Privacy Policy

Privacy Policy (Personal Data Processing Policy)

Basic Provisions The personal data controller pursuant to Article 4 (7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR") and Act No. 110/2019 Coll., on Personal Data Processing, is Světlana Šoltés, Company Registration Number (IČO): 06031595, registered office at Jelínkova 1893, Sokolov (hereinafter the "Controller").

The contact details of the Controller are:

• E-mail: inspirovanodrevem@gmail.com

• Phone: +420 603 211 546

Personal data means any information relating to an identified or identifiable natural person.

Sources and Purposes of Personal Data Processing The Controller processes personal data provided by the buyer when creating an order or registering in the online store. Personal data is processed for the following reasons:

• Processing of the electronic order and fulfillment of the purchase agreement (Article 6 (1) (b) GDPR). Identification and contact data (first name, last name, address, e-mail, phone number) are processed. The provision of this data is a necessary requirement for the conclusion and fulfillment of the contract.

• Fulfillment of legal obligations (Article 6 (1) (c) GDPR), in particular obligations arising from accounting and tax laws (e.g., retention of invoices).

• Legitimate interest of the Controller (Article 6 (1) (f) GDPR) for defense in the event of legal disputes.

Retention Period of Personal Data

• The Controller retains personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship (typically for a period of 3 years from the termination of the contractual relationship in case of claims and disputes).

• Tax documents (invoices) containing personal data are retained for a period of 10 years from the end of the tax period in which the performance took place, as required by law. After these retention periods expire, the personal data is deleted.

Recipients and Processors of Personal Data Authorized subcontractors of the Controller, whose services are necessary for the operation of the e-shop and the fulfillment of the contract, have access to your personal data. These include:

• E-shop solution provider Webnode AG;

• Shipping companies (e.g., Česká pošta, s.p.) for the purpose of delivering goods;

• Analytical services provider Google Analytics (data may be transferred to servers in third countries, e.g., the USA, subject to standard contractual clauses and guarantees under the GDPR).

Apart from the above, the Controller does not transfer personal data to any other third parties for marketing purposes.

Rights of the Buyer Under the conditions set out in the GDPR, you have the right to:

• Access your personal data;

• Rectify your personal data;

• Erase your personal data (unless this conflicts with the obligation to retain data, e.g., for accounting purposes);

• Object to the processing;

• Data portability;

• File a complaint with the Office for Personal Data Protection (www.uoou.cz) if you believe your right to personal data protection has been violated.

Security of Personal Data

• The Controller declares that they have taken all appropriate technical and organizational measures necessary to secure the buyer's personal data.

• Only authorized persons have access to personal data, using secured devices.

Final Provisions

• By submitting an electronic order, the buyer confirms that they have read these privacy policy conditions and acknowledge them in their entirety.

• The Controller is entitled to change this Policy at any time. The new version will be published on their website.

This Policy takes effect on July 7, 2025.