Privacy Policy

Personal Data Processing Statement

The protection of personal data of the Buyer, who is a natural person, is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR").

The purpose of this document is to inform you, as the Buyer, if you acquire goods as a natural person, about the processing of your personal data by our company as the Seller and your related rights, in accordance with Article 13 et seq. of the GDPR.

This document also applies to the processing of your personal data based on your consent,
provided by confirming the order.
The processing of so-called cookies, with the exception of your rights, is governed by a separate statement of the controller
published on the controller's website.

I. Controller of Personal Data

The controller of your personal data is the natural person Roman Scherks, with a place of business at Skolni 808, Pardubice, Company ID: 13227858, Tax ID: CZ6402162272, registered in the Trade Register maintained by the Municipal Authority of Pardubice (hereinafter referred to as the "Controller"), who is also the Seller.

II. Processed Personal Data and Their Sources

The Controller processes personal data obtained directly from you, as the Buyer, which you entered in the order form in connection with concluding a contractual or other legal relationship between you and the Controller (in particular, the Purchase Contract), or when registering your user account on the Controller's website. These include the following personal data:

• first name and surname;
• company identification number, tax identification number;
• delivery address (unless personal collection of goods has been agreed upon);
• telephone number;
• email address.

Based on your consent to the processing of personal data, the Controller also processes the following personal data:

• telephone number; and
• email address.

III. Purpose of Processing Personal Data and Legal Basis for Processing Personal Data

The Controller processes your personal data for the purposes contained in your consent to the processing of personal data, negotiation of a contractual relationship and performance of the contract, fulfilment of legal obligations applicable to the Controller, and protection of the rights and other important interests of the Controller (e.g. enforcement of the Controller's receivables).

The Controller processes your personal data for the following purposes:

• your first name, surname, company identification number, and tax identification number for the purposes of concluding a Purchase Contract with you and its performance, fulfilment of legal obligations (e.g. bookkeeping, fulfilment of obligations under tax regulations) and protection of the rights and other important interests of the Controller (e.g. enforcement of receivables),
• delivery address for the purposes of contract performance (delivery of the shipment you ordered),
• telephone number for the purposes of contract performance (contacting you in the event of any problems with the shipment) and for marketing purposes (i.e. offering products and services of the Seller or third parties) including sending commercial communications within the meaning of Act No. 480/2004 Coll., on Certain Information Society Services, in particular so-called birthday offers (a discount on the Seller's goods sent to the Buyer in connection with the Buyer's birthday),
• email address for the purposes of contract performance (to send confirmation of receipt of your order), for marketing purposes (i.e. offering products and services of the Seller or third parties) including sending commercial communications within the meaning of Act No. 480/2004 Coll., on Certain Information Society Services, in particular for sending the "Verified by Customers" satisfaction survey (www.heurekashopping.cz); and

The following personal data are required for the proper performance of the concluded Purchase Contract:

• your first name, surname, company identification number, tax identification number — without these data, it will not be possible to conclude the Purchase Contract with you,
• delivery address — without this data, it will not be possible to deliver the goods to you,
• telephone number — without this data, the Controller will not be able to contact you if needed, and
• email address — without this data, the Controller will not be able to acknowledge receipt of your order.

The legal basis for the processing of your personal data is the performance of the contract you have concluded with the Controller, the legitimate interests of the Controller (primarily for the purpose of recording contractual relationships and statistical purposes, for the protection of the Controller's rights against unlawful activity including IT security, enforcement of the Controller's receivables) and the fulfilment of legal requirements (in particular, fulfilment of requirements under personal data protection regulations (e.g. GDPR), bookkeeping, fulfilment of obligations under tax regulations).

A separate legal basis for the processing of your personal data is your consent, for the purposes specified therein. This consent is voluntary and its non-granting does not affect the fulfilment of your order.

If the legal basis for the processing of your personal data is your consent, you may revoke this consent at any time free of charge at the Controller's contact details provided below. However, the revocation of your consent does not affect the lawfulness of the processing based on your consent prior to its revocation. The revocation of consent also does not affect the processing of your personal data that the Controller processes on the basis of a legal basis other than your consent.

IV. Recipients of Personal Data

Your personal data are primarily processed by the Controller, who does not use the services of any personal data processor, with the exception stated below.

Your personal data are therefore accessible to the Controller's employees and other cooperating persons, in particular entities involved in fulfilling your order (e.g. shipping companies), entities providing legal and accounting services, the entity administering the Controller's website (e-shop), and the entity administering the Controller's accounting system. Based on your consent, your email address may be accessible to the company Heureka Shopping s.r.o., Company ID 02387727 (www.heurekashopping.cz), for the purpose of sending the "Verified by Customers" satisfaction survey, and the Mailchimp server, which the e-shop operator uses for sending marketing communications.

The Controller hereby informs you that your personal data will not be transferred by the Controller or other recipients of personal data to a state that is not a member state of the European Union, or to an international organization. Exceptions include the processing of the email address for sending marketing communications and cases where you request that the ordered goods be delivered to a state that is not a member state of the European Union — in such case, the transfer of personal data to such state is an obligation of the Controller arising from the contract concluded with you within the meaning of the Controller's obligation to duly perform the contract. The Controller then transfers your personal data to the shipping company responsible for delivering the goods to that state, and this company is obliged to take all appropriate measures to ensure that your personal data are not misused and are protected throughout their processing.

The Controller declares that no automated decision-making, including profiling, takes place in relation to your personal data.

V. Methods of Processing and Protection of Personal Data

The processing of your personal data is carried out by the Controller through its employees or other cooperating persons at the Controller's registered office, its establishments and branches. The processing is carried out by means of computer technology, or manually for personal data in paper form, in compliance with all security principles for the management and processing of personal data. For this purpose, the Controller has adopted technical and organizational measures to ensure the protection of personal data, in particular measures to prevent unauthorized or accidental access to your personal data, their alteration, destruction or loss, unauthorized transfers, their unauthorized processing, as well as any other misuse of your personal data.

All entities to whom your personal data may be disclosed respect your right to privacy and are obliged to act in accordance with the applicable legal regulations on the protection of personal data.

VI. Duration of Personal Data Processing

Your personal data will be processed for a reasonable period with regard to the purpose of processing.

For the purposes of recording contracts and received payments, the Controller will retain your personal data indefinitely.

Your personal data for the purposes of sending commercial communications (newsletters) will be processed by the Controller until you express your disagreement with such sending.

Your email address will be processed by the Controller for the purposes of sending the "Verified by Customers" satisfaction survey until it is transferred to the company Heureka Shopping s.r.o.

After the expiry of the above-mentioned periods, or the revocation of your consent, the Controller will process your personal data to the extent necessary to demonstrate the legitimacy of processing your personal data, for cases of probable legal claims, and for the fulfilment of legal obligations (e.g. Section 31 of Act No. 563/1991 Coll., on Accounting, or Section 35 of Act No. 235/2004 Coll., on Value Added Tax).

VII. Rights of Data Subjects

As a data subject, you have the following rights under the GDPR, of which the Controller is obliged to expressly inform you:

Right of access to personal data

You have the right to obtain from the Controller confirmation as to whether or not personal data concerning you are being processed by the Controller, and if so, you have the right to access such personal data and the following information:

• the purposes for which the Controller processes your personal data;
• which of your personal data the Controller processes;
• to whom your personal data are disclosed;
• the period of processing of your personal data;
• the existence of the right to request from the Controller the rectification or erasure of your personal data or the restriction of their processing, or to object to their processing;
• the right to lodge a complaint with a supervisory authority;
• all available information about the source of your personal data, if they were not obtained from you;
• whether automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR, takes place, and in the affirmative case, you have the right to obtain information concerning the procedure used, as well as the significance and the envisaged consequences of such processing for you.

The Controller will process the request for access to your personal data free of charge. However, if your request is manifestly unfounded or disproportionate, particularly because it is repetitive, the Controller may refuse to comply with your request or impose a reasonable fee reflecting the administrative costs of providing the requested information.

Right to rectification of personal data

You have the right to have the Controller rectify your inaccurate personal data without undue delay. You also have the right to have the Controller complete your personal data without undue delay if they are incomplete.

Right to erasure of personal data

You have the right to have the Controller erase your personal data without undue delay if one of the following grounds applies:

• your personal data are no longer needed by the Controller for the purposes for which they were processed;
• you revoke your consent to the processing of personal data, and such personal data require your consent for processing, and at the same time the Controller has no other reason why it needs to continue processing such data (e.g. for the purpose of enforcing receivables against you);
• you exercise your right to object to processing (see letter f) below) of your personal data processed on the basis of the Controller's legitimate interests, and the Controller no longer finds any legitimate interests that would justify the processing;
• you exercise your right to object to processing (see letter f) below) of your personal data processed for the purposes of the Controller's direct marketing;
• the processing of your personal data has ceased to be in compliance with applicable legal regulations.

The right to erasure does not apply in cases where the processing of your personal data remains necessary for the fulfilment of the Controller's legal obligation (typically imposed by law), for archiving purposes in the public interest, for scientific, historical or statistical purposes, or for the establishment, exercise or defence of the Controller's legal claims (e.g. enforcement of the Controller's receivables).

Right to restriction of processing of personal data

You have the right to have the Controller not process your personal data for a limited period if one of the following conditions is met:

• you contest the accuracy of your personal data, for the period necessary for the Controller to verify the accuracy of your personal data;
• the Controller processes your personal data without a sufficient legal basis, but you request the restriction of processing rather than their erasure (see letter c) above);
• the Controller no longer needs to process your personal data, but you require them for the establishment, exercise or defence of your legal claims;
• for the period of verifying the legitimacy of your objection to the processing of your personal data for the purposes of the Controller's legitimate interests (see letter f) below).

Right to data portability

You have the right to request that the Controller provide you with your personal data obtained from you for the conclusion of a contract with you and its performance, or the processing of which you have consented to. However, you can only obtain personal data if the Controller processes them in an automated manner in electronic form. Your personal data will then be provided to you in a structured, commonly used and machine-readable format.

Right to object to processing

You have the right to object to the processing of your personal data if the Controller processes them on the basis of its legitimate interests. The Controller shall comply with your objection unless it demonstrates compelling legitimate grounds for the processing of your personal data.

You have the right to object to the processing of your personal data if the Controller processes them for the purposes of its direct marketing (typically promotion of its goods or services). The Controller shall always comply with your objection in this case.

Right to lodge a complaint

Regardless of all the above-mentioned rights, you have the right to lodge a complaint against the processing of your personal data by the Controller with the Office for Personal Data Protection, which is located at Pplk. Sochora 27, 170 00 Prague 7 (more information at www.uoou.cz), in particular if you believe that your personal data are being processed in violation of generally binding legal regulations.

VIII. Information for Data Subjects

If it is probable that a certain case of a breach of the security of your personal data will result in a high risk to your rights and freedoms, the Controller shall notify you of this breach without undue delay. However, this notification is not required in cases where:

• the Controller has implemented appropriate technical and organizational protection measures and these measures have been applied to your personal data affected by the breach of the security of personal data;
• the Controller has taken subsequent measures that ensure that the high risk to your rights and freedoms is no longer likely to materialize;
• it would require disproportionate effort from the Controller. In such case, you will be informed by means of a public announcement or similar measure.

IX. Contact Details of the Controller

In the case of any request regarding the processing of your personal data, please contact the Controller at any of the following contacts:

In writing at the address: Modelyletadel.cz, Roman Scherks, Langrova 11, Lazne Bohdanec 53341
By email at: prodej@modelyletadel.cz
By telephone at: 777 606 431

Effective from 1 April 2026