Privacy Policy

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, commonly known as the General Data Protection Regulation (GDPR), and other applicable legislation.

1. Data Controller

The data controller is:

Radek Hill
Company ID No.: 658 69 761
Registered office: 17. listopadu 753/66, Ostrava, Czech Republic /EU/
Website: radekhill.com

The controller determines which personal data is processed, for what purposes and for how long.

2. Personal Data We Process

When an order is placed, a customer communicates with us, makes a claim, withdraws from a contract or uses the website, the following personal data may be processed in particular:

  • full name;
  • email address;
  • telephone number;
  • billing address;
  • delivery address;
  • details of the goods ordered;
  • payment-related information;
  • information required for delivery of the shipment;
  • information provided in connection with a claim or withdrawal from the contract;
  • the content of email or other communications with the customer;
  • technical data relating to use of the website, where processed through cookies or similar technologies.

The controller does not intentionally process special categories of personal data, such as information concerning health, religious beliefs, political opinions or other sensitive information, unless the customer voluntarily provides such information in their communications.

3. Purposes of Processing Personal Data

Personal data is processed in particular for the following purposes:

  • processing orders;
  • entering into and performing purchase contracts;
  • issuing accounting and tax documents;
  • processing payments;
  • delivering goods to customers;
  • communicating with customers regarding their orders;
  • handling claims and withdrawals from contracts;
  • complying with legal obligations;
  • maintaining accounting and tax records;
  • protecting the rights and legitimate interests of the controller;
  • sending marketing communications where a valid legal basis exists;
  • administering and securing the website;
  • measuring website traffic and carrying out marketing activities where the visitor has given consent through the cookie banner.

4. Legal Basis for Processing

Personal data is processed on the following legal grounds:

Performance of a Contract

Personal data is processed where necessary to accept and process an order, deliver the goods and communicate with the customer.

Compliance with a Legal Obligation

Certain personal data must be retained in order to comply with accounting, tax and other legal obligations.

Legitimate Interests of the Controller

Personal data may be processed for the purposes of protecting the controller’s rights, handling claims, establishing, exercising or defending legal claims, securing the website or conducting ordinary communications with customers.

Consent

Where processing is based on consent, for example in connection with certain cookies, analytics or marketing tools, the customer or website visitor may withdraw their consent at any time.

5. Orders and Payments

When an order is placed, personal data is processed to the extent necessary to process the order, issue the relevant documents, receive payment, deliver the goods and conduct any subsequent communications.

The controller does not process or store payment card details. Card payments and other electronic payments are processed through a payment gateway provider. The controller receives only the information necessary to confirm payment and complete the order.

6. Claims and Withdrawal from the Contract

Where a customer makes a claim or withdraws from the contract, personal data is processed as necessary to identify the order, assess the claim, communicate with the customer, issue a refund or protect the controller’s rights.

This may include, in particular, the customer’s name, contact details, order number, details of the goods purchased, a description of the issue, photographs of damaged goods, photographs of the packaging, shipping information and any other information provided by the customer in connection with the claim or withdrawal.

7. Communications with Customers

If a customer contacts the controller by email, through a contact form or by any other means, the personal data contained in that communication will be processed.

Such data is processed for the purpose of responding to the enquiry and dealing with the relevant order, claim, request or other matter raised by the customer.

8. Newsletter and Marketing Communications

If a website visitor subscribes to the newsletter or other marketing communications, personal data necessary for sending those communications, particularly the visitor’s email address, will be processed for that purpose.

The recipient may unsubscribe from the newsletter at any time by using the unsubscribe link included in the communication or by sending a request by email.

Where marketing communications concerning similar products or services are sent to existing customers, the processing may be based on the controller’s legitimate interests, provided that this is permitted by applicable law.

9. Cookies

The website may use cookies and similar technologies.

Technical cookies are necessary for the proper operation of the website and online store.

Analytics, preference and marketing cookies are used only where the website visitor has given consent through the cookie banner or cookie settings.

Consent to the use of cookies may be changed or withdrawn at any time through the cookie settings available on the website.

Further information about the use of cookies is provided in the separate Cookies section or in the cookie settings available on the website.

10. Recipients of Personal Data

To the extent necessary, personal data may be disclosed to the following recipients or processors:

  • carriers and shipping companies for the purpose of delivering orders;
  • the payment gateway provider for the purpose of processing payments;
  • the web hosting provider;
  • the provider of the online store or other technical website solution;
  • providers of accounting or tax services;
  • providers of email or marketing tools, where such tools are used;
  • public authorities where disclosure is required by law;
  • legal, accounting or tax advisers where necessary to protect the controller’s rights or comply with its obligations.

Personal data is disclosed only to the extent necessary for the relevant purpose.

11. Transfers of Personal Data Outside the European Union

The controller seeks to process personal data primarily within the European Union.

Where the use of certain technical, analytics, payment, marketing or email services involves the transfer of personal data outside the European Union, such transfers will take place only in accordance with applicable law and subject to appropriate safeguards ensuring an adequate level of protection for the personal data.

12. Retention of Personal Data

Personal data is retained only for as long as necessary for the purpose for which it was collected.

Data relating to orders is retained for the time necessary to process the order and subsequently for the period required under applicable accounting and tax legislation.

Data relating to claims, withdrawals from contracts or the protection of legal rights may be retained for the time necessary to resolve the matter and for the period during which legal claims may be brought or defended.

Data processed on the basis of consent is retained for as long as the consent remains valid or until it is withdrawn.

Newsletter data is retained until the recipient unsubscribes or withdraws consent, where the processing is based on consent.

13. Rights of Customers and Website Visitors

Subject to the conditions laid down in the GDPR, a person whose personal data is processed has, in particular, the following rights:

  • the right to access their personal data;
  • the right to have inaccurate or incomplete personal data corrected;
  • the right to erasure of personal data where the applicable legal conditions are met;
  • the right to restriction of processing;
  • the right to object to processing;
  • the right to data portability where applicable under the GDPR;
  • the right to withdraw consent where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

Requests relating to the processing of personal data may be sent by email.

14. Right to Lodge a Complaint

If a customer or website visitor believes that their data protection rights have been infringed, they have the right to lodge a complaint with the competent supervisory authority.

The supervisory authority in the Czech Republic is:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
Website: uoou.gov.cz

15. Security of Personal Data

The controller takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unauthorised alteration or unauthorised disclosure.

Personal data may be accessed only by persons who require access in order to perform their duties or provide services relating to the operation of the website, orders, payments, shipping, accounting or customer communications.

16. Automated Decision-Making

The controller does not carry out automated individual decision-making that produces legal effects concerning the customer or similarly significantly affects them.

17. Updates to This Privacy Policy

This Privacy Policy may be updated as necessary, particularly in response to changes in applicable law, the services used, the technical operation of the website or the manner in which personal data is processed.

The current version is always available on radekhill.com.

18. Contact

For enquiries concerning the processing of personal data, please contact the controller by email.

Radek Hill
radekhill.com
Subscribe