Personal Data Processing

I. Data Controller

We are PONATURE s.r.o., based at U Hrůbků 251/119, Ostrava 709 00, Czech Republic, Company ID 24851779, registered under file no. C 65685 at the Regional Court in Ostrava. As the controller ("Controller"), we process your personal data in accordance with Regulation (EU) 2016/679 ("GDPR"). Our e-shop is registered with the Office for Personal Data Protection.

Our contact details are:
Address: U Hrůbků 251/119, Ostrava 709 00
Email: office@kilpi.cz
Phone: +420 777 734 330

II. Personal Data We Process

We process all personal data that you provide in connection with ordering goods or services, especially: 1) name and surname, 2) residential address, 3) company ID, 4) VAT number, 5) email address, 6) phone number, 7) bank account number, 8) date of birth. Data may be processed both automatically and manually, in electronic or printed form, to the extent necessary to fulfill the contract.

We may also process personal data obtained from sources other than you. Any third party providing your data must inform you in advance.

If you provide us with third-party personal data, you are responsible for informing them and obtaining their consent.

When visiting our website, we may automatically collect data such as IP address, access date and time, browser, OS, language, and device location. We may also track your behavior on our site, e.g. pages visited and products viewed.

Cookies containing visit information may also be automatically processed.

III. Purpose of Personal Data Processing

Your personal data is processed for the following purposes:

1. Order fulfillment and delivery.
2. Customer support when necessary to resolve your request.
3. User account management.
4. Marketing, including newsletters and commercial messages.
5. Service optimization and personalized product recommendations.
6. Customer reviews of products and services.
7. Legal compliance and enforcement of our rights or obligations.

IV. Legal Basis for Processing

We process your personal data based on:

1. Contract fulfillment for purchased goods—billing, delivery, and contact information are used.
2. Our legitimate interest in offering relevant products based on your browsing and cookies.
3. Your consent for direct marketing. If you have ordered from us, we may send you messages unless you opt out.

V. Sharing Personal Data with Third Parties

We may share your personal data in the following cases:

1. For delivery, we share data with our warehouse partner and delivery service. This includes your name, address, phone number, and potentially the payment amount due on delivery. These data are only used for delivery purposes and are deleted thereafter.
2. For sending newsletters or promotions, if outsourced, we share your email or phone number. The partner is bound by confidentiality.
3. For legal purposes or exercising our rights, data may be shared with legal representatives or authorities as required by law.
4. For accounting, when outsourced, your data may be used for invoicing and financial records. The partner is also bound by confidentiality.
5. For technical administration of the e-shop, your data may be accessed by IT service providers under confidentiality obligations.

VI. Data Retention Period

1. Data is stored during the contractual relationship and for 1 year after the warranty period of the purchased goods.

2. Data processed based on consent will be stored for 7 years or until consent is withdrawn.

3. Data necessary for contract fulfillment and legal obligations (e.g. tax documents) may be stored without consent, typically for at least 10 years.

4. User account data is stored for the account’s lifetime and 3 years after deletion.

5. After the applicable period, data is permanently deleted.

VII. Data Security

We implement appropriate technical and organizational measures to secure your personal data, both electronically and physically. Only authorized personnel have access, which is monitored.

VIII. Your Rights

You have the right to:

• Withdraw consent at any time.
• Correct or complete your personal data (Art. 16 GDPR).
• Request restriction of processing (Art. 18 GDPR).
• Object to processing or file a complaint (Art. 21 GDPR).
• Access your data (Art. 15 GDPR).
• Receive a copy of your data (Art. 20 GDPR).
• Be informed of data breaches.
• Request deletion (Art. 17 GDPR), unless retention is required by law or for legal claims.

Requests can be submitted via email to office@kilpi.cz or in writing to PONATURE s.r.o., U Hrůbků 251/119, Ostrava 709 00.

If you believe your data protection rights have been violated, you may lodge a complaint with the appropriate supervisory authority.

IX. Final Provisions

1. By ticking the consent checkbox in the order form, you confirm that you have read and agree to this privacy policy and grant explicit consent to the processing of the specified personal data for contract performance and account management. If not opted out, you also consent to receive commercial messages via the provided email.

2. We reserve the right to update this policy by publishing changes on our website.

3. This privacy policy is valid from January 1, 2023.