Privacy policy

PRIVACY POLICY (GDPR)

 

Promotion and Education, s.r.o.

 

·         Registered Office: V Ondřejově 941/17, 140 00 Prague 4 – Podolí

·         Establishment: Maiselova 15, 110 00 Prague 1 – Staré Město

·         Company ID: 27153037, VAT ID: CZ27153037

·         Tel.: +420 

·         E-mail: office@e-boutique.cz

 

1. Introduction

1.1. These Principles describe how the Seller processes customers’ personal data in accordance with the GDPR (EU Regulation 2016/679) and Act No. 110/2019 Coll.

 

2. What Personal Data We Process

The Seller processes only data necessary for processing orders and providing services:

• first and last name,

• e‑mail address,

• telephone number (if provided by the Buyer),

• billing details,

• information about the order and payment,

• technical data (IP address, logs — solely for security and website operation).

 

3. Purposes and Legal Bases of Processing

We process personal data primarily for the following purposes:

 

 

3.1. Performance of a contract (Art. 6(1)(b) GDPR)

• processing an order,

• delivery of Digital Content,

• management of customer accounts,

• communication with the Buyer.

 

3.2. Compliance with legal obligations (Art. 6(1)(c) GDPR)

• tax and accounting laws,

• archiving of documents.

 

3.3. Legitimate interest (Art. 6(1)(f) GDPR)

• website security,

• prevention of fraudulent transactions,

• protection of company rights.

 

3.4. Consent of the data subject (Art. 6(1)(a) GDPR)

Only for sending newsletters or marketing communications — and only if the customer has expressly granted consent.

 

4. Retention Period of Personal Data

We retain personal data:

• for the duration of the contractual relationship,

• thereafter for the period required by law (typically 5–10 years),

• marketing data only until consent is withdrawn.

 

 

5. Transfer of Personal Data to Third Parties

Personal data may be transferred only to:

• payment service providers (payment gateway),

• web and e‑mail hosting providers,

• accounting and tax advisors,

• IT service providers (e.g., server security).

 

All third parties are bound by confidentiality and a data processing agreement.

Personal data are not transferred to third countries outside the EU.

 

6. Rights of Data Subjects

The Buyer has the right to:

• access their data,

• rectify inaccurate data,

• erasure (“right to be forgotten”),

• restriction of processing,

• data portability,

• object to processing,

• withdraw consent (if given),

• lodge a complaint with the Office for Personal Data Protection: www.uoou.cz.

Requests may be sent to: office@e-boutique.cz.

 

 

 

 

7. Security of Personal Data

The Seller takes all technical and organisational measures to protect personal data:

• encrypted connection (HTTPS),

• secured servers,

• access limited to authorised persons,

• regular system updates.

 

8. Cookies

The e‑shop website may use cookies for:

• proper functioning of the website,

• measuring traffic,

• marketing purposes (only with user consent).

Details are provided in a separate Cookie Banner.

 

9. Final Provisions

These Principles are effective from 1 December 2025. The current version is always available on the website.