PRIVACY POLICY / PERSONAL DATA PROCESSING POLICY

for the online store located at
www.coolskates.cz

operated by a sole trader:

Alena Miketová
registered office: Jeremiášova 5, 779 00 Olomouc, Czech Republic
Company ID (IČO): 47844124
(hereinafter the “Controller”)

1. INTRODUCTORY PROVISIONS

1.1. This Privacy Policy / Personal Data Processing Policy (the “Policy”) governs how the Controller processes personal data of natural persons (the “Data Subject”) in accordance with:

• Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”), and

• Act No. 110/2019 Coll., on the processing of personal data (Czech Republic), as amended.

1.2. The Controller declares that personal data are processed lawfully, fairly and transparently, and only to the extent necessary for the specified purposes.

1.3. Controller’s contact details:
Email: info@coolskates.cz  Phone: +420 739 657 606

2. SCOPE OF PERSONAL DATA PROCESSED

2.1. The Controller processes, in particular, the following personal data:

a) first name and last name
b) billing and delivery address
c) email address
d) phone number
e) order details
f) payment details (the Controller does not store payment card numbers)
g) IP address and information about activity on the website (through the use of cookies)

2.2. Personal data are obtained primarily through:

a) placing an order
b) registering a user account
c) communication with the Controller
d) subscribing to a newsletter

3. PURPOSES AND LEGAL BASES OF PROCESSING

3.1. Performance of a contract

Personal data are processed for the purpose of:

a) processing and fulfilling orders
b) delivering goods
c) handling complaints and warranty claims
d) communicating regarding orders

Legal basis: Article 6(1)(b) GDPR (performance of a contract).

3.2. Compliance with legal obligations

Personal data are processed for the purpose of:

a) bookkeeping and accounting
b) issuing tax documents (invoices)
c) fulfilling other legal obligations

Legal basis: Article 6(1)(c) GDPR (legal obligation).

3.3. Legitimate interests of the Controller

Personal data may also be processed for the purpose of:

a) protecting the Controller’s legal claims
b) improving services and customer support
c) internal statistics and analyses

Legal basis: Article 6(1)(f) GDPR (legitimate interest).

3.4. Marketing communication

Personal data may be processed for the purpose of sending commercial communications and newsletters.

Legal basis: Article 6(1)(a) GDPR (consent).

The Data Subject may withdraw consent at any time by clicking the unsubscribe link in the email or by sending a request to the Controller’s email address.

4. RECIPIENTS OF PERSONAL DATA

4.1. Personal data may be transferred to third parties providing services to the Controller, in particular:

a) the e-shop platform provider (Shoptet)
b) carriers and delivery companies (e.g. DPD, PPL, Zásilkovna/Packeta)
c) payment gateway providers
d) the Controller’s accountant or tax advisor
e) IT and hosting service providers

4.2. These entities process personal data as processors on the basis of data processing agreements, where required.

4.3. As a rule, personal data are not transferred outside the European Union, except in cases where analytical or marketing tools of third parties are used and GDPR requirements for such transfers are met (e.g. appropriate safeguards).

5. DATA RETENTION PERIODS

5.1. Personal data are stored:

a) for the duration of the contractual relationship
b) subsequently for the period required by applicable law (in particular up to 10 years for accounting and tax documents)
c) for marketing purposes until consent is withdrawn
d) for the period necessary to protect the Controller’s legal claims

6. RIGHTS OF THE DATA SUBJECT

6.1. The Data Subject has the right:

a) to access personal data
b) to rectify inaccurate data
c) to erasure (“right to be forgotten”), where applicable
d) to restriction of processing
e) to data portability
f) to object to processing
g) to withdraw consent at any time (where processing is based on consent)
h) to lodge a complaint with a supervisory authority (in the Czech Republic: the Office for Personal Data Protection – ÚOOÚ)

7. SECURITY OF PERSONAL DATA

7.1. The Controller has implemented appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

7.2. Access to personal data is granted only to persons authorised by the Controller.

8. COOKIES

8.1. The website uses cookies for the purpose of:

a) ensuring the functionality of the e-shop
b) analysing traffic
c) marketing activities

8.2. Details on the use of cookies are provided in a separate document “Cookies Policy”.

9. FINAL PROVISIONS

9.1. The Controller may unilaterally change or update this Policy.

9.2. The current version of this Policy is always available on the website www.coolskates.cz.