended.

1.2. What are personal data?

Personal data means any information that identifies or can identify a specific natural person. Personal data include (but are not limited to):

• Identification data, such as first and last name, identification number, tax identification number, date of birth, gender, or login name for a user account;
• Contact data, such as residential (or mailing) address, telephone number, email address;
• Other data, such as information obtained via cookies, IP address (network identifier) including browser type, device, and operating system, the times and number of visits to the website interface, and other similar information.

2. COLLECTION AND USE OF PERSONAL DATA

2.1. How do we collect your personal data?

You primarily provide your personal data to us by filling in the contact form. In the event of any changes to your personal data, please let us know. Some personal data may also be collected and stored when visiting and using the website interface, particularly via cookies. For more information about cookies, see Article 5 of this Policy.

2.2. On what basis and for what purposes do we process your personal data?

• We may process personal data entered when inquiring (especially through the contact form) and ordering goods/services without your explicit consent on the basis of, and for the purpose of, concluding and performing a contract — i.e., for the purpose of delivering goods/services. We may also process these data on the basis of legal obligations and our legitimate interest in protecting our legal claims.
• If you give us consent on the website interface (by confirming a checkbox or similar), we may process your personal data provided on the website interface, especially when filling in the contact form, for the purpose of sending commercial communications and direct marketing, or for other specific purposes to which you have expressly consented. If you are under 15 years old, consent must be given by your legal guardian. In case of doubt, we may ask for proof of your age.
• If personal data are processed via cookies, we do so on the basis of your consent (which you provide by configuring your internet browser settings), or on the basis of our legitimate interest or for the purpose of concluding and performing a contract (mainly first-party cookies), particularly for user support, improving our services (including analyzing user behavior), and marketing.

We may only use your personal data for purposes other than those for which they were collected with your consent.

2.3. How long do we use the data?

We use personal data entered when inquiring and ordering goods only for the time necessary to fulfill the contract and meet legal obligations, or to protect our legal claims.

If you have given us your explicit consent to process your personal data, or if we use your email address to send commercial communications in accordance with the previous article, the data will be used for as long as the website interface is in operation (offering goods similar to those you have ordered from us), or for the duration stated in the consent.

3. YOUR RIGHTS IN CONNECTION WITH PERSONAL DATA

3.1. Right to withdraw consent to personal data processing

If we process your personal data solely on the basis of your consent (i.e., without any other legal reason), you can withdraw this consent at any time.

You can withdraw your consent to the processing of your personal data at any time by:

• sending an email to our contact email address;
• calling our contact phone number;
• sending a written letter to our mailing address;
• in the case of commercial communications – by following the method indicated in each email containing commercial communications (e.g., clicking on the unsubscribe link).

Withdrawing consent does not affect the lawfulness of data processing carried out up to the time consent was withdrawn.

3.2. Right of access to personal data

You have the right to request information from us about whether we process your personal data. If we do process them, you have the right to access these personal data and in particular the following information:

• the purpose of the processing;
• the categories of processed personal data;
• the recipients or categories of recipients to whom the personal data will be disclosed;
• the period for which the personal data will be stored.

Upon your request, we will provide you with a copy of the processed data. We may charge an administrative fee not exceeding the costs of making and sending additional copies.

3.3. Right to rectification

If your personal data are inaccurate or incomplete, you have the right to request immediate correction, i.e., rectification of inaccurate data and/or completion of incomplete data.

3.4. Right to object to processing

You have the right at any time to object to the processing of your personal data if we process them for direct marketing purposes, including any automated processing. Once you object, we will no longer process your personal data for these purposes.

3.5. Right to erasure (“right to be forgotten”)

You have the right to request that we delete your personal data if:

• the personal data are no longer needed for the purposes for which they were collected or processed;
• you have withdrawn your consent to processing;
• you have objected to the processing of personal data;
• the personal data were processed unlawfully.

If no legal grounds exist for refusing erasure, we are obliged to comply with your request.

3.6. Right to restriction of processing

You have the right to request that we restrict the processing of your personal data if:

• you contest the accuracy of your personal data;
• the processing is unlawful and you request restriction rather than erasure of personal data;
• we no longer need your personal data for processing purposes, but you require them for the establishment, exercise, or defense of legal claims;
• you have objected to the processing of your personal data.

When processing is restricted, we are only allowed to store your personal data; further processing is possible only with your consent or on legal grounds.

If the processing of personal data is restricted due to an objection, the restriction lasts as long as necessary to determine whether we are required to comply with your objection.

If the processing of personal data is restricted due to a dispute over accuracy, the restriction lasts as long as it takes to verify the accuracy of the data.

3.7. Right to data portability

You have the right to obtain your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format and to transmit these data to another data controller.

3.8. How can you exercise your rights?

You can exercise your rights related to personal data by contacting us using our contact details. All information and actions will be provided without undue delay.

We will do our utmost to accommodate your requests concerning the protection of your personal data. However, if you are not satisfied with the handling of your request, you have the right to contact the competent authorities, in particular the Office for Personal Data Protection (http://www.uoou.cz), which supervises personal data protection. This provision does not affect your right to contact the Office for Personal Data Protection directly.

If, for example, your place of residence, place of employment, or the place of an alleged personal data protection infringement is outside the Czech Republic in another EU Member State, you can contact the competent supervisory authority in that Member State.

4. MANAGEMENT AND PROCESSING OF PERSONAL DATA

4.1. Who processes your personal data?

We are the controller of personal data within the meaning of the GDPR.

To the extent necessary to fulfill the contract or other obligations, we may transfer your personal data to other parties, such as carriers, operators of pick-up points, cloud storage providers, email campaign managers, external accountants, or other parties involved in fulfilling the contract or our obligations. We may also appoint other processors or recipients of personal data. We will disclose who specifically processes your personal data upon your request.

Your personal data will not be transferred to countries outside the European Union unless it is necessary for the performance of a contract or for another reason in accordance with the GDPR’s rules for such transfers.

4.2. How do we process personal data?

All collected personal data and other data are fully secured against misuse. Personal data will be processed electronically in an automated manner or in printed form in a non-automated manner.

5. COOKIES

5.1. What are cookies?

Cookies are text files stored on the computer or other electronic device of every visitor to the website interface, which enable the website interface to function properly.

Not all cookies collect personal data; some only enable the website interface to function correctly. You can refuse the use of cookies by selecting the appropriate settings in your internet browser.