Privacy Policy
PRINCIPLES OF PERSONAL DATA PROCESSING
The processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”) and by Act No. 110/2019 Coll., on the processing of personal data, as amended.
1. INTRODUCTION
These principles contain basic information on the processing of personal data carried out by the controller, in particular, but not exclusively, in connection with a contractual or non-contractual relationship with the controller, the provision and receipt of services or goods, including via e-shops operated by the controller, especially the e-shops located at basketking.cz, peakshop.cz, basket-obchod.cz and spojovak.eu (the “E-shop” or “E-shops”), and the operation of these websites. Please do not provide us with any of your personal data if you do not wish it to be used in the manner described in these principles.
2. CONTROLLER OF PERSONAL DATA
With respect to your personal data, the controller is PRO TENAX s.r.o., ID No.: 64357465, registered office Plzeňská 35, 252 19 Chrášťany, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, Insert 233026 (the “Controller”).
3. CONTACT DETAILS
To exercise your rights or if you have related questions, you can contact the Controller in writing at the Controller’s registered office address or at the e-mail address ucetni@protenax.cz.
Our company has not appointed a Data Protection Officer.
4. PROCESSING OF PERSONAL DATA
Personal data are processed to the extent provided to the Controller by the relevant data subject in connection with the conclusion of a contractual or other legal relationship with the Controller, or data otherwise collected by the Controller and processed in accordance with applicable legal regulations or to fulfil the Controller’s legal obligations.
A) Processing of personal data when using the contact form
If you inquire about our products and services, we will work with the contact details you provide to us, mainly via the inquiry form; these will typically be the data listed in Section 6 of these principles.
§ For what reason?
We contact you to handle the request submitted via the contact or other web form on our website and for further arrangements regarding the provision of goods and services. Depending on the nature of the request submitted through the form, another applicable purpose may also apply.
§ On what legal basis?
Processing is based on Article 6(1)(b) GDPR – steps prior to entering into a contract at your request / negotiation of a contract, or on the Controller’s legitimate interest in responding to and handling your message.
§ How long will we process the personal data?
If we do not establish further cooperation, we will process your data until the request is resolved and then for five years from our last communication.
B) Processing of personal data in case of purchase (including purchases in our E-shop)
If you purchase from us, we will work with the data you provide. These will typically be the data listed in Section 6 of these principles.
§ For what reason?
We need to process personal data to perform our contract – to deliver goods according to your order concluded with us, i.e., the Controller. We will also use your contact details to communicate with you about the status of your order, any complaints, or your inquiries.
We will further process personal data to meet our statutory obligations arising in particular, but not exclusively, from Act No. 563/1991 Coll., on Accounting, Act No. 586/1992 Coll., on Income Taxes, and Act No. 235/2004 Coll., on Value Added Tax, mainly for accounting and tax purposes.
§ On what legal basis?
Processing is based on Article 6(1)(b) GDPR – performance of a contract and Article 6(1)(c) GDPR – compliance with our legal obligation.
§ How long will we process the personal data?
Personal data will be processed for the duration of the contractual relationship and subsequently for five years after the contract ends so the Controller can defend any legal claims, or further for the period required by legal regulations.
C) Newsletters (commercial communications)
If you have purchased in one of our E-shops, we will use your e-mail address to send our newsletters – updates about our products or services – unless you have objected to such use.
§ On what legal basis?
This is permitted by Section 7(3) of Act No. 480/2004 Coll., on certain information society services, unless you have refused this.
§ How long will we process the personal data?
For 10 years from your last purchase. You can unsubscribe at any time via e-mail or by clicking the link in the commercial communication; in such case, we will no longer use your address for sending commercial communications.
D) Satisfaction surveys
We measure your satisfaction with purchases using e-mail questionnaires under the “Ověřeno zákazníky” (Verified by Customers) program, in which our E-shop participates. We send them each time you purchase from us unless you refuse them under Section 7(3) of Act No. 480/2004 Coll. on certain information society services. We process personal data for sending these questionnaires based on our legitimate interest in determining your satisfaction with your purchase. For sending questionnaires, evaluating your feedback, and analysing our market position, we use a processor, the operator of the Heureka.cz portal; for these purposes, we may provide information about the goods purchased and your e-mail address. Your personal data are not transferred to any third party for its own purposes when sending these e-mail questionnaires. You may object to receiving these questionnaires at any time by refusing further questionnaires via the link in the e-mail. If you object, we will no longer send the questionnaire.
Personal data will not be used for decisions based solely on automated processing, nor for profiling.
5. SOURCES OF PERSONAL DATA
The source for processing and collecting personal data is the data subject directly. The Controller may also collect personal data from third parties such as public authorities, business partners, or publicly available sources – databases.
6. CATEGORIES OF PERSONAL DATA
The following personal data are subject to processing:
§ basic identification data that are or may be necessary to conclude a contract, in particular first name and surname, residence/registered office address, function or job position,
§ contact details, in particular first name and surname, phone number, e-mail, and delivery address,
§ other personal data provided for the purpose of being contacted by the Controller or for establishing cooperation,
§ personal data necessary for the provision of services or the receipt of goods or services, or data provided in connection with the provision or receipt of goods or services and the performance of a contract,
§ data relating to the use of the websites, and
§ any other data provided at the data subject’s own discretion for a specific processing purpose.
7. CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Personal data may be transferred to an external party ensuring the operation of the Controller’s technical (especially software and hardware) equipment.
If you purchase from one of our E-shops, recipients are those who help us operate them. In particular:
§ the operator of the Shoptet e-shop platform (Shoptet a.s., Dvořeckého 628/8, Břevnov, 169 00, Prague 6, ID 289 35 675) for E-shops hosted on spojovak.eu, basketking.cz, and basket-obchod.cz;
§ the operator of the MajorShop e-shop platform (PC HELP, a.s., Samešova 1144, 674 01 Třebíč, ID 607 48 516) for the E-shop hosted on peakshop.cz;
§ the provider of the Heureka service operated by Heureka Group a.s., ID 289 35 675, Karolinská 650/1, 186 00, Prague 8 – Karlín;
§ providers of logistics and transport services;
§ providers of payment services and payment gateways;
§ the provider of e-mailing services.
The Controller’s advisers and external collaborators (e.g., tax advisers, legal advisers) may have access to certain personal data strictly if they need such data to fulfil the processing purpose.
The above recipients are obliged to provide sufficient and reliable guarantees of technical and organisational personal data protection.
The Controller processes personal data exclusively within the European Union or in countries ensuring an adequate level of protection based on an EU Commission decision. Personal data will not be transferred to an international organisation.
8. RIGHTS OF DATA SUBJECTS
Under the conditions laid down by legal regulations, in particular in Chapter III of the GDPR, you have:
§ the right of access to all your personal data processed by the Controller, including the right to obtain confirmation of whether your personal data are processed, information on the purposes of processing, categories of personal data, recipients to whom personal data have been or will be disclosed, the envisaged period of processing, the existence of the right to request rectification or erasure of personal data or restriction of processing or to object to processing, the right to lodge a complaint with a supervisory authority, any available information on the source of the personal data if not obtained from you, the fact of automated decision-making including profiling, and appropriate safeguards in case of data transfers outside the EU,
§ the right to request rectification or erasure of personal data; you have the right to rectification if inaccurate data are processed, the right to have incomplete data completed, or the right to erasure if any of the grounds for erasure under Article 17 GDPR applies, especially if the data have been processed unlawfully,
§ the right to restriction of processing under Article 18 GDPR, in particular if you object to processing and it has not yet been verified whether the Controller has compelling legitimate grounds overriding those of the data subject,
§ the right to data portability under Article 20 GDPR, i.e., under certain conditions the right to transmit the personal data provided to another controller,
§ under the conditions of legal regulations, in particular Article 21 GDPR, the right to object to the processing of personal data,
§ where processing is based on consent, the right to withdraw your consent at any time in writing, i.e., by sending an e-mail or letter to the Controller, without any additional costs. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal, and
§ the right to lodge a complaint with the national supervisory authority, which in the Czech Republic is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), if you believe that the processing of your personal data violates the GDPR.
In case of doubts about compliance with obligations related to the processing of your personal data, you may contact the Controller via the contacts listed above in Section 3, or lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, e-mail: posta@uoou.cz, website: www.uoou.cz.
9. SECURITY OF PERSONAL DATA
The Controller has implemented technical and organisational measures within the meaning of Article 32 GDPR that are necessary and appropriate to ensure that all processing is carried out in accordance with legal regulations, especially the GDPR, and to ensure the protection of the rights and freedoms of data subjects in connection with the processing of personal data. These measures include data minimisation, the fastest possible pseudonymisation, transparency, necessity and proportionality of processing, and the Controller’s ability to build and improve security features. The technical and organisational measures implemented by the Controller are reviewed and updated as needed.
10. USE OF COOKIES
The Controller, as the operator of the website protenax.cz and the sites on which the E-shops are operated (the “Sites”), uses cookies on the Sites.
Cookies are short text files that a website stores on a visitor’s computer and that the Internet browser provides each time the user returns to the site. Standard web browsers (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) support cookie management. Within the browser settings, you can manually delete individual cookies, block them, or completely disable their use; you can also block or allow them only for specific websites. For more detailed information, please use your browser’s help.
We use the following cookies on the websites:
§ Necessary cookies: required for the operation of the websites, enabling, for example, login to secure areas and other basic site functionalities. This category cannot be disabled.
§ Analytics/statistics cookies: allow us to recognise and determine the number of visitors and to track how visitors use the websites. They help us improve the way the sites work, e.g., by helping users easily find what they are looking for. These files are activated only with your prior consent.
§ Advertising cookies: used to track preferences and to display ads and other content that best match your interests and online behaviour. These files are activated only with your prior consent.
The current list of cookies used and their managers can be found in the cookie settings tool (“Cookie settings” in the website footer).
The use of cookies for the purposes above may involve the processing of personal data. Such processing is possible on the following legal bases:
§ the Controller’s legitimate interest pursuant to Article 6(1)(f) GDPR for necessary cookies, because they are essential for the proper functioning of the Sites;
§ the data subject’s consent pursuant to Article 6(1)(a) GDPR for analytics and advertising cookies. You can withdraw consent at any time via the “Cookie settings” link in the footer or by changing your browser settings. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Retention period: Necessary cookies are stored only for the duration of the session (until the browser is closed). Analytics and advertising cookies are stored for the period stated for each cookie in the “Cookie settings”, but no longer than 13 months from storage.
Cookies collected to measure website traffic and create statistics on traffic and visitor behaviour are assessed in aggregate and anonymous form that does not allow identification of an individual.
Data from cookies may also be processed by our contractual partners (processors):
· Provider of Google Analytics, operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;
· Providers of advertising systems that help target ads: Google Ads, Meta Platforms (Facebook Pixel – fbp.basketking.cz, fbp.basket-obchod.cz), Sklik, Adform (C.adform.net, uid.adform.net, track.adform.net); Medium (uid.medium.com, sid.medium.com);
· Providers of external mailing tools (for sending commercial communications and newsletter segmentation), e.g., SmartEmailing (SmartSelling a.s.);
· Providers of other analytics and marketing tools, e.g., Stape (cee.mpc-prod-18-s6uit34pua-uc.a.run.app); Glami (glm_usr_tmp.glami.cz, glm_usr.glami.cz, _nss.glami.cz); Sklik, Seznam (sznlbrc.seznam.cz);
· Providers of other services for tracking interactions and personalising content, e.g., LinkedIn (langwww.basketking.cz, langwww.peakshop.cz – only for remembering language settings).
Please note that third parties (including, for example, providers of external services) may also use cookies and/or access data collected by cookies on the websites.
Consent may be expressed via the checkbox contained in the so-called cookie bar. You can also subsequently refuse cookies in your browser settings or set the use of only certain cookies.
11. CONCLUSION
These principles take effect on 3 November 2025. Please note that these principles may be amended or updated. Any changes will become effective upon their publication on the Controller’s websites.