Potvurkov

Privacy Policy
I. Basic Provisions
The controller of personal data pursuant to Article 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: “GDPR”) is:
Para bodas s.r.o.
Budilova 161/15
30100 Plzeň
Company ID: 14049236
VAT ID: CZ14049236
Contact details of the controller:
OC VELKÁ OHRADA
Prusíkova 2577/16, Praha 13, 155 00
Czech Republic
Email: info@potvurkov.cz
Tel: +420 721 810 605
Personal data means any information about an identified or identifiable natural person; an identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The controller has not appointed a Data Protection Officer.
II. Sources and Categories of Processed Personal Data
The controller processes personal data you have provided or personal data obtained in fulfilling your order.
The controller processes your identification and contact data, and data necessary for performance of the contract.
III. Legal Grounds and Purpose of Processing
The legal grounds for processing personal data are:
performance of the contract between you and the controller under Art. 6(1)(b) GDPR,
legitimate interest of the controller in providing direct marketing (in particular sending commercial communications and newsletters) under Art. 6(1)(f) GDPR,
your consent to processing for the purposes of direct marketing (in particular sending commercial communications and newsletters) under Art. 6(1)(a) GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., on Certain Information Society Services, in cases where no goods or services were ordered.
The purpose of processing personal data is:
processing your order and exercising rights and obligations arising from the contractual relationship; when placing an order, the personal data required for successful order fulfillment (name, address, contact) must be provided. Provision of personal data is a necessary requirement for concluding and fulfilling the contract. Without providing such personal data, the contract cannot be concluded or fulfilled by the controller,
sending commercial communications and conducting marketing activities.
The controller does not perform automated individual decision-making within the meaning of Art. 22 GDPR. Such processing would only occur with your explicit consent.
IV. Data Retention Period
The controller stores personal data:
for the period necessary to exercise rights and obligations arising from the contractual relationship between you and the controller and to enforce claims from such contractual relationships,
until consent to processing for marketing purposes is withdrawn.
After the retention period expires, the controller shall delete the personal data.
V. Recipients of Personal Data (Controller’s Subcontractors)
Recipients of personal data include parties:
involved in the delivery of goods/services or execution of payments under the contract,
providing e-shop operation services and other services related to e-shop operation,
providing marketing services.
The controller does not intend to transfer personal data to a third country (outside the EU) or an international organization.
Services used for marketing and support:
Google Analytics – records cookies and website usage,
Google Adwords – records cookies and website usage,
Google Shopping – review requests, records email if you agree during the order process,
Heureka – records purchase conversions and email for “Verified by Customers” service,
Zboží.cz – records purchase conversions and email,
Sklik – records cookies, website usage, purchase conversions.
VI. Your Rights
Under the GDPR, you have the right to:
access your personal data under Art. 15 GDPR,
rectify personal data under Art. 16 GDPR, or restrict processing under Art. 18 GDPR,
erase personal data under Art. 17 GDPR,
object to processing under Art. 21 GDPR,
data portability under Art. 20 GDPR,
withdraw consent to processing in writing or electronically to the controller’s address or email as specified in Article III of these terms. Consent may be withdrawn at any time in your customer account.
You also have the right to lodge a complaint with the Data Protection Authority if you believe your rights under data protection law have been infringed.
VII. Conditions for Securing Personal Data
The controller declares that it has taken all appropriate technical and organizational measures to secure personal data.
The controller has adopted technical measures to secure data storage and personal data storage in paper form, in particular: secure/encrypted website access, encryption of customer passwords in the database, regular system updates, regular system backups.
The controller declares that personal data is accessible only to persons authorized by the controller.
VIII. Final Provisions
By sending an order via the online order form, you confirm that you have read and fully accept the Privacy Policy.
You agree to this Privacy Policy by checking the consent box through the online form. By checking the box, you confirm that you have read and fully accept the Privacy Policy.
The controller is entitled to amend this Privacy Policy. The new version will be published on the website and at the same time sent to your email address provided to the controller.
These terms are valid as of 1.10.2025.