Guidelines for the processing of personal data

Principal Elektrik sro ,
Address: Osadní 869/32, 17000 Prague, Czech Republic
VAT ID No.: 03402614 , E-mail: shop@pelek.eu , Tel.: +420 774 242 766 (hereinafter referred to as " Controller ")
for the sale of goods via the online shop, which is operated under the name Principal Elektrik sro on pelek.at.

The protection of your personal data is very important to us. The purpose of this document is to inform you about all aspects of the processing of your personal data when using the pelek.at online shop. We recommend that you read this privacy policy. If you have any further questions, please contact us by email at shop@pelek.eu .

Definitions. For better clarity and orientation, frequently recurring terms are listed in these guidelines:
— Online shop: Online shop operated by the responsible party under the name Principal Elektrik sro via pelek.at;
— GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council;
— Personal data: all information about the user that can be used to identify them directly or indirectly;
— User: natural person to whom the personal data relates, usually customer or potential customer , hereinafter referred to as “ you ”;
— Data processor: carries out the processing of personal data on the basis of a contract or other instructions from the controller.

1. Basic Data

Your personal data is collected via the online shop pelek.at and/or directly by us. In both cases, we may be the data controller. If your personal data is processed on pelek.at, please read their privacy policy ( https://pelek.eu/cs/pages/privacy-policy-1 ).

We process the following personal data about you:
— First and last name, contact details (especially email address, telephone number), address;
— Billing and bank details (data required for accounting);
— Information that you provide to us in the course of communication (inquiries, replies, messages).
We do not process special categories of personal data.

2. For what purpose and on what grounds do we process personal data?

2.1 Fulfillment of the contractual relationship and related legal obligations. The basis for processing personal data is the fulfillment of the purchase contract and the associated obligations (delivery of goods, accounting, processing of complaints, or exercising the right to return goods within the specified period). We process the name, surname, contact details (address, email, telephone), and, where applicable, billing information. The data is processed for the duration of the contractual relationship and for four years thereafter (to protect our legitimate interests). We archive accounting and tax documents for up to ten years after the end of the tax period in which the contract was fulfilled, as required by law. If necessary for delivery and payment, personal data may be transferred to the shipping provider or the bank.

2.2 Card payment. When you enter your payment card details, we do not have direct access to them; the data is processed by the payment service provider who carries out the payment.

2.3 Order processing. To process the order, we work with other service providers (transport service providers, etc.) to whom we only transfer data for the purpose of fulfilling the contract.

2.4 Communication with customer service, complaints, or other inquiries. When you contact us, we process your personal data based on your consent to handle the inquiry or complaint. Data processed: first name, last name, telephone number, email address, order details. Closed inquiries and complaints are deleted no later than 4 years after processing.

2.5 Reviews. Our customers' reviews are important to us. If you give us your consent, we will publish your review of a product or service. We process your first and last name, email address, order details, and, with your explicit consent, also photos or data included in the review text. We store reviews for the duration of your consent, up to a maximum of 5 years.

2.6 Customer reviews. You can share your experiences and rate products. We may use other data processors for the purpose of processing your reviews.

2.7 Legal obligations. We may disclose personal data to other parties if required by law or by a public authority.

2.8 Age restrictions. For goods with age restrictions, we verify that the required age has been reached via an age verification service.

2.9 Digital Products. If it is necessary to update goods with digital elements, we process the data provided during the ordering process.

3. Communication

3.1 Emails we may send. In connection with the sale of our products or services, we may send customers messages on the following topics:
3.1.1 Notifications about delivery, information about changes to the delivery date,
3.1.2 Tax documents, invoices,
3.1.3 Providing a label for the return of goods.

4. Data processors

Your personal data may be shared with our business partners (data processors) or other persons if required by law.
We only use vetted data processors with contractual confidentiality agreements who offer the same data protection guarantees as under the GDPR and Czech law. All our data processors are based in the EU or in countries considered safe, or are subject to standard contractual clauses pursuant to Article 46 of the GDPR.

— Transport service provider (see Art. 2.1 Performance of the contract and related legal obligations):
Česká posta, PPL, DPD, WEDO, Zásilkovna, Balíkovna, GLS
— Order processing (see Art. 2.1): Pelek.at, BaseLinker
— Accounting (see Art. 2.1): ABRA

5. What rights do you have?

How can you contact us? Write us an email to shop@pelek.eu or to our headquarters address.
When will we respond? We will respond within one month at the latest. If providing information would compromise the privacy of third parties or be inappropriate, we cannot comply with the request. A reasonable fee may be charged for repeated requests to obtain a copy of the data.

— Right of access. Confirmation as to whether we process your data, information about the purpose, the categories of data, the recipients, the duration of storage and the existence of further rights.
— Right to rectification. Request the correction of inaccurate data.
— Right to erasure. If there is no longer a reason to process the data, we will delete or anonymize it.
— Right to restrict processing. If you believe that we are processing data incorrectly, please let us know.
— Right to information about rectification or erasure. If you submit a request, we will inform you of the result, unless this is not possible (e.g., a non-functional email address).
— Right to data portability. At your request, we can transfer your data to another controller in a structured, machine-readable format.
— Right to object. If we process data based on a legitimate interest (e.g., newsletters), you can object; if we can prove your claim, we will cease processing.
— Right to withdraw consent. You can withdraw your consent to processing for marketing purposes at any time.
— Automated decisions, including profiling. You have the right not to be subject to a decision based solely on automated processing. We do not carry out profiling.

6. Conclusion

Please also read the privacy policy on the website pelek.at , where you can find further information on data processing by the operator of the e-shop.
These guidelines for processing personal data can only be changed in writing. If you have any questions, please contact us by email at shop@pelek.eu .
If you are dissatisfied, you can submit a complaint or suggestion to the Data Protection Authority at any time, Plk. Sochora 727/27, 170 00 Praha 7 – Holešovice (more information at https://www.uoou.cz ).