Privacy policy

The data controller is:

ERVO INDUSTRY TECHNOLOGY s.r.o. Bezručova 605, 276 01 Mělník, Czech Republic Company ID (IČO): 19777728 Registered with the Municipal Court in Prague, Section C, Insert 391387 E-mail: info@ervotechnology.eu Phone: +420 607 060 054

(hereinafter the “Controller”), which processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on the Processing of Personal Data.

1. What personal data we process

In connection with operating the e-shop, we process in particular the following categories of personal data:

• identification data: first name, last name, for businesses also company ID/VAT number, company name,
• contact data: address, e-mail, phone number,
• order data: order content, order history, payment details (excluding payment card numbers, which are processed solely by the payment gateway),
• technical data: IP address, cookies, website behaviour data (see Section 6).

2. Purpose and legal basis of processing

We process personal data to process orders and perform the purchase agreement, on the basis of performance of a contract (Art. 6(1)(b) GDPR).

For maintaining a user account, we process personal data on the basis of performance of a contract, or consent.

To fulfil legal obligations (in particular accounting, tax obligations, and handling complaints), we process personal data on the basis of a legal obligation (Art. 6(1)(c) GDPR).

For sending commercial communications (newsletter), we process personal data on the basis of consent (Art. 6(1)(a) GDPR), which may be withdrawn at any time.

For website improvement, analytics, and marketing, we process personal data on the basis of the Controller’s legitimate interest, or consent (for cookies).

3. Data retention period

We retain personal data for as long as necessary to fulfil the purposes stated above, specifically:

• data related to the purchase agreement and accounting/tax records for the period required by law (typically 10 years from the end of the tax period),
• user account data for the duration of the account’s existence, or until it is cancelled,
• data processed on the basis of consent (newsletter, marketing cookies) until such consent is withdrawn.

4. Who has access to personal data

Personal data may be disclosed to the following categories of processors/recipients:

• the web hosting and technical operation provider of the e-shop,
• shipping and delivery companies (for order delivery purposes),
• the payment gateway provider (for payment processing purposes),
• accounting/tax service providers,
• where necessary, public authorities on the basis of a legal obligation.

Personal data is not transferred to third countries outside the EU/EEA unless necessary for the operation of a specific service (e.g. analytics or marketing tools), and always with appropriate GDPR safeguards in place.

5. Rights of the data subject

In accordance with the GDPR, the buyer/user has the right to:

• access their personal data,
• rectify inaccurate data,
• erasure (“right to be forgotten”), provided this does not conflict with another legal obligation,
• restriction of processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent to processing, where given, without affecting the lawfulness of processing carried out before withdrawal,
• lodge a complaint with the Office for Personal Data Protection (www.uoou.cz) if the data subject believes their rights have been violated.

These rights may be exercised by e-mail at info@ervotechnology.eu or in writing at the company’s registered address.

6. Cookies

The e-shop website uses cookies for the purposes of:

• ensuring basic website functionality (necessary cookies),
• analysing traffic (analytical cookies),
• personalising content and advertising (marketing cookies).

Necessary cookies are used without requiring consent, as they are essential for the website to function. Analytical and marketing cookies are set only on the basis of consent given via the cookie banner; this consent may be withdrawn at any time via the website’s cookie settings or browser settings.

7. Security of personal data

The Controller has adopted appropriate technical and organisational measures to secure personal data against unauthorised access, loss, misuse, or leakage, including secure data transmission (HTTPS/SSL) and restricting data access to authorised persons only.

8. Contact

For questions regarding the processing of personal data, please contact:

E-mail: info@ervotechnology.eu Phone: +420 607 060 054 Address: ERVO INDUSTRY TECHNOLOGY s.r.o., Bezručova 605, 276 01 Mělník, Czech Republic