Privacy Policy

Privacy Policy 

This Privacy Policy (hereafter referred to as the "Privacy Policy") should be read and accepted with the Website Terms and Conditions. 

Definitions 

• Website: The website available at https://www.vpotoky.com/. 
• User: Any natural person using the Website. 
• Registered User: Any User who has registered, logged into their Account, and uses the Website. 
• Account: A personal page of the Registered User on the Website containing personal information and order details. 
• Company: Velke Potoky s.r.o., a legal entity established under the laws of the Czech Republic, with tax ID CZ05299187 and ICO 05299187, and registered address: Maxov 19, Vseruby, 34401, Czech Republic. The Company is the manufacturer and seller of the Goods on the Website. 
• Goods (Products): Any items (e.g., stands for embroidery, other embroidery accessories) available on the Website. 
• Personal Data: Any information related to the User that can identify them directly or indirectly, especially through an identifier. 

General Provisions 

The Company, in its role as a controller and processor, may process the Personal Data specified herein. The Company is considered both a controller and a processor for such Personal Data. 

The Company may request the User to provide (including repeatedly) certain Personal Data during or after ordering the Goods on the Website or via email. 

All Personal Data provided by the User may only be processed with the User's consent. The User has the right to choose the purpose and specific types of Personal Data to be processed by the Company and which shall not be processed. The User is entitled to withdraw their consent fully or partially at any time by providing electronic written notice to the Company via email or the dedicated contact form on the Website. 

Certain Personal Data is necessary for ordering Goods on the Website and ordering via email. Therefore, if the User refuses to provide such Personal Data (as well as withdraw consent), it may result in the inability to deliver Goods and fulfill other obligations under the Terms of Sale. 

What Personal Data Does the Company Use 

Subject to the User's consent (as outlined below), the Company may process the following Personal Data: 

• User's full real name (first and last name). 
• User's email address. 
• User's telephone number. 
• User's shipping and billing addresses. 
• User's purchase (transactions) history. 
• User's personal preferences, including a wish list, marketing and cookie preferences, and IP address. 
• Password and other information provided by the User. 

The Company is entitled to process only Personal Data provided by the User or collected automatically from the User with their consent. 

Purpose of Use 

The Company processes User's Personal Data for the following purposes: 

• For the proper use of the Website and the ability to add Goods to the virtual shopping cart. Personal Data such as cookie information and IP address is processed automatically and stored for short periods, being deleted after the User ends their session. 
• To become a Registered User and utilize all Account features, including changing their name and surname, email address, adding information to the address book and wish list, unsubscribing or subscribing to the newsletter, viewing order history, handling return requests, recurring payments, and other transactions. To become a Registered User, certain Personal Data is obligatory to provide, including the first and last name, email, telephone number, billing address, and password. 
• To subscribe to the Company's newsletter and communicate with the Company. 
• To order and receive Goods on the Website. When ordering Goods on the Website, certain Personal Data is obligatory to provide, including the first and last name, email, telephone number, billing address (and delivery address if different), and password. By ordering Goods, the User accepts that all communication with them shall be done using the provided Personal Data. Processing of Personal Data for this purpose is necessary for the execution and performance of obligations under the Terms of Sale. 
• The Company may also use User's Personal Data for other purposes and will provide electronic written notice at the time of collection and obtain User's consent where necessary. 

User's Consent 

User's consent shall be provided: 

• During Account registration on the specific page of the Website dedicated to registration, by checking the box 'I have read and agree to the Privacy Policy.' 
• When ordering Goods during checkout by checking the box 'I have read and agree to the Privacy Policy' (for non-Registered Users). 
• When the User contacts the Company via email and intends to order Goods and provide their Personal Data. 

The link to this Privacy Policy shall be available during registration and ordering, near the respective boxes. After receiving consent from the User, the Company shall immediately send a confirmation letter to the User (regarding Account registration and/or ordering) summarizing the User's consent and providing a link to the full text of the Privacy Policy. 

User Rights 

• The User shall have the right to obtain from the Company confirmation as to whether or not Personal Data concerning them is being processed, what information is being processed, the purposes of processing, the retention period, and the main legal regulations under which Personal Data is processed. The User also shall have the right to obtain their Personal Data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller. 
• The User shall be entitled to have inaccurate Personal Data rectified or completed if it is incomplete. The User also has the right to demand a restriction of further processing until rectification. The Company is obliged to rectify and/or complete such Personal Data without undue delay, but no longer than within 14 days after receiving electronic written notice from the User. 
• The User shall have the right to erase their Personal Data. The Company is obliged to erase such Personal Data without undue delay, but no longer than within 14 days after receiving electronic written notice from the User. 
• The User shall have the right to withdraw their consent to Personal Data processing. For withdrawing consent, the User may be required to provide information confirming their identity. Consent withdrawal shall be effective on the next day following notification by the User, but not earlier than 12 hours after receiving such notification. For the avoidance of doubts, any processing during the period from consent to withdrawal shall remain lawful, irrespective of withdrawal. The User acknowledges that withdrawing consent regarding Personal Data is necessary for the execution and performance of the Company's obligations under the Terms of Sale. 

How Personal Data is Processed and Stored 

The Company, as a controller and processor of Personal Data provided by Users, is obliged to adopt appropriate technical and organizational measures to ensure the protection of rights. Personal Data obtained by the Company is processed, stored, and used electronically and in writing strictly for the indicated purposes. In addition to the Company, in the event of ordering Goods, certain persons in charge (such as third-party technical service providers, mail carriers, hosting providers, and banks) may have access to the Personal Data as Data Processors, appointed, if necessary, by the Company. 

All Personal Data is stored in countries where the GDPR is applicable (EU countries). Personal Data is stored by the Company as long as the User's Account is active, but no longer than is necessary for the purposes for which it was processed. 

Cookies 

The Website uses 'cookies' to facilitate smooth and uninterrupted access to it and personalize the experience of every User on the Website. A cookie is a small piece of data stored on a computer or mobile device by the web browser of the User. Most web browsers can be set to disable the use of cookies, and the User may choose to disable such use. However, if the User disables cookies, he/she may not be able to access the Website's functionality correctly. 

Communication 

The User shall have the right to contact the Company regarding any issues related to Personal Data using the Company's contact email or the dedicated contact form on the Website. 

The Company undertakes to reply to any such communication without undue delay and always within one month. 

Owner and Data Controller