Personal data protection policy

1.1. What rules do we follow?

When handling personal data, we act in accordance with the laws of the Czech Republic and directly applicable European Union regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”), Act No. 110/2019 Coll. on personal data processing, as amended, and Act No. 480/2004 Coll. on certain information society services, as amended.

1.2. What is personal data?

Personal data means any information that identifies or can identify a natural person. Personal data includes in particular (but not exclusively):

• identification data, such as name and surname, identification number, tax ID, date of birth, gender, or account username;
• contact data, such as residential (or delivery) address, phone number, or email address;
• other data, such as information obtained via cookies, IP address (including browser type, device, and operating system), time and number of visits to the website, and similar information.

2.1. How do we obtain your personal data?

You mainly provide personal data when filling in the contact form. Please tell us if your details change. When you visit and use the website, some personal data may also be obtained and stored via cookies. More about cookies is in section 5 of this Policy.

2.2. On what basis and for what purposes do we process your data?

• Personal data provided when requesting a quote (especially via the contact form) and ordering goods/services may be processed without your explicit consent on the basis of and for the purpose of entering into and performing a contract, and to fulfil our legal obligations and protect our legitimate interests, including legal claims.
• If you give us consent on the website, we may process personal data provided there — especially via the contact form — for commercial communications and direct marketing, or other purposes you explicitly agreed to. If you are under 15, consent must be given by your legal representative. Where in doubt, we may ask for age confirmation.
• Where cookies involve processing personal data, we process that data on the basis of your consent (via your browser settings), our legitimate interest, or for entering into and performing a contract (especially first-party cookies) — mainly for user support, improving our services including analytics, and marketing.

We may use your personal data for a purpose other than the one for which it was obtained only with your consent.

2.3. How long do we keep the data?

Personal data provided in connection with requests and orders is used only for as long as necessary to perform the contract, meet legal obligations, or protect our legal claims.

If you give explicit consent to processing, or if we use your email for commercial communications under the previous section, the data will be used for as long as the website offers similar goods or services to those you ordered from us, or for the period stated in the consent.

3.1. Right to withdraw consent

If we process your personal data solely on the basis of your consent (i.e. without another legal ground), you may withdraw that consent at any time.

You can withdraw consent at any time by:

• email to our contact address;
• phone to our contact number;
• letter to our delivery address;
• for commercial communications — using the unsubscribe method in each marketing email.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

3.2. Right of access

You have the right to ask whether we process your personal data. If we do, you have the right of access, including information about the purpose of processing, categories of data, recipients or categories of recipients, and the retention period.

On request we will provide a copy of the data we process. For further copies we may charge an administrative fee not exceeding the costs of producing and delivering those copies.

3.3. Right to rectification

If your personal data is inaccurate or incomplete, you have the right to request prompt correction and/or completion.

3.4. Right to object

You have the right to object at any time to processing of your personal data for direct marketing, including any automated processing. After an objection, we will stop processing your data for those purposes.

3.5. Right to erasure (“right to be forgotten”)

You have the right to ask us to erase your personal data if it is no longer needed for the purposes for which it was collected or processed; you have withdrawn consent; you have objected to processing; or the data was processed unlawfully. Unless legal grounds for refusal exist, we must comply.

3.6. Right to restriction of processing

You have the right to ask us to restrict processing if you contest the accuracy of your data; processing is unlawful and you request restriction instead of erasure; we no longer need the data but you need it for legal claims; or you object to processing.

While processing is restricted, we may only store your personal data; further processing requires your consent or another legal ground.

3.7. Right to data portability

You have the right to receive the personal data you provided to us in a structured, commonly used, machine-readable format and to have it transmitted to another controller.

3.8. How can you exercise your rights?

You can exercise your rights via our contact details. We will provide information and take action without undue delay.

We will do our best to help. If you are not satisfied with how we handle your request, you may contact the relevant authorities, in particular the Czech Office for Personal Data Protection (http://www.uoou.cz).

4.1. Who processes your personal data?

We are the controller of personal data within the meaning of the GDPR.

To the extent necessary to perform a contract or other obligations, we may share your personal data with other parties, such as carriers, pickup-point operators, cloud storage providers, email campaign managers, external accountants, or others involved in performing the contract or our duties. We may also engage other processors and recipients. We will tell you who processes your data upon request.

Your personal data will not be transferred outside the European Union unless necessary to perform a contract or otherwise permitted under the transfer rules set out in the GDPR.

4.2. How do we process personal data?

Personal and other collected data are secured against misuse. Personal data is processed electronically in an automated manner or in printed form in a non-automated manner.

5.1. What are cookies?

Cookies are text files stored on the computer or other electronic device of each website visitor that allow the website to function.

Not all cookies collect personal data; some only enable the website to work correctly. You can refuse cookies in your browser settings.