Privacy Policy

CHÁ atelier s.r.o., with its registered office at Na Hrázce 209, 533 52 Staré Hradiště, Czech Republic, Company ID No. 17867959, registered in the Commercial Register maintained by the Regional Court in Hradec Králové, Section C, File No. 50517 (hereinafter referred to as the “Controller”), processes the following personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”):

• First name, last name;

• E-mail address;

• Phone number;

• Address/location.

The above personal data must be processed for the purpose of order fulfilment and other contractual obligations if a purchase contract is concluded between you and the Seller. Such processing of personal data is permitted by Section 6(1)(b) of the Regulation – processing is necessary for the performance of a contract.

 

The Seller also processes this data for the purpose of recording the contract and any future enforcement and defence of the rights and obligations of the Parties. Personal data is stored and processed for the above purpose for a period of 10 years from the completion of the last part of the performance under the contract, unless another legal regulation requires the storage of contractual documentation for a longer period. Such processing is possible pursuant to Section 6(1)(c) and (f) of the Regulation – processing is necessary for compliance with a legal obligation and for the purposes of the legitimate interests of the Controller.

 

News and other commercial communications may be sent to the Buyer's e-mail address or phone number; this procedure is permitted by Section 7(3) of Act No. 480/2004 Coll., on information society services, unless the Buyer refuses it. These communications may be unsubscribed from at any time by any means, such as by sending an e-mail or clicking on a link in the commercial communication.

 

Personal data is processed by the Controller, CHÁ atelier s.r.o. The following processors also process personal data on behalf of the Controller:

• Service provider Shoptet s. r. o., registered office at Dvořeckého 628/8, 169 00, Prague 6, Company ID 28935675, File: C 154209, Registry Court in Prague.

• Possibly other providers of processing software, services and applications, which, however, the company does not currently use.

• Zásilkovna s.r.o., with its registered office at Drahobejlova 1019/27, Libeň, 190 00 Prague 9, company ID 28408306, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 139387.

• PPL CZ s.r.o., with its registered office: K Borovému 99, Jažlovice, 251 01 Říčany, company ID: 25194798, File: C 105858 registered at the Municipal Court in Prague.

• GOPAY s. r. o., with its registered office at Planá 67, 370 01 České Budějovice, company ID: 260 467 68, registered in the Commercial Register maintained by the Regional Court in České Budějovice, Section C, File 11030.

• Leadhub s.r.o., company ID: 044 66 683, with its registered office at Štefánikova 16/29, Smíchov, 150 00 Prague 5, represented by Ladislav Hrbáček, Managing Director, and Michal Kvasnička, Managing Director, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 247688. 

• and, where applicable, other processors participating in the delivery of goods or the execution of payments pursuant to a contract.

 

Personal data will not be transferred to third countries outside the EU. The Controller does not have a designated representative. The Controller may be contacted at the e-mail address info@terezacha.cz.

The personal data Controller, as the operator of the website www.terezacha.cz, uses cookies on this website for the following purposes:

• Measuring website traffic and creating statistics on website traffic and visitor behaviour;

• Basic website functionality.

The collection of cookies for the above purpose may be considered the processing of personal data. Such processing is possible on the basis of a legal reason – the legitimate interest of the Controller – and is permitted by Section 6(1)(f) of the Regulation.

The website may also be used in a mode that does not allow the collection of data on the behaviour of website visitors – this mode may be set in the browser settings, or it is possible to object to such collection on the basis of the legitimate interest of the Controller pursuant to Section 21 of the Regulation, which is available at the bottom of the website. Your objection shall be evaluated without delay. Cookies necessary for the functionality of the website shall only be stored for the time necessary for the functioning of the website.

If a visitor objects to the processing of technical cookies necessary for the functioning of the website, the full functionality and compatibility of the website shall not be guaranteed in such a case.

Cookies that are collected for the purpose of measuring website traffic and creating statistics related to traffic and visitor behaviour on the website are assessed in aggregate form and in anonymous form that does not allow the identification of individuals.

The collected cookie files are processed by other processors: The provider of the Google Analytics service, operated by Google Inc., with its registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

 

Please note that under the Regulation you have the right to:

• Unsubscribe from commercial communications at any time;

• Object to processing based on the legitimate interest of the Controller;

• Request information about what personal data we process about you;

• Request access to this data and have it updated or corrected, or request a restriction of processing;

• Require to erase this personal data, we shall carry out the erasure unless it is contrary to applicable law or the legitimate interests of the Controller;

• The portability of the data in the case of automated processing based on consent or for the performance of a contract;

• Request a copy of the personal data processed;

• Effective judicial protection if you consider that your rights under the Regulation have been infringed as a result of the processing of your personal data in breach of this Regulation;

• File a complaint with the Office for Personal Data Protection.

 

These terms shall take effect on 15 October 2024.