Privacy

Processed personal data

Purpose of processing personal data

Legal basis for processing personal data

Personal data retention period

Legal or contractual requirement and possible consequences of not providing personal data

Personal data necessary to ensure mutual communication - first name, last name, e-mail, phone contact and the content of communication.

Such communication may take place online (email, contact form, etc.), by phone or via postal mail.

Ensuring communication (including sending, receipt and records of physical and electronic mail) between the Company and the Data subject.

Legitimate interest of the Company.

The Company’s legitimate interest is to ensure efficient and smooth communication with the Data subject.

For a period of 3 years from the last communication between the Company and the Data subject.

For a period of 10 yearsfrom the date of receipt or sending of paper mail.

Voluntary provision of data.

The Data subject may exercise their right to object to the processing of personal data with the Company pursuant to Art. 21 GDPR and § 27 of the Act.

Personal data necessary to maintain a list of Data subjects (black list) with whom the Company does not wish to enter into a contractual relationship – first name, last name, permanent or temporary residence address.

Maintaining a list of Data subjects (black list) with whom the Company does not wish to enter into a contractual relationship.

Legitimate interest of the Company.

The Company’s legitimate interest is to protect its business against Data subjects who have breached their contractual obligations, for which reason the Company does not want to enter into another contractual relationship with them.

For a period of 10 yearsfrom the date the Data subject is included in the list of Data subjects (black list) with whom the Company does not wish to enter into a contractual relationship.

The Company processes personal data based on legitimate interests because it carried out a purpose compatibility test, whereby the original purpose for which it processed personal data is compatible with this purpose.

Personal data necessary to ensure the “watchdog” function – email or phone contact.

The “watchdog” function is a voluntary function that the Portal user can choose for individual products, about which the Company will send information regarding availability.

Ensuring the “watchdog” function, i.e. informing the Data subject about product availability.

Legitimate interest of the Company.

The Company’s legitimate interest is to ensure the efficient and smooth operation of the “watchdog” function.

For a period of 1 year from the moment the Data subject selects the “watchdog” function for a specific product.

Voluntary provision of data.

The Data subject may exercise their right to object to the processing of personal data with the Company pursuant to Art. 21 GDPR and § 27 of the Act.

Personal data contained in documentation that is part of the registry -  first name, last name, signature, permanent or temporary residence address, e-mail, telephone number and other data under a specific regulation or data contained in the relevant documentation.

Registry management.

Legal obligation of the Company.

The Company fulfils its legal obligations pursuant to Act No. 395/2002 Coll. and Decree No. 410/2015 Coll.

For a period of 10 yearsfrom the date the document is included in the registry.

Providing personal data is a legal requirement.

Failure to provide personal data results in a breach of obligations arising from legal regulations.

Personal data necessary for the Company to exercise its rights - first name, last name, permanent or temporary residence address, date of birth and other personal data processed within individual proceedings.

The Company may enforce these rights through judicial and out-of-court means.

Enforcement of claims through judicial means via courts, arbitration courts, enforcement offices, law firms, notary offices or by out-of-court means.

Legal obligation of the Company.

The legal obligation consists of identifying the Data subject and the Company’s claim when exercising and enforcing rights.

Legal obligations arise from the following generally binding legal regulations: Act No. 40/1964 Coll., Act No. 513/1991 Coll., Act No. 160/2015 Coll., Act No. 233/1995 Coll., Act No. 244/2002 Coll., Act No. 162/2015 Coll. and Act No. 563/2009 Coll.

Legitimate interest of the Company.

If there is no legal obligation to process the Data subject’s personal data, but such personal data are necessary to exercise or enforce the Company’s rights, the Company processes personal data on the basis of legitimate interest.

The Company’s legitimate interest is the exercise of rights and their subsequent enforcement through legal means.

For the duration of the limitation period or forfeiture period or for a period of 10 years from the final conclusion of the proceedings.

The Company processes the Data subject’s personal data on the basis of its legal obligation.

Failure to provide personal data results in the Company being unable to fulfil its legal obligations and therefore its rights in asserting claims are limited.

The Company processes personal data based on legitimate interests because it carried out a purpose compatibility test, whereby the original purpose for which it processed personal data is compatible with the purpose of asserting claims.

Personal data necessary to enter into a contractual relationship, ensure communication between the contracting parties and proper performance of contractual obligations - first name, last name, email, phone contact, job position and signature.

Conclusion of a contract, ensuring communication between the contracting parties and proper performance of contractual obligations.

The Company processes personal data of the Data subject who acts as a representative or contact person of the other contracting party (e.g. statutory representative, member of a statutory body, authorised proxy, attorney-in-fact, contact person, etc.)

Legitimate interest of the Company.

The Company’s legitimate interest is to enter into a contractual relationship, ensure the fulfilment of its contractual obligations arising from the contractual relationship in question, and ensure communication between the contracting parties.

For the duration of the limitation period or forfeiture period applicable to the Company’s claims arising from the contractual relationship.

Voluntary provision of data.

The Data subject may exercise their right to object to the processing of personal data with the Company pursuant to Art. 21 GDPR and § 27 of the Act.

If the Data subject’s employer provides their personal data within the contractual relationship, § 78(3) of the Act applies, under which the employer may provide such data.

Personal data necessary to contact the other contracting party, who is the Data subject - first name, last name, e-mail, telephone number and other personal data stated in the contract or processed under the contract.

Conclusion and performance of a contract to which the Data subject is a contracting party (except for a consumer contract).

Pre-contractual negotiations and contractual obligation of the Company.

The contractual obligation arises from the Contract concluded with the Data subject.

For the duration of the limitation period or forfeiture period applicable to the Company’s claims arising from the contractual relationship.

Providing personal data is a contractual requirement.

Failure to provide personal data results in the Company being unable to enter into a contractual relationship with the Data subject.

Personal data necessary to conclude a consumer contract - first name, last name, delivery address, e-mail, phone contact and order content.

Conclusion of a consumer contract.

If the Data subject wishes to purchase a product or service via the Portal, they conclude a consumer contract with the Company. To conclude this contract, the Company is required to process personal data.

Pre-contractual negotiations and contractual obligation of the Company.

The contractual obligation arises from the Contract concluded with the Data subject.

For the duration of the limitation period or forfeiture period applicable to the Company’s claims arising from the contractual relationship.

Providing personal data is a contractual requirement.

Failure to provide personal data results in the Company being unable to enter into a consumer contractual relationship with the Data subject.

Personal data necessary for sending the newsletter -e-mail, first name and last name.

Sending general advertising notices about the Company’s activities, products and services to Data subjects who have requested them.

Consent of the Data subject to the processing of their personal data.

Consent may be withdrawn at any time.

For a period of 5 years from granting consent, or. until consent is withdrawn for the processing of personal data.

Voluntary provision of data.

Not giving consent results in commercial offers about products and services not being sent. 

Personal data necessary for sending the newsletter - e-mail, first name and last name.

Sending advertising notices about the Company’s products and services to Data subjects with whom the Company has a previous business relationship.

Legitimate interest of the Company.

The Company’s legitimate interest is the promotion of the Company’s products and services.

For a period of 5 years from the conclusion of the last business relationship.

Voluntary provision of data.

The Data subject may unsubscribe from newsletters at any time.

The Company processes personal data for this purpose based on a legal exception pursuant to § 116(15) of Act No. 452/2021 Coll.

Personal data necessary for exercising the Data subject’s rights -first name, last name, email, phone contact, the personal data concerned, the right being exercised and other information.

Exercising the rights of Data subjects through a request.

Legal obligation of the Company.

The legal obligation consists of enabling the Data subject to exercise their rights through a request and subsequently handling the request.

Legal obligations arise from the following generally binding legal regulations: GDPR and the Act.

For a period of 5 years following the year in which the Data subject’s request was handled.

The Company processes the Data subject’s personal data on the basis of its legal obligation.

Failure to provide personal data results in the Company being unable to fulfil its legal obligations and therefore being unable to handle the Data subject’s request.

Personal data necessary for maintaining accounting and tax records - first name, last name, email and phone contact and other data stated on the invoice.

Maintaining accounting and tax records.

Legal obligation of the Company.

The Company fulfils its legal obligations arising primarily under Act No. 431/2002 Coll., Act No. 222/2004 Coll., Act No. 40/1964 Coll., Act No. 311/2001 Coll., Act No. 595/2003 Coll., Act No. 582/2004 Coll., Act No. 283/2002 Coll. and Act No. 563/2009 Coll.

For a period of 10 years following the year in which the personal data were first processed.

Providing personal data is a legal requirement.

Failure to provide personal data results in a breach of obligations arising from legal regulations.

Personal data necessary to achieve the Company’s legitimate interest - first name, last name, phone contact, e-mail, call recording and other personal data provided as part of communication.

Improving calls and services provided via the call centre.

Legitimate interest of the Company.

The Company’s legitimate interest is ensuring an effective way of providing help and assistance as well as streamlining the provision of services.

For a period of 1 month from making the audio recording.

Voluntary provision of data.

The Data subject may exercise their right to object to the processing of personal data with the Company pursuant to Art. 21 GDPR and § 27 of the Act.

Personal data necessary to obtain a review or other feedback - first name, last name, e-mail, phone contact and the content of the review or other feedback.

Obtaining a review or other feedback.

If a product or service is purchased, the Data subject may rate the relevant product or service by leaving a review. If the Data subject has not purchased a product or service, they may provide the Company with other feedback.

Legitimate interest of the Company.

The Company’s legitimate interest is obtaining reviews (ratings) of a purchased product or provided service from the Data subject in order to improve the range of products sold or services provided and also obtaining other feedback in order to increase the quality of the Company’s individual business activities.

For the period of sale of the product or provision of the service by the Company or until the review or other feedback is deleted.

Voluntary provision of data.

The Data subject may exercise their right to object to the processing of personal data with the Company pursuant to Art. 21 GDPR and § 27 of the Act.

Personal data necessary to complete a satisfaction survey - first name, last name, e-mail, purchased product or services and the content of the satisfaction survey.

Sending a satisfaction survey.

The Company sends a satisfaction survey with the e-shop purchase to all Data subjects who purchased a product or service from it.

Legitimate interest of the Company.

The Company’s legitimate interest is improving the services provided when selling a product or services through the customer’s expression of satisfaction in the survey.

For a period of 3 yearsfrom completion of the satisfaction survey.

Voluntary provision of data.

The Data subject may exercise their right to object to the processing of personal data with the Company pursuant to Art. 21 GDPR and § 27 of the Act.

Personal data necessary for operating the "abandoned cart" service - e-mail and the content of the unfinished order.

Informing about an unfinished order

("abandoned cart").

If the Data subject is interested in purchasing a product or services via the Portal, but after adding items to the electronic cart does not complete the order, they have the option to activate the abandoned cart function by entering their e-mail address. In such a case, the Company will send the Data subject (to the e-mail they provided) a reminder regarding the unfinished order and its content.

Legitimate interest of the Company.

The Company’s legitimate interest is improving the Company’s services by reminding the Data subject that the in-progress order is not bindingly concluded, and the Data subject may return to it at any time and complete it.

For a period of 7 days from the date of entering the e-mail on the Portal in order to access the "abandoned cart" function.

Voluntary provision of data.

The Data subject may exercise their right to object to the processing of personal data with the Company pursuant to Art. 21 GDPR and § 27 of the Act.

Personal data necessary to ensure participation in a competition and other activities related to the competition based on the rules (statute) of the competition, such as publication of personal data, participation in advertising or marketing activities as a winner or participant in the competition, etc. – personal data processed within a specific competition such as first name, last name, social network profile, delivery address, order information, draw information and the content of a comment on a social network (photo, text or audiovisual recording).

Organisation of the competition, drawing from among participants, publication of winners and other purposes arising from the competition rules (statute).

If the Data subject actively participates in the competition, they enter into a contractual relationship with the Company, the subject of which is participation in the competition, handing over the prize and other activities arising from the competition rules (statute).

In some cases, the Data subject may automatically participate in the competition based on an order of products or services from the Company

Pre-contractual negotiations and contractual obligation of the Company.

If the Data subject actively participates in the competition, they enter into a contractual relationship with the Company, the subject of which is participation in the competition, handing over the prize and other activities arising from the competition rules (statute).

Legitimate interest of the Company.

In some cases, the Data subject may automatically (passively) participate in the competition based on an order of products or services from the Company or based on other activity towards the Company, and in such a case the Company will include them in the competition or draw for a prize. In this case, it is the Company’s legitimate interest in promoting its activities, services or products.

For the duration of the limitation period or forfeiture period applicable to the Company’s claims arising from the contractual relationship, if the legal basis is pre-contractual negotiations or a contractual obligation.

For a period of 5 yearsfrom handing over the prize to the winner within the competition, if the legal basis is the Company’s legitimate interest.

Providing personal data is a contractual requirement.

Failure to provide personal data results in the Data subject being unable to participate in the competition.

By purchasing a product or service or other activity, the Data subject is automatically included in the competition.

The Data subject may exercise their right to object to the processing of personal data with the Company pursuant to Art. 21 GDPR and § 27 of the Act.

Personal data necessary for promoting the Company’s activities, services or products on social networks - first name, last name, reaction, comment and Data subject profile.

Operating fan pages or other profiles on social networks for the purpose of promoting the Company’s activities, services and products.

The Company has created various profiles on social networks (Facebook and Instagram) and, as the operator of these profiles, also processes personal data of social network users who visit these profiles. It operates these profiles for the purpose of promoting activities, services and products, while interacting with individual social network users as part of this activity.

Legitimate interest of the Company.

The Company’s legitimate interest is promoting the Company’s activities, services and products

For the period of operating the social network profile.

Voluntary provision of data.

The Data subject may exercise their right to object to the processing of personal data with the Company pursuant to Art. 21 GDPR and § 27 of the Act.

Personal data necessary for promoting the Company’s activities, services or products -photo and audiovisual recording.

The Company may also associate other personal data with photos or audiovisual recordings, such as - first name, last name, e-mail, telephone number and position.

Promotion of the Company’s activities, services or products.

For the purpose of promoting its activities, services or products, the Company takes photos or makes audiovisual recordings, which may also include personal data of Data subjects in the form of their likeness. The Company makes these photos or audiovisual recordings e.g. as part of organising activities - conferences, seminars, press conferences, gatherings, etc.

The Company processes this personal data on the basis of its legitimate interests in the case of:

a) where the main purpose of taking the photo or audiovisual recording is not the Data subject (i.e. it is not a presentation of a specific Data subject);

b) where the main purpose of taking the photo or audiovisual recording is the Data subject, but that Data subject may reasonably expect this (e.g. it follows from their relationship with the Company or from the specific context of the situation);

c) where the main purpose of taking the photo or audiovisual recording is the Data subject, but these will not be further published to an indeterminate public;

d) where the main purpose of taking the photo or audiovisual recording is the Data subject, but their personal rights are not unlawfully interfered with.

Legitimate interest of the Company.

The Company’s legitimate interest is promoting the Company’s activities, services or products by taking photos or audiovisual recordings.

For a period of 5 years from the start of processing personal data.

Voluntary provision of data.

The Data subject may exercise their right to object to the processing of personal data with the Company pursuant to Art. 21 GDPR and § 27 of the Act.

Personal data necessary for promoting the Company’s activities, services or products -photo and audiovisual recording.

The Company may also associate other personal data with photos or audiovisual recordings, such as - first name, last name, e-mail, telephone number and position.

Promotion of the Company’s activities, services or products.

For the purpose of promoting its activities, services or products, the Company takes photos or makes audiovisual recordings, which may also include personal data of Data subjects in the form of their likeness. The Company makes these photos or audiovisual recordings e.g. as part of organising activities - conferences, seminars, press conferences, gatherings, etc.

The Company processes this personal data on the basis of the Data subject’s consent where the legal basis of its legitimate interests is not sufficient for the processing.

Consent of the Data subject to the processing of their personal data.

Consent may be withdrawn at any time.

For a period of 5 yearsfrom granting consent, or until consent is withdrawn for the processing of personal data.

Voluntary provision of data.

Not giving consent results in the Company not taking a photo or making an audiovisual recording.

Personal data necessary to receive and handle a complaint - first name, last name, permanent or temporary residence address, the complained-about product or service and other data stated in the complaint.

Receiving and handling complaints.

The Company is obliged to accept, process, handle and keep records of complaints.

Legal obligation of the Company.

Legal obligations arise from the following generally binding legal regulations: Act No. 40/1964 Coll., Act No. 108/2024 Coll.

For the duration of the limitation period or forfeiture period applicable to the Company’s claims arising from the contractual relationship.

Providing personal data is a legal requirement.

Failure to provide personal data results in a breach of obligations arising from legal regulations.