Principles of Personal Data Processing
Květiny Expres s.r.o., as the operator of the online store at https://kvetinyexpres.cz/, approaches the protection of your personal data with maximum care and responsibility. These principles explain what data we collect, why we do it, and what rights you have in this regard.
1. Personal Data Controller The controller of your personal data is the business company: Květiny Expres s.r.o., with its registered office at Švecova 2383/2, 149 00, Prague 4, Czech Republic. ID (IČO): 24284190. Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 192828. Contact email for privacy matters: info@kvetinyexpres.cz
2. What personal data do we process? We process data you provide when creating an order or registering, and data about your purchases. This specifically includes:
-
Identification data: Name and surname, or company name and ID.
-
Contact data: Delivery and billing address, email address, phone number.
-
Order data: Purchased goods, messages attached to bouquets, purchase history. We never collect or store sensitive data about your payment cards. All payments are processed through secure third-party payment gateways.
3. Why and on what basis do we process data? We process your data for various purposes based on various legal titles:
-
Order processing and contract fulfillment: To accept, process, and deliver your order. (Legal basis: Fulfillment of the purchase contract).
-
Communication and support: Sending order status information or resolving inquiries and complaints. (Legal basis: Fulfillment of contract and legitimate interest).
-
Legal obligations: Retaining invoices for accounting and tax purposes. (Legal basis: Compliance with legal obligations).
-
Newsletter (Marketing): If you grant us consent, we may send news and special offers to your email. (Legal basis: Consent, which you can withdraw at any time).
-
Service improvement: Using anonymized data to analyze traffic and customer behavior. (Legal basis: Legitimate interest).
4. How long do we retain data?
-
Data for contract fulfillment is kept for the time necessary to process the order and for the duration of the warranty period.
-
Data required by law (e.g., invoices) is archived for the period specified by relevant legal regulations (usually 10 years).
-
Data processed based on your consent (newsletter) is kept until you withdraw your consent.
5. To whom do we transfer data? We handle your data with maximum discretion. We transfer it only to verified partners (processors) who help us ensure the operation of our services:
-
Shipping companies (e.g., EMS, our own couriers) for order delivery.
-
Payment gateway providers for secure payment processing.
-
IT and hosting providers ensuring the secure operation of our e-shop.
-
Accounting and tax advisors within the fulfillment of our legal obligations. All partners are required to handle data securely and use it only for the agreed purpose.
6. What are your rights? In accordance with GDPR, you have the following rights:
-
Right of access, rectification, and erasure ("right to be forgotten").
-
Right to restriction of processing and data portability.
-
Right to object to processing and the right to withdraw consent.
-
Right to lodge a complaint with a supervisory authority (The Office for Personal Data Protection - ÚOOÚ). You can exercise your rights via our contact email: info@kvetinyexpres.cz.
7. How do we protect your data? We use modern security technologies. Data transfer between your browser and our server is encrypted using SSL protocol. Our databases and servers are protected against unauthorized access.
8. Cookies For the proper functioning of our site, we use cookies. Detailed information can be found in our separate Cookies Policy.
Team Květiny Expres.cz
