Privacy Policy

1. General Provisions

The controller of personal data under Article 4, Point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons concerning the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR") is Julia Alex s.r.o., Jalodvorská 845/8, 142 00 Prague 4 – Krč, CZ (hereinafter referred to as "controller").

Personal data refers to all information about an identified or identifiable natural person; an identifiable natural person is a person who can be identified directly or indirectly, particularly by reference to a specific identifier such as a name, identification number, location data, network identifier, or one or more specific physical, physiological, genetic, psychological, economic, cultural, or social identity elements.

The controller has not appointed a Data Protection Officer.

2. Sources and Categories of Processed Personal Data

The controller processes personal data that you have provided or personal data obtained by the controller based on fulfilling your order.

The controller processes your identification and contact details and data necessary for contract performance.

3. Legal Basis and Purpose of Personal Data Processing

The legal basis for processing personal data includes:

• The performance of a contract between you and the controller pursuant to Article 6(1)(b) GDPR.
• The legitimate interest of the controller in providing direct marketing (especially sending commercial communications and newsletters), provided you have expressed interest in this service via user account settings, pursuant to Article 6(1)(f) GDPR.

The purposes of processing personal data include:

• Fulfilling your order and exercising rights and obligations arising from the contractual relationship between you and the controller. Personal data necessary for successful order processing (name, address, contact information) is required for contract conclusion and performance. Without providing personal data, it is not possible to conclude or fulfill the contract.
• The controller does not engage in automated individual decision-making within the meaning of Article 22 GDPR.

4. Data Retention Period

The controller retains personal data:

• For the time necessary to exercise rights and obligations arising from the contractual relationship between you and the controller and to assert claims from these contractual relationships (for 10 years after the termination of the contractual relationship).
• For a period necessary after the contract's effectiveness to ensure that all obligations have been fulfilled properly, avoiding the need for legal action or enforcement proceedings.

After the retention period expires, the controller will delete the personal data.

5. Cookies

1. When using our website, your personal data may be processed through cookies. More information on how we use cookies is available at www.vtc.cz/cookies.
2. Our website uses retargeting technology from the Sklik service operated by Seznam.cz, a.s., which enables us to display our advertisements in Seznam.cz’s advertising network to visitors who have already shown interest in our products.

6. Recipients of Personal Data

The recipients of personal data include:

• Persons involved in delivering goods/services/payments based on a contract.
• Providers of e-shop operation services and other services related to e-shop operations.

The controller does not intend to transfer personal data to a third country (outside the EU) or an international organization.

7. Your Rights

Under the conditions set out in GDPR, you have the right to:

• Access your personal data (Article 15 GDPR).
• Rectify your personal data (Article 16 GDPR) or restrict processing (Article 18 GDPR).
• Erase your personal data (Article 17 GDPR).
• Object to the processing of your data (Article 21 GDPR).
• Data portability (Article 20 GDPR).
• Withdraw consent for processing at any time in writing or electronically to the address or email of the controller specified in Article I of these terms.

You also have the right to file a complaint with the Data Protection Authority if you believe your personal data protection rights have been violated.

8. Conditions for Securing Personal Data

The controller declares that:

• All appropriate technical and organizational measures have been taken to secure personal data.
• Technical measures have been implemented to secure data storage and physical personal data storage.
• Contracts with personal data processors ensure a level of protection at least equivalent to these Privacy Policy terms.
• Access to personal data is granted only to authorized persons.

9. Final Provisions

• By submitting an order via the online order form, you confirm that you are familiar with and accept the privacy policy terms in their entirety.
• The controller reserves the right to amend these terms and will always publish the updated version on its website, including a notification (e.g., a highlighted banner).
• These terms are effective from October 25, 2023.