Personal data protection

1. The company Zipe Trading s.r.o., with its registered office at Ústín 144, 783 46 Ústín, ID No. 21697680, registered with the Regional Court in Ostrava, Section KSOS, File No. C 96295 (hereinafter referred to as the "Seller" or the "Controller"), processes, in accordance with Regulation (EU) No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation"), the following personal data:

- First name, last name
- Email address
- Phone number
- Address/registered office

2. The above personal data are required to process orders and fulfill the contract if a purchase agreement is concluded between you and the Seller. Such processing of personal data is allowed under Article 6(1)(b) of the Regulation – processing is necessary for the performance of the contract.

The Seller also processes these data for record-keeping purposes and for any potential future enforcement and defense of the rights and obligations of the contracting parties. Personal data are stored and processed for the above purpose for a period of 5 years from the completion of the last part of the performance under the contract unless another legal regulation requires retention of the contractual documentation for a longer period. Such processing is permissible under Article 6(1)(c) and (f) of the Regulation – processing is necessary for compliance with a legal obligation and for the purposes of the legitimate interests of the Controller.

3. News and other business communications may be sent to the Buyer to their email address or phone number; this procedure is allowed under Section 7(3) of Act No. 480/2004 Coll., on certain information society services, unless the Buyer refuses. These communications can be unsubscribed at any time by any means – for example, by sending an email or clicking a link in the commercial communication.

4. Personal data processing is conducted electronically by saving it into a database, managed by the personal data Controller.

Personal data will not be transferred to third countries outside the EU.

5. The Controller does not have a data protection officer. The Controller can be contacted at info@oudlhaya.cz.

6. The Controller of personal data, as the operator of the website oudlhaya.cz, uses cookies on this website for the following purposes:
- Measuring website traffic and creating visitor behavior statistics;
- Basic website functionality.

Collecting cookies for the above purposes may be considered personal data processing. Such processing is permissible based on the legal reason of the Controller's legitimate interest, under Article 6(1)(f) of the Regulation.

The website can also be used in a mode that does not allow data collection about visitor behavior – this mode can be set in the browser settings or by objecting to such collection under the Controller's legitimate interest pursuant to Article 21 of the Regulation, accessible at the bottom of the website. Your objection will be assessed without delay. Cookies necessary for the website's functionality will be stored only for the time necessary for the website's operation.

If a visitor objects to the processing of technical cookies necessary for the website's functionality, full website functionality and compatibility cannot be guaranteed.

Cookies collected for the purpose of measuring website traffic and creating visitor statistics are processed in aggregate form and anonymously, which does not allow individual identification.

7. Please note that under the Regulation, you have the following rights:
- To withdraw consent to receiving business communications at any time;
- To object to processing based on the Controller's legitimate interest;
- To request information about the personal data we process about you;
- To request access to these data and have them updated or corrected, or to request restrictions on processing;
- To request the erasure of these personal data, provided it does not conflict with applicable legal regulations or the legitimate interests of the Controller;
- To data portability, if processing is automated and based on consent or the necessity for contract performance;
- To request a copy of the processed personal data;
- To effective judicial protection if you believe your rights under the Regulation have been violated due to processing your personal data contrary to this Regulation;
- To file a complaint with the Office for Personal Data Protection.