We process your data for our own purposes as the Operator. This means that we determine the purpose for which your personal data is collected, specify the means of processing, and are responsible for its proper execution.

2. Processors
In certain cases, the Operator may also process the personal data of data subjects through processors who are authorized to process personal data in accordance with Article 28 of the GDPR.Processors process the personal data of data subjects on behalf of the Operator. Processing of personal data through a processor does not adversely affect the exercise and enforcement of the data subject's rights. The Operator only uses processors that provide adequate technical, organizational, and other measures so that the processing meets GDPR requirements and the protection of the data subject's rights is fully ensured.The Operator utilizes the following categories of processors when processing the personal data of data subjects:

• A supplier providing technical solutions, webhosting services, maintenance, and support for IT systems used by the Operator.
• A supplier providing accounting and tax obligation services for the Operator.
  
  

3. Purpose of Personal Data Processing
As the operator, we exclusively process personal data that we can support with a legitimate legal basis and a defined purpose:

• Data processing for the purpose of user account registration
  On our website, you have the option to register a user account, through which you can make purchases more easily and have a record of all completed purchases in one place. The receipt and processing of personal data for this purpose takes place in accordance with Art. 6(1)(a) of the General Data Protection Regulation – specifically based on the consent granted for the processing of personal data for the purpose of user account registration. You have the right to withdraw your consent at any time.
• Data processing for the purpose of receiving and processing an order
  The receipt and processing of personal data through an order submitted by you – electronically, in person, by telephone, or in writing – and its subsequent processing in the form of delivering selected products, goods, or services, takes place in accordance with Art. 6(1)(b) of the General Data Protection Regulation. This processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract. Furthermore, we process personal data for the purposes of mutual communication or to fulfill obligations and exercise rights arising from this contractual relationship.
• Data processing for the purpose of obtaining updates via Newsletter
  On our website, you have the option to register your e-mail address if you are interested in being informed in a timely manner about our news and current promotions within our service provision. The receipt and processing of personal data for this purpose takes place in accordance with Art. 6(1)(a) of the General Data Protection Regulation – specifically based on the consent granted for the processing of personal data to receive current news via electronic mail to the provided e-mail address. You have the option to withdraw your consent at any time.
• Contact form or inquiries in another form
  If you wish to contact us via the contact form, write us your opinion, evaluation, or handle another inquiry or issue that has arisen, you can get in touch with us and we will be happy to help you. For this purpose, we will process your contact personal data in accordance with Art. 6(1)(f) of the General Data Protection Regulation. In this case, our legitimate interest is to assist our clients, but also to handle questions, requests, or complaints from third parties. You have the right to object to such processing at any time.
  
  

Depending on the specific purpose of the processing, we process different categories of your personal data:

• User account registration
  – E-mail, login password, telephone number, first and last name, residential address, or other correspondence address for shipment delivery needs.
• Receiving and processing an order
  – First and last name, residential address, or other correspondence address for shipment delivery needs, telephone number, e-mail.
• Registration and subscription to newsletters
  – E-mail.
• Contact form or inquiry in another form
  – Name, e-mail, message text, and in exceptional cases, telephone number.
  
  

When paying online via payment systems, you enter all your data on the secure pages of the bank.We do not come into contact with your sensitive payment data – we are only informed of the successful or unsuccessful outcome of the transaction.

6. Processing and Retention Period of Your Personal Data
Your personal data that we have processed or are processing in accordance with Art. 6(1)(b) of the GDPR – within the fulfillment of the operator's obligations – we further process for the purpose of fulfilling our legal obligations in the area of taxes and accounting arising from generally binding legal regulations (e.g., retention of individual accounting records and invoicing under Act No. 431/2002 Coll. on Accounting, as amended, for cases demonstrating compliance with tax obligations under tax legislation Act No. 595/2003 Coll. on Income Tax, Act No. 563/2009 Coll. on Tax Administration, etc.), which we must retain for the period stipulated by the relevant legal regulations. In any case, we follow the principle of personal data retention minimization under Art. 5(1)(e) of the GDPR, and therefore your personal data that is not subject to archiving according to special legal regulations will be deleted or anonymized.Personal data processed in accordance with Art. 6(1)(a) of the GDPR – based on consent granted for the purpose of, for example, sending current marketing news, is processed for a period of 3 years, or until it is withdrawn. In the event that the data processing period is nearing its end, we contact the data subject, at which point the consent to process personal data for the defined purpose can be renewed and extended for the next period. If the data subject does not grant consent or does not respond to the contact made, we will no longer process the personal data of the data subject – i.e., we will automatically remove the data from our records, electronically delete the data from systems, and physically shred it.
Personal data processed in accordance with Art. 6(1)(f) of the GDPR – based on a legitimate interest, which was obtained when responding to a submitted inquiry/initiative or question, is retained for the duration of handling the inquiry. If, after handling, the data was not subsequently transferred into a pre-contractual or contractual relationship, it is deleted without undue delay. As the Operator, we will ensure the deletion of personal data without undue delay.

As the Operator, we will ensure the deletion of personal data without undue delay after:

• all contractual relationships between you and us as the operator have been terminated; and/or
• all your obligations towards the operator have expired; and/or
• all your complaints and requests have been settled; and/or
• all other rights and obligations between you and us as the operator have been settled; and/or
• all purposes of processing established by legal regulations or purposes of processing for which you gave us consent have been fulfilled, if the processing was carried out on the basis of the data subject's consent; and/or
• the period for which the consent was granted has expired or the data subject has withdrawn their consent; and/or
• the data subject's request for the deletion of personal data has been granted and any of the reasons justifying the granting of this request have been met; and/or
• a decisive legal fact for the termination of the purpose of processing has occurred and, at the same time, the protective retention period defined with regard to the principle of minimizing the personal data retention period has also expired;
• and at the same time, the legitimate interest of the operator does not persist, all obligations established by generally binding legal regulations that require the retention of the data subject's personal data have expired (in particular for the purposes of archiving, performance of a tax audit, etc.), or which could not be fulfilled without their retention.

7. Disclosure of Data
Our company under no circumstances discloses the obtained data.

8. Cross-border
Transfer and Profiling of Personal DataCross-border transfer and profiling are not carried out.

9. Rights and Obligations of the Data Subject

• The customer is obliged to provide only complete and true data.
• The customer undertakes to update their data in the event of a change, at the latest before the execution of the first order following the occurrence of the change.
• The customer undertakes that if they provide personal data of a third party (first name, last name, telephone number), they do so only with their consent and the data subject is familiar with the procedures, rights, and obligations stated on this page.
• As our client and data subject, you have the right, to the specified extent, to decide on the handling of your personal data. You can exercise these rights in person at the registered office of the Operator or by telephone – in writing (by post / e-mail).

10. Contact Details of the Office and the Responsible Person