PRIVACY POLICY (GDPR)

Privacy Policy (GDPR)

1. General Provisions

1.1. This Privacy Policy governs the processing of personal data of customers of the e-shop eLeMeNt HW,  Stribrna 555, 760 01 Zlin, Czech Republic, ID:45459363 (hereinafter referred to as the "Controller").
1.2. The Controller undertakes to process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and related legal regulations.

2. What Personal Data Do We Process?

2.1. As part of operating the e-shop, we process the following personal data of customers:

• First and last name
• Billing and shipping address
• Email address
• Phone number
• Payment details (to the extent necessary for payment processing)
• IP address and cookies

2.2. Personal data is processed based on a legal basis, which may be the performance of a contract (order processing), compliance with legal obligations, the Controller’s legitimate interest, or the customer's consent.

3. For What Purposes Do We Use Personal Data?

3.1. Personal data is processed for the following purposes:

• Order processing and fulfillment
• Invoicing and accounting records
• Customer communication and support
• Sending marketing communications (with consent)
• Protection of the Controller’s rights and legitimate interests

4. How Long Do We Store Personal Data?

4.1. Personal data is stored only for as long as necessary to fulfill its processing purpose:

• Accounting and tax documents: 10 years as required by law
• Orders and contracts: 5 years from completion
• Marketing communications: until consent is withdrawn
• Data related to legal claims: for the duration of the limitation period

5. Disclosure of Personal Data to Third Parties

5.1. Personal data may be disclosed to the following categories of recipients:

• Shipping companies (e.g., Zásilkovna, Czech Post, PPL)
• Payment service providers (e.g., banks, payment gateways)
• Accountants and tax advisors
• Government authorities as required by law

6. Rights of Data Subjects

6.1. Each customer (data subject) has the right to:

• Access their personal data
• Rectify incorrect data
• Erasure ("right to be forgotten")
• Restriction of data processing
• Data portability
• Object to processing
• Lodge a complaint with the Data Protection Authority

7. Data Protection Measures

7.1. The Controller implements appropriate technical and organizational measures to protect personal data against unauthorized access, misuse, or loss.

8. Cookies

8.1. The e-shop uses cookies for website functionality, analytics, and content personalization. Users can manage their cookie preferences in their browser settings.

9. Final Provisions

9.1. The Controller reserves the right to amend these terms, with the current version always available on the e-shop’s website.
9.2. These terms are valid and effective as of 20.03.2025.