Privacy Policy

1. Data Controller

The controller of personal data of customers of the www.flakon.cz online store is:

Marcel Šup
Ke Kapli 258
267 18 Bubovice
Czech Republic
Company ID: 10162101
VAT ID: CZ6611281556
E-mail: oktagon@seznam.cz

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and other applicable legislation.

2. Personal Data We Process

We process only personal data necessary for operating the online store and fulfilling orders, in particular:

first name and surname,
billing and delivery address,
e-mail address and telephone number,
company details, where applicable,
information relating to orders, payments and the selected delivery method,
information relating to a customer account, if an account is created,
information contained in communications with the customer, for example enquiries or complaints,
necessary technical information relating to use of the online store and orders, such as the IP address.

3. Why We Process Personal Data

We process personal data primarily for the purposes of:

receiving and processing orders,
entering into and performing purchase contracts,
arranging payment and delivery of goods,
communicating with customers,
handling complaints and other contractual rights,
complying with accounting and tax obligations,
establishing, exercising or defending legal claims,
maintaining the security and proper operation of the online store.

The legal basis for processing is primarily performance of a contract or taking steps prior to entering into a contract, compliance with legal obligations and, where appropriate, our legitimate interests, such as protecting legal claims and securing the online store.

Consent to personal data processing is not required for the ordinary processing and fulfilment of an order.

4. Who May Receive Your Personal Data

We do not provide personal data to third parties for their own marketing purposes.

Where necessary, personal data may be disclosed to parties involved in operating the online store or fulfilling an order, in particular:

shipping companies and their contractual partners,
banks and payment service providers,
web hosting and necessary IT service providers,
accounting, tax and other professional service providers,
public authorities where disclosure is required by law.

Where goods are delivered to a country outside the European Economic Area, necessary recipient information may be provided to the carrier or its partners in the destination country. Such information is transferred only to the extent necessary to arrange delivery and in accordance with applicable data protection requirements.

5. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected.

Information relating to orders and contractual relationships is retained for the period necessary to perform the contract, handle possible complaints and protect legal claims.

Accounting and tax documents containing personal data are retained for the periods required by applicable legislation. For this reason, certain information contained, for example, on an issued invoice cannot be deleted immediately upon request.

If a customer asks us to close a registered customer account, information that is no longer required for another lawful purpose will be deleted. Information relating to completed orders may continue to be retained where necessary to comply with legal obligations or to protect legal claims.

6. Your Rights

In relation to the processing of your personal data, you have, in particular, the right to:

obtain confirmation as to whether we process your personal data,
request access to your personal data,
request correction of inaccurate or incomplete personal data,
request deletion of personal data where the conditions of the GDPR are met,
request restriction of processing,
object to processing based on legitimate interests,
request data portability where provided for by the GDPR.

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.

You may exercise your rights by contacting us at oktagon@seznam.cz.

You also have the right to lodge a complaint with the Office for Personal Data Protection of the Czech Republic (Úřad pro ochranu osobních údajů) if you believe that your personal data is being processed in breach of applicable data protection legislation.

7. Information Required for an Order

Personal data marked as necessary for creating and fulfilling an order is required in order to enter into and perform the purchase contract. Without this information, we cannot properly process the order or deliver the goods.

We request only information that is necessary for the relevant purpose.

8. Data Security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or unauthorised alteration.

Effective from: 13 August 2026

Marcel Šup