PRIVACY POLICY

This Privacy Policy has been prepared in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter referred to as the “Regulation”), and pursuant to § 19 et seq. of Act No. 18/2018 Coll. on Personal Data Protection and on amendments to certain acts (hereinafter referred to as the “Personal Data Protection Act”).

We value your privacy, which is why we are committed to protecting your personal data in accordance with applicable legal regulations. This Privacy Policy (hereinafter the “Policy”) outlines what personal data we collect, how we use it, and how we safeguard it.

When providing our services, we always prioritize your privacy and handle your personal data with care and responsibility. We encourage you to read this Policy carefully and become familiar with your rights before entering into a legal relationship with us.

ARTICLE I – CONTROLLER IDENTIFICATION

As the controller of this website and e-shop, we hereby inform you of how and to what extent we process your personal data and of your rights relating to this processing.

Key Terms:

• Controller: A natural or legal person responsible for the processing and protection of personal data. In accordance with Article 4(7) of the Regulation and § 5(o) of the Personal Data Protection Act, we are the controller of your personal data.
• Processor: A person who processes personal data on behalf of the controller. Our processors are listed in Article V of this Policy.
• Data Subject (You): Any natural person whose personal data we process. This may include clients, potential clients, website users, suppliers, client representatives, and other individuals.

ARTICLE II – PERSONAL DATA WE PROCESS

We only process personal data necessary for:

1. Providing our services;
2. Complying with legal obligations;
3. Protecting our legitimate interests.

Types of processed data include:

• Identification and contact data: Name, surname, title, permanent address, email address, phone number, date of birth.
• Transaction data: Order details, purchased products, bank account information.
• Telecommunication data: IP address, online identifiers.

We retain this data only for the period necessary to fulfill the purposes for which it was collected.

ARTICLE III – PURPOSES AND LEGAL BASES FOR PROCESSING

1. Purchase and contract performance:
   Data is processed to conclude and perform a purchase contract and to deliver ordered goods (Article 6(1)(b) of the Regulation).
2. Complaints and grievances:
   Data is processed to fulfill legal obligations and protect legitimate interests (Article 6(1)(c) and (f) of the Regulation).
3. Exercise of data subject rights:
   Data is processed based on legal obligations and legitimate interests.
4. Legitimate interests:
   Data is processed to protect our rights, prevent fraud, and maintain internal databases (Article 6(1)(f) of the Regulation).
5. Legal obligations:
   Data is processed for registry, tax, and accounting purposes.

ARTICLE IV – DATA RETENTION PERIOD

We retain your personal data:

1. During the contractual relationship and for 2 years after its termination.
2. Tax documents are retained for 10 years in accordance with Act No. 222/2004 Coll.
3. After the mandatory retention period, data is securely deleted in line with the principle of data minimization.

ARTICLE V – RECIPIENTS OF PERSONAL DATA

Your personal data may be shared with:

1. Processors: Technical service providers, accounting firms, website administrators.
2. State authorities: Courts, tax offices, police, inspection bodies—only when required by law.

Each recipient is required to ensure the confidentiality and protection of your data.

ARTICLE VI – DATA SUBJECT RIGHTS

You have the right to:

1. Information: Receive detailed information on the processing of your personal data.
2. Access: Obtain confirmation whether we process your data and receive a copy.
3. Rectification: Correct inaccurate or outdated data.
4. Erasure: Be forgotten if the data is no longer required for legal obligations.
5. Restriction: Restrict processing based on legal grounds.
6. Data portability: Transfer your data to another controller.
7. Objection: Object to processing for marketing purposes.
8. File a complaint: With the Office for Personal Data Protection.

ARTICLE VII – DATA TRANSFERS TO THIRD COUNTRIES

Your personal data is not transferred to third countries or international organizations.

ARTICLE VIII – POLICY AMENDMENTS

We reserve the right to update this Policy at any time. You will be informed of any significant changes in advance.

ARTICLE XIII – CONTROLLER CONTACT INFORMATION

[Insert your company name, address, email, and phone number here]
Feel free to contact us with any questions or to exercise your rights.