Privacy Policy
On this page
1. Basic Information
1.1 Contents of the document. This personal data processing policy describes how we process the personal data of users of our portal. In particular, you will learn what personal data we process, why and on what basis we do so, to whom we transfer it, and what your rights are in relation to its processing. All personal data processing is carried out in accordance with European Union General Data Protection Regulation No. 2016/679 commonly referred to as GDPR. This policy takes effect on 27 October 2025.
1.2 Our position. All described personal data processing activities are carried out by the controller, Ing. Tomáš Senko, with its registered office at Příčná 1892/4, 110 00 Prague, the Czech Republic, ID No. 23351047, registered in the Czech Trade Licensing Register (hereinafter referred to as “we” for greater clarity). This means that we determine the purposes for which we collect your personal data, as described below, determine the means of processing, and are responsible for its proper execution.
1.3 Scope of personal data processing. The personal data we process includes:
a) identification data, in particular name and surname,
b) contact details, in particular email address,
c) order and transaction data, in particular the services ordered, and other information related to the order of our services and payment for them,
d) data on mutual communication, in particular the content and other data related to communication between us and you regarding orders and transactions,
e) registration and settings data, in particular data related to your user account and data on the settings of our portal and services,
f) data on the use of the portal, in particular your IP address, data on your device, data obtained through the use of cookies, or data on what you do on our website.
2. Why and How Do We Process Your Personal Data?
2.1 Providing services to portal customers. When providing our services, we process your personal data, specifically identification data, contact details, order and transaction data, and data about mutual communication. We do this on the basis of and for the purpose of fulfilling our obligations arising from concluded contracts and for the conclusion of such contracts.
2.2 Operation of the portal. When you visit our portal, we process your registration and settings data and data on your use of the portal to ensure its proper functioning, based on our legitimate interest in providing our services via the internet.
2.3 Improvement and development of portal services. We also process data on the use of the portal for the purpose of measuring website traffic and creating statistics and records that we use to evaluate and develop our services, based on our legitimate interest in monitoring website traffic and developing and optimizing our services.
2.4 Determining your satisfaction. To determine your satisfaction with our services, we process your identification data, contact details, order and transaction data, and communication data based on our legitimate interest in obtaining your feedback.
2.5 Security and testing. To protect our portal and all services from cyber attacks and fraud, as well as to test new features and changes to the website, we process data about the use of the portal based on our legitimate interest in securing and improving our services.
2.6 Protection of legal claims and internal control. We process your identification data, contact details, order and transaction data, and mutual communication data based on our legitimate interests for the purpose of protecting legal claims and our internal records and control.
2.7 Compliance with our legal obligations. We also process your personal data for the purposes of and on the basis of compliance with our legal obligations, in particular those related to the provision of information to public authorities.
2.8 User support. We process your identification data, contact details, order and transaction data, communication data, and registration and settings data for the purpose of handling your requests related to orders or our services on the basis of our obligation to perform contracts concluded between us and you and for the conclusion of such contracts. When handling other possible requests, we process your personal data based on our legitimate interest in providing our services and ensuring adequate support.
2.9 Sending commercial communications to customers. If we obtain your email address in connection with an order or our services, we may also process your identification data, contact details, and registration and settings data for the purpose of further offering our services through commercial communications based on our legitimate interest in promoting ourselves, unless you refuse to receive such communications.
2.10 Sending commercial communications based on consent. Based on your consent, we process your personal data for the purpose of sending commercial communications, to the extent of the consent given. We typically use identification data, contact details, and registration and settings data for this purpose.
2.11 Online advertising. We may process data about your use of our website in order to display personalized ads on our website and third-party websites. Depending on the type of advertising, the basis for this is either our legitimate interest in promoting our business or, for certain types of advertising, your consent, if we ask for it and you decide to give it to us.
2.12 Storage period. We only store personal data for as long as is necessary to achieve the stated purposes of personal data processing. Once the purpose of processing has ceased to exist, we will delete the personal data. As a rule, we store personal data for the duration of the limitation period (usually 3 years) and for one year after its expiry, taking into account possible claims made at the end of the limitation period. In addition to the above, the following special storage periods apply:
a) We process the data connected with membership services and user accounts for their duration and subsequently for the duration of the statutory limitation period (usually 3 years) and one year after its expiry, taking into account possible claims made at the end of the limitation period.
b) In the event of legal or other proceedings, we process your personal data to the extent necessary for the duration of such proceedings and for the remainder of the limitation period after their conclusion.
c) For the purpose of sending commercial communications to customers, we process your personal data until you refuse to receive commercial communications.
d) To comply with legal obligations, we process personal data for the time necessary to fulfill these obligations.
3. To Whom Is Personal Data Transferred?
3.1 Processors. We also use the services of other entities in the position of processors to process personal data, who process personal data only in accordance with our instructions. These are mainly IT service providers and other technology suppliers, such as CookieYes Limited, operators of analytical and marketing tools, in particular Google Ireland Limited, and providers of communication tools, in particular ECOMAIL.CZ, s.r.o.
3.2 Controllers. We may disclose your personal data to other entities acting as controllers. When ensuring the execution of payments, we transfer personal data to payment system operators, in particular Stripe (for more information, see https://stripe.com/en-cz/privacy) and PayPal (for more information, see https://www.paypal.com/privacy-center). For the provision of online advertising, we may transfer personal data to advertising system operators and social networks, in particular Google, which processes your personal data as described at https://policies.google.com/privacy). Further processing of your personal data after transfer to these persons is carried out independently by these other controllers, who are responsible to you for its lawfulness and for fulfilling all obligations under the law, including handling requests to exercise your rights.
3.3 Transfer outside the EU. If your personal data is transferred outside the European Economic Area, it will be based on an adequacy decision pursuant to Article 45 of the GDPR or appropriate safeguards pursuant to Article 46 of the GDPR.
4. Your Rights
4.1 Rights of the data subject. With regard to your personal data, you have the right to:
a) request the correction of inaccurate or outdated personal data, so if you find that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected or supplemented without undue delay,
b) request confirmation as to whether processing is taking place and, if so, information relating to such processing to the extent specified in Article 15 of the GDPR, as well as a copy of the data processed (we are entitled to charge a fee to cover the necessary costs for additional copies),
c) in some cases, you have the right to have your personal data deleted. We will delete your personal data without undue delay if we no longer need it for the purposes for which we processed it, or if you exercise your right to object to the processing and we find that we no longer have any legitimate interests that would justify such processing, or if it turns out that our processing of personal data is no longer in accordance with generally binding regulations. However, this right does not apply if the processing of your personal data is still necessary for the fulfillment of our legal obligation, for archiving purposes, for scientific or historical research, or for statistical purposes, or for the determination, exercise, or defense of our legal claims.
d) Exercise the right to restrict the processing of personal data. This right allows you, in certain cases, to request that your personal data be marked and that this data not be subject to any further processing operations – in this case, however, not forever (as in the case of the right to erasure), but for a limited period of time. We must restrict the processing of personal data if you contest the accuracy of the personal data before we agree on what data is correct, or if we process your personal data without a sufficient legal basis (e.g., beyond what we are required to process), but you prefer to have such data restricted rather than erased (e.g., if you expect to provide us with such data in the future anyway), or we no longer need the personal data for the above-mentioned processing purposes, but you require it for the establishment, exercise, or defense of your legal claims, or you object to the processing and we are obliged to restrict the processing of your personal data for the duration of our investigation, if your objection is justified,
e) request the transfer of personal data in cases of processing based on your consent or on the basis of a contract,
f) to object to the processing of personal data that occurs on the basis of our legitimate interest. We will stop processing your personal data unless we have serious legitimate reasons to continue such processing. In the event of an objection to marketing activities, we will terminate these activities in any case,
g) express your disagreement with the processing of your personal data for the purpose of sending commercial communications at any time, and you can also withdraw your previous consent to the processing of personal data for other purposes at any time, unless it is processing for the purpose of fulfilling our obligations arising from contracts, for the purpose of fulfilling our legal obligations, or for another purpose arising from our legitimate interests.
4.2 How to exercise your rights. You can exercise your rights by sending an email to our email address.
4.3 Right to lodge a complaint with a supervisory authority. If you believe that we have violated the GDPR in the processing of your personal data, you have the right to lodge a complaint with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, the Czech Republic (http://www.uoou.cz).
5. Cookies
5.1 Files stored on your device for later access (temporary files). Our portal may use cookie technology (and possibly other technologies based on a similar principle, such as Web Storage). This means that we store small data files in a dedicated location in your device’s memory, which allow us to provide you with portal services and further improve them. For simplicity, we will refer to all these technologies as “cookies” hereinafter.
5.2 Cookies necessary for providing the service. Some cookies are technologically necessary for providing the service. This means that their storage cannot be avoided while maintaining the functionality of the portal. These are mainly cookies for:
a) storing your choices in connection with orders and services,
b) saving website settings,
c) logging into your user account,
d) ensuring IT security.
5.3 Other types of cookies. We use certain cookies to provide you with more efficient and targeted services or better quality services that are more tailored to your preferences. As part of this, we may store cookies on your device:
a) for analyzing traffic, performance, and use of the website, including third-party cookies,
b) for advertising purposes to display tailored advertising on our and other websites, including third-party cookies,
c) to ensure the functioning of additional features of our website, in particular links to social networks, including third-party cookies.
5.4 Cookie policy. Detailed information about the cookies used can be viewed in the interface of our web portal.
5.5 Cookie storage settings. You can configure your cookie settings via the settings available on the portal. You can also configure your device settings to block cookies if you do not agree to their use on our website. If you choose to do so, please note that some parts of the portal may not function properly.