Privacy Policy
1. Data Controller
The data controller is:
Andrej Pikula
Obětí okupace 572
271 01 Nové Strašecí
Czech Republic
ID No.: 01389190
Email: info@pokelorca.cz
(hereinafter referred to as “the controller”).
The controller operates the online store Pokelorca.cz and processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and related legal regulations.
2. What personal data we process
In connection with the operation of the online store, we may process, in particular:
- first name and surname,
- billing and delivery address,
- email address,
- phone number, if provided by the customer,
- order and purchased goods data,
- data necessary for payment processing,
- data related to order delivery,
- customer communication,
- data related to complaints and returns,
- technical data related to the use of the online store, such as IP address and information about the device or browser, if processed within the operation of the online store.
The controller does not directly store full credit card details. Payments are processed through the relevant payment service providers.
3. Purposes and legal bases of processing
We process personal data primarily for the purpose of:
Order fulfillment and performance of the purchase contract
We use the data for accepting and processing orders, payments, delivery of goods, and communication related to the order.
The legal basis is the performance of a contract or the implementation of measures prior to entering into a contract.
Fulfilling legal obligations
We retain certain data to comply with accounting, tax, and other legal obligations.
The legal basis is the fulfillment of a legal obligation.
Complaints, returns, and customer support
We process data to handle complaints, contract withdrawals, refunds, and other customer requests.
The legal basis may be the performance of a contract, the fulfillment of a legal obligation, or the legitimate interest of the controller.
Protection of rights and legitimate interests
To the extent necessary, we may process data to protect our rights, prevent fraud, resolve disputes, and secure the online store.
The legal basis is the legitimate interest of the controller.
Marketing communication
If consent is required, marketing messages are sent only on the basis of this consent. The customer can withdraw consent at any time or unsubscribe via the link provided in the marketing email.
In cases where legal regulations allow sending commercial communications to existing customers without prior consent, the legal basis may be a legitimate interest. The customer always has the option to refuse further mailings.
4. Retention period of personal data
We retain personal data only for the period necessary for the purpose for which they were collected, and subsequently for the period required by relevant legal regulations.
Data related to orders, accounting and tax documents are retained for the period stipulated by legal regulations.
Data necessary for handling complaints, disputes or protecting legal claims may be retained for the period necessary to protect these rights.
Data processed based on consent is processed until its withdrawal, unless there is another legal reason for their further retention.
5. Who personal data may be transferred to
Personal data may be made available to service providers involved in the operation of the online store and order fulfillment, to the necessary extent, in particular:
- the provider of the e-shop platform Shopify,
- payment service providers,
- banks and financial institutions to the extent necessary for payment processing,
- shipping and logistics companies,
- IT, hosting, and technical service providers,
- analytical and marketing service providers, if used in accordance with legal regulations,
- accountants, tax or legal advisors,
- public authorities, if legal regulations impose on us the obligation to transfer data.
We transfer only the data necessary for providing the respective service or fulfilling a legal obligation to these entities.
6. Shopify
The Pokelorca.cz online store is operated via the Shopify platform.
In connection with the operation of the online store, Shopify and its service providers may process certain customer personal data to the extent necessary for providing e-shop platform services.
Under conditions stipulated by legal regulations, personal data may also be transferred outside the European Economic Area during processing. In such cases, appropriate legal mechanisms are used to protect the transferred data.
7. Cookies and similar technologies
The online store uses cookies and similar technologies necessary for the proper functioning of the website, for example, for the operation of the shopping cart, security, or order completion.
Other cookies may be used for analytical, personalization, or marketing purposes.
If, according to legal regulations, consent is required for the use of a certain type of cookies, these cookies are used only after the visitor has given consent.
The visitor can change their cookie choices via the available cookie settings on the online store.
8. Security of personal data
The controller takes appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, alteration, or unauthorized disclosure.
9. Rights of the data subject
In connection with the processing of personal data, you have, under the conditions stipulated by the GDPR, particularly the right to:
- request access to your personal data,
- request the rectification of inaccurate or incomplete data,
- request the erasure of personal data,
- request restriction of processing,
- object to processing based on legitimate interest,
- request data portability, if the legal conditions are met,
- withdraw consent to processing, if processing is based on consent.
The withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.
10. Exercising rights and contact
If you have any questions regarding data protection or wish to exercise your rights, you can contact us at:
info@pokelorca.cz
We will respond to your request in accordance with the deadlines stipulated by legal regulations.
11. Right to lodge a complaint
If you believe that the processing of your personal data violates legal regulations, you have the right to lodge a complaint with the supervisory authority.
In the Czech Republic, the supervisory authority is:
Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
12. Changes to the privacy policy
We may reasonably update these policies, particularly in the event of changes to the services used, the method of personal data processing, or legal regulations.
The current version is always published on the Pokelorca.cz website.
13. Effectiveness
These privacy policies are effective from the date of their publication on the Pokelorca.cz website.