Privacy Policy

I. Introductory provisions

This Personal Data Protection Policy (hereinafter referred to as the "Policy") governs the manner in which VSK Profi, s.r.o., ID No.: 25231359, with its registered office at Hřbitovní 1324/27a, 312 00 Plzeň - Doubravka, as the personal data controller (hereinafter referred to as the "Controller" or "our company"), collects, processes, stores and protects the personal dataof individuals, i.e. customers and website visitors, in connection with the operation of the e-shop www.vskprofi.cz and the provision of other services, including the sending of newsletters through a third party, ECOMAIL.CZ, s.r.o., Company ID: 027 62 943, with its registered office at Na Zderaze 1275/15, 120 00 Prague 2 (hereinafter referred to as the "newsletter provider"). Our company would like to point out that the newsletter provider processes your data as an independent administrator in accordance with its personal data protection policy. We recommend that you carefully read this policy before subscribing to the newsletter. We process your data for the purpose of sending the newsletter only with your consent, and you have the right to withdraw your consent at any time, e.g. by using the unsubscribe link in each newsletter. For more information about your rights, please see the text below.

Please note that under current legislation, our company is not required to have a designated data protection officer.

Our company protects your personal data to the greatest extent possible, which is why our principles are issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the "GDPR"), Act No. 110/2019 Coll., on the processing of personal data and other related legal regulations.

Our company declares that it complies with the principles of personal data processing pursuant to Article 5 of the GDPR, in particular lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity and confidentiality.

II. What data does our company collect?

Identification and contact details:	first name, surname, e-mail address, telephone number, address (billing or delivery)
Order-related data:	purchase history, selected payment or delivery method, billing information (see identification and contact details above), content of email or telephone communication, operator notes, complaints, requests or feedback
Technical data:	IP address, device type data, browser data (type, version, data on viewed pages and products, date and time of access, operating system information (type, version), language settings, referrer
Marketing data and preferences:	newsletter consent, content preferences (including products viewed, web pages, links visited), date/time of consent, length of visit, interaction with page elements (e.g. clicks, scrolling), any record of unsubscribing

In addition to technical data, our company also collects data about user activity on the website obtained through cookies and other tracking technologies. This data is processed only with your consent, which can be revoked at any time (see information below). We use the data obtained to optimise the functionality of the website, analyse traffic, and for marketing purposes, including content personalisation.

What are cookies? Cookies are small text files that are stored on your device. Cookies enable us, among other things, to recognise your device when you visit our website again and to tailor the website to your requirements. For all cookies that are not necessary for the basic functioning of the website, we require your prior consent in accordance with Section 89 of the Electronic Communications Act and Article 6(1)(a) of the GDPR.

Consent to cookies can provide you with a better user experience on our e-shop. Deleting or blocking certain cookies may result in our website not functioning as intended when cookies are enabled. The information contained in cookies or related to cookies is automatically anonymised and does not allow you to be identified as a person. If you do not consent to the use of cookies, some features of the website may be limited or unavailable.

Please note that you can revoke your consent at any time via the cookie management tab or by using your browser settings.

Our e-shop uses the cookies listed below to communicate with the Google Analytics analytics tool (provider: Google Inc., headquartered at Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as "Google"). These cookies are not essential, so you must consent to them when you enter our website.

For more information on how Google processes this data, please visit theGoogle Analytics Advertising Features PolicyandHow Google uses data when you use our partners' sites or apps. Below is an overview of the cookies we use on our website:

Cookie name	Provider	Purpose	Validity
_ga_ <property-id>	Google Analytics 4	Stores session ID for GA4, tracks user behaviour	2 years
_gat	Google Universal Analytics	Limits the number of requests to websites (rate limiting)	1 minute
_ga	Google Analytics	Identifies unique users	2 years
_gid	Google Analytics	Tracks user behaviour during a single session	24 hours
Various cookies via Sklik	Sklik.cz	Tracks user behaviour on the website	Up to 540 days
Various cookies if used YouTube	Google	Tracks user behaviour on the website	Various depending on the type of cookie

III. For what purpose do we process your personal data?

We need to process your personal data primarily for the purpose of properly fulfilling orders, i.e. complying with our basic contractual obligations as a seller. This is also related to our related legal obligations, where we must collect selected data in order to comply with the requirements of relevant legislation, particularly in the area of accounting and taxation.

Our customer support also needs your personal data. We often need your personal data for effective and necessary communication regarding orders.

However, we may only use your selected personal data for marketing purposes if you have given your consent.

We collect identification and contact details on the basis of the following titles:

• Performance of a contract pursuant to Article 6(1)(b) of the GDPR
• Legitimate interest pursuant to Article 6(1)(f) of the GDPR
• Legal obligations pursuant to Article 6(1)(c) of the GDPR

We collect data related to orders based on the following titles:

• Performance of a contract pursuant to Article 6(1)(b) of the GDPR
• Legitimate interest pursuant to Article 6(1)(f) of the GDPR
• Legal obligations pursuant to Article 6(1)(c) of the GDPR

We collect technical data on the basis of the following titles:

• Legitimate interest pursuant to Article 6(1)(f) of the GDPR for the purpose of the proper functioning of the website and
• Consent of the data subject pursuant to Article 6(1)(a) of the GDPR

We collect marketing data and preferences based on this title:

• Consent of the data subject (Article 6(1)(a)

When processing data on the basis of legitimate interest, we always assess in advance whether our legitimate interests outweigh your interests or fundamental rights and freedoms (we perform a so-called balancing test).

We will only send you marketing communications if you have given us your express consent to do so, or if you are our customer, in accordance with Section 7 of Act No. 480/2004 Coll., on certain information society services. You can unsubscribe from marketing communications at any time via the link in each email or in your user account settings.

Please note that we process data from both registered customers and unregistered website visitors to the extent that corresponds to their activities on the website and their consent to processing.

IV. Personal data retention period

We only store your personal data for as long as is necessary for the given purpose, in particular:

• Data relating to orders and invoicing data, where we must comply with the record-keeping obligation under the relevant legislation: 10 years;
• We store data for marketing purposes only until you withdraw your consent;
• We store data from communication with customer support for as long as is necessary to resolve the query and subsequent documentation, but for a maximum of 3 years, unless otherwise specified in the service settings;
• We store technical data and cookies for the duration of your consent and in accordance with the requirements of the relevant legislation;

After these periods have expired, your personal data will be securely deleted or anonymised.

V. Transfer of personal data to third parties

• We may share your personal data to the extent necessary, in particular with the following third parties:
• Carriers and logistics companies for the purpose of delivering goods, i.e. fulfilling our contractual obligations;
• IT providers and hosting services, for the purpose of ensuring the operation and security of the website, while obtainingprocessing data exclusively on the basis of our instructions and in accordance with the concluded personal data processing agreement respecting the relevant legislation;
• With payment service providers, for the purpose of secure and transparent payment processing. Please note that when redirecting to the payment gateway, the payment service provider may process, for example, your IP address, in accordance with its own personal data protection policies. IP address, in accordance with its own personal data protection policy;
• tax authorities for the purpose of fulfilling our legal obligations;

Based on your consent, we may, to the extent necessary, transfer your order data to the following entities:

Heureka.cz

We assess your satisfaction with your purchase through email questionnaires as part of the "Verified Customer" programme , in which our e-shop participates. We will send you these questionnaires after each purchase, provided that you agree to their sending in the "Shopping Cart" section of our e-shop, in accordance with Section 7(3) of Act No. 480/2004 Coll., on certain information society services.

We process personal data for the purpose of sending questionnaires on the basis of our legitimate interest, which is to determine your satisfaction with your purchase.

For the purpose of sending questionnaires, evaluating feedback and analysing our market position, we use the operator of the Heureka.cz portal, Heureka Group a.s., Karolínská 706/3, Karlín, 186 00 Prague 8. For these purposes, we may provide this portal with information about the purchased goods (order ID, order contents) and your email address. However, your personal data is not provided to any third parties for their own purposes when sending the questionnaire.

If you do not wish to receive questionnaires, you can opt out at any time by clicking on the link provided in the questionnaire email. Once you have opted out, we will no longer send you questionnaires.

Seznam.cz

Our website uses remarketing and conversion tracking technology provided by Seznam.cz, a.s., with its registered office at Radlická 3294/10, PSČ 150 00, Prague 5 - Smíchov, Czech Republic (hereinafter referred to as "Seznam.cz"). If you accessed our website through an advertisement displayed by Seznam.cz, a Sklik cookie may be stored on your device. When you visit certain subpages of our website, if the validity of this cookie file has not yet expired, not only we, but also Seznam.cz can recognise that you clicked on the advertisement and were subsequently redirected to our website. This cookie is stored on your device for the purpose of measuring conversion and personalising advertising through remarketing. Please note that we do not collect any information that could personally identify you.

If personal data is processed during this process, this is done on the basis of our legitimate interest in the effective promotion of our products and services (Article 6(1)(f) of the GDPR). The information obtained using conversion cookies is used to determine conversion statistics, i.e. how many users performed the desired action (e.g. purchase) after clicking on the advertisement. This allows us to evaluate the effectiveness of our advertising.

If you do not wish to be included in this process, you can disable cookies at any time in your web browser settings.

For more information about the protection of personal data when using the Sklik service, including the option to disable personalised advertising, click here.

YouTube.com

Our website uses embedded videos from YouTube.com, which is operated by Google. YouTube uses cookies to track interaction with videos and improve the user experience. When you load a YouTube.com video, cookies are automatically stored on your device, even if you do not play the video. After starting the video, several types of cookies may be stored on your device, allowing YouTube to record, for example: behaviour when watching videos, personalisation of advertisements, collection of analytical data.

For more information on how Google processes personal data and uses cookies on YouTube, please click here.

LimeTalk chat

The e-shop also uses Lime Talk communication software, which is operated by Lime Inspirations, s.r.o., ID No.: 24296406, with its registered office at Opletalova 10, 110 00 Prague 1. This application enables real-time two-way communication between us and visitors to our website. What data does this software use? It uses the IP address of your device, the content of the communication, your name, and your email address (if you enter it). The operator's personal data protection policy is available on the Lime Talk s.r.o. website.

Newsletter provider

I only have access to your data to the extent that you have given your consent.

Public authorities

They have access to your data whenever required by law or other legal regulations.

General rules

If certain services process data outside the European Union (e.g. cloud servers), we always ensure an adequate level of protection in accordance with Article 46 of the GDPR, in particular through standard contractual clauses.

The data processors we work with are obliged to secure personal data and handle it in accordance with the GDPR.

Information on the processing of personal data by third parties in connection with cookies can be found in Article II of these terms and conditions.

Please note that after being redirected to the payment gateway, it is necessary to familiarise yourself with the terms and conditions of the specific provider of this service. These third parties have access to your personal data only to the extent that you have given your consent to their specific terms and conditions.

VI. Your rights under the GDPR

You have the following rights regarding your personal data:

Right of access to data:

You may request confirmation as to whether we are processing your data and a copy of such data.

Right to rectification:

You may request the rectification of inaccurate or incomplete data.

Right to erasure (right to be forgotten):

Under certain conditions, you may request the deletion of your data.

Right to restriction of processing:

You may request the restriction of the processing of your data.

Right to data portability:

You may request the transfer of your data in a commonly used format.

Right to object:

You may object to the processing of your data on the basis of legitimate interest.

Right to withdraw consent:

If you have given your consent to processing, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

You have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague.

To exercise these rights, please contact us at: legislativa@vskprofi.cz

We will respond to your requests without undue delay, within one month at the latest. In justified cases, the deadline may be extended by a further two months.

Please note that any withdrawal of consent (even partial) may affect the achievement of the purpose for which the consent was given, if the purpose cannot be achieved otherwise.

If you believe that the processing of your personal data has violated legal regulations, you have the right to lodge a complaint with the relevant supervisory authority in another Member State of the European Union where you have your habitual residence, place of work or where the alleged infringement occurred.

VII. Security of personal data

We protect your personal data with technical and organisational measures appropriate to the risks associated with processing in order to ensure its security and prevent unauthorised access, loss or misuse. For example, we use encrypted data transfers (TLS/SSL), access rights checks and regular backups.

All access to personal data is restricted to authorised persons who have been duly informed of their duties and confidentiality obligations. We regularly assess security risks and take measures to increase protection, including two-factor authentication and data encryption.

VIII. Automated decision-making and profiling

We do not use automated decision-making or profiling within the meaning of Article 22 of the GDPR that would have legal effects on you or significantly affect you.

The current version of this policy is effective from 9 October 2025. This policy may be updated, in which case you will be informed in an appropriate manner (e.g. on the website).