Personal Data Processing Policy

PELEK Distribution s.r.o.,
registered office: Vlkova 532/8, 13000 Prague, Czech Republic
Company ID: 26719941, email: info@pelek.eu, tel.: +420774242766 (hereinafter referred to as the “Controller”).

for the sale of goods through the online store operated via pelek.sk under the name PELEK Distribution s.r.o.

The protection of personal data is very important to us. The purpose of this document is to provide you with all the information concerning the processing of your personal data when you use the online store through pelek.sk. We recommend that you read this Personal Data Processing Policy. If you have any further questions regarding the processing of your personal data, please contact us at info@pelek.eu.

Definitions. For greater clarity and ease of reference, these Personal Data Processing Policies include terms that are frequently repeated in these policies:

— Online Store: an online store operated by the controller under the name PELEK Distribution s.r.o. through the online store pelek.sk;
— GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council;
— Personal Data: any information about a user that can be used to identify them directly or indirectly;
— User: a natural person to whom the personal data relates, most often a customer or potential customer, also referred to as “you”;
— Processor: carries out personal data processing activities on the basis of a contract or other authorization for the controller;

1. Basic Information

Your personal data is collected through the online store pelek.sk and/or directly by us. In both cases, we may act as the data controller. If your personal data is processed on the online store pelek.sk, please read its Personal Data Processing Policy.

We process the following personal data about you:
— first and last name, contact details (in particular, email and telephone number), address;
— billing details and bank details (data necessary for maintaining accounting records);
— information that you provide to us as part of our communication (in particular, your questions and answers to your questions, and communication with you);

We do not process Special Categories of Personal Data.

2. For what purpose do we process personal data and what is the reason for processing

2.1 Performance of the contractual relationship and related legal obligations. The reason for processing personal data is the performance of the purchase contract and related obligations (delivery of goods, maintaining accounting records, handling a claim, or exercising your statutory right to return goods). We will process your first name and surname, contact details (residential and delivery addresses, email address, and telephone number), and, where applicable, other billing details. Personal data is processed for the duration of the contractual relationship and thereafter for 4 years after its termination (we have an interest in retaining certain personal data related to the purchase contract in order to protect our interests). We are legally required to archive accounting and tax documents. These data may be retained for up to 10 years from the end of the tax period in which the transaction took place. If necessary for delivery and payment, the personal data collected by us will be disclosed to an authorised transport company or authorised credit institution.

2.2 Card payment. If you provide us with your payment card details, we do not have access to the complete details. We only know that you are paying by card, while the card details are processed by the recipients of this data who process the payment on our behalf.

2.3 Order processing. To process your order, we also cooperate with other service providers (carriers and others) who help us fulfil concluded contracts. We disclose your data to these partners solely for the purpose of fulfilling our obligations under the purchase contract.

2.4 Communication with customer support, complaints, or other questions. If you have contacted us, we process your personal data on the basis of your consent for the purpose of handling your question or complaint. We may process the following personal data about you: first name, surname, telephone number, email address, and details of your order. Resolved customer support questions and complaints are regularly deleted, but no later than 4 years after the question or complaint has been handled.

2.5 Reviews. Our customers’ ratings are important to us. We will publish reviews if you give us your consent to do so (by submitting a review of the relevant product or service). We may process the following personal data about you: first name, surname, email address, and order details. With your explicit consent, we will also process photographs and personal data included in the review text. Reviews will remain published until you withdraw your consent, but no longer than 5 years.

2.6 Customer ratings. You can share your shopping experience and rate individual products. We may use other processors to evaluate your feedback regarding an individual purchased product.

2.7 Legal obligations. In addition to the processors listed below, we may provide personal data to third parties if required by law or in response to legal requests from public authorities or at the request of a court in legal proceedings.

2.8 Age restriction. For goods subject to an age restriction, we verify that you have reached the required minimum age in accordance with the law. For this purpose, we use an identification service that enables us to verify your age.

2.9 Digital products. If an update of goods with digital elements or digital products is necessary, we process the data you provided when placing your order.

3. Communication

3.1 Emails we may send. As part of selling our goods or services, we may send customers emails concerning:
3.1.1 delivery notification, delivery date update
3.1.2 tax documents, invoices
3.1.3 provision of a return label.

4. Processors

Your personal data may be provided to our business partners (processors) or other third parties if required by law.

We use only verified processors with whom we have concluded a written agreement and who provide us with at least the same guarantees as we provide to you. These are only processors from the European Union, from countries that have been declared and recognized as safe, or from countries with which we have concluded standard contractual clauses in accordance with Article 46 of the GDPR and which provide your personal data with a comparable level of protection to that provided by the GDPR and Czech legislation. All of these processors are bound by an obligation of confidentiality and may not use the personal data provided for any purposes other than those for which we disclosed it in accordance with these principles.

— Carriers (see Article 2.1 Fulfillment of the contractual relationship and related legal obligations): Česká pošta, PPL, DPD, WEDO, Zailkovna, Balikovna, GLS
— Order processing (see Article 2.1 Fulfillment of the contractual relationship and related legal obligations): Pelek.sk, BaseLinker
— Accounting (see Article 2.1 Fulfillment of the contractual relationship and related legal obligations): ABRA

5. What are your rights?

Where can you contact us? Write to us at info@pelek.eu or at our registered office address.
When will we handle it? We will respond to you no later than within one month. If providing the information would jeopardize the privacy of other individuals, or if providing it would be disproportionate to the risks or costs involved, we may be unable to comply with your request. In the event of a repeated request, the controller will be entitled to charge a reasonable fee for a copy of the personal data.

— Right of access. Confirmation as to whether we process your personal data. Information about the purposes of processing, the categories of personal data, the recipients to whom they are disclosed, the processing period, and the existence of the right to request that the controller exercise one of the rights listed below. This is subject to the condition that the rights and freedoms of other persons are not adversely affected.
— Right to rectification. Request the rectification of inaccurate personal data.
— Right to erasure. If there is no other reason to continue processing this data, we will delete or fully anonymize the data you requested.
— Right to restriction of processing. If you believe that we are processing your data incorrectly—whether regarding the grounds for processing or its scope—please let us know.
— Right to notification of rectification, erasure, or restriction of processing. If you contact us with a request, we will inform you of the outcome unless this is impossible (e.g. the email address from which you contacted us is no longer active).
— Right to data portability. At your request, we may provide your data, which you have provided to us in a structured, machine-readable format, to another controller.
— Right to object. If we process your data based on a legitimate interest (e.g. sending a newsletter), it is our responsibility to demonstrate our legitimate interest; if your objection is justified, we will stop carrying out this processing.
— Right to withdraw consent. If you have changed your mind, please write to us. Consent to processing for marketing and commercial purposes may be withdrawn at any time.
— Automated individual decision-making, including profiling. You have the right not to be subject to any decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We respect your rights, so we do not carry out profiling.

6. Conclusion

Please also read the Personal Data Protection Statement on the pelek.sk online store. This document contains more information about when the pelek.sk online store is the controller of personal data and how it handles your data.

These personal data processing policies may only be amended in writing. If you have any questions regarding our personal data processing policies, please contact us at info@pelek.eu. If you are dissatisfied, you may submit a report or complaint to the Office for Personal Data Protection at any time, located at Pplk. Sochora 727/27, 170 00 Prague 7 – Holešovice (more at https://www.uoou.cz ).

This personal data protection policy is effective as of 01.01.2024