Privacy Policy
I. Basic Provisions The data controller pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is RECART s.r.o., Company ID (IČ): 14330504, registered office at Cyrila a Metoděje 66, 441 01 Podbořany, registered in the Commercial Register kept by the Regional Court in Ústí nad Labem, Section C, Insert 48526 (hereinafter: the "Controller"). The contact details of the Controller are:
- Address: Cyrila a Metoděje 66, 441 01 Podbořany, Czech Republic
- E-mail: hello@recart-sim.com
- Phone: +420 474 777 707
Personal data means any information relating to an identified or identifiable natural person. The Controller has not appointed a Data Protection Officer, as there is no legal obligation to do so.
II. Sources and Categories of Processed Personal Data The Controller processes personal data that you have provided or personal data obtained by the Controller in connection with the fulfillment of your order:
- First and last name,
- E-mail address,
- Phone number,
- Billing and delivery address,
- Where applicable, Company ID and VAT ID (for businesses),
- Payment details and order history,
- IP address and data from cookies (if you have consented to their processing).
III. Lawful Basis and Purpose of Processing Personal Data The lawful basis for the processing of personal data is:
- Performance of a contract between you and the Controller pursuant to Art. 6(1)(b) GDPR (for order processing),
- Compliance with a legal obligation to which the Controller is subject pursuant to Art. 6(1)(c) GDPR (especially accounting and tax records),
- The Controller's legitimate interest in providing direct marketing (especially sending commercial communications to existing customers) pursuant to Art. 6(1)(f) GDPR,
- Your consent to processing for the purpose of providing direct marketing (sending newsletters) pursuant to Art. 6(1)(a) GDPR in the event that no goods were ordered.
The purpose of personal data processing is:
- Processing your order and exercising the rights and obligations arising from the contractual relationship. The provision of this data is a necessary requirement for the conclusion and performance of the contract,
- Fulfilling legal obligations towards the state (accounting, taxes),
- Sending commercial communications (newsletters). You can easily unsubscribe from these communications at any time by clicking on the link in the e-mail. There is no automated individual decision-making by the Controller within the meaning of Article 22 GDPR.
IV. Data Retention Period The Controller stores personal data:
- For the period necessary to exercise the rights and obligations arising from the contractual relationship and to assert claims from these relationships (standardly for 10 years from the termination of the contractual relationship, due to tax and accounting obligations).
- For the period until consent to the processing of personal data for marketing purposes is withdrawn, but no longer than 3 years if personal data are processed on the basis of consent or legitimate interest. After the retention period expires, the Controller will irretrievably delete the personal data.
V. Recipients of Personal Data (Subcontractors of the Controller) We do not sell or otherwise provide your personal data to third parties, except for partners who help us run the e-shop and process your order. Recipients of personal data include:
- Shipping companies that deliver the goods to you,
- Operators of payment gateways through which you pay the purchase price,
- The provider of the e-shop platform on which our store runs,
- Providers of accounting and tax services,
- Providers of marketing services (e.g., Mailchimp for sending newsletters). The Controller also uses the services of companies based outside the European Union (e.g., Mailchimp in the USA). Data transfer to the USA takes place on the basis of an adequacy decision by the European Commission (the Data Privacy Framework), or on the basis of standard contractual clauses.
VI. Your Rights Under the conditions set out in the GDPR, you have:
- The right of access to your personal data (Art. 15 GDPR),
- The right to rectification of personal data (Art. 16 GDPR), or restriction of processing (Art. 18 GDPR),
- The right to erasure of personal data – the "right to be forgotten" (Art. 17 GDPR),
- The right to object to processing (Art. 21 GDPR),
- The right to data portability (Art. 20 GDPR),
- The right to withdraw consent to processing in writing or electronically to the Controller's e-mail (hello@recart-sim.com). You also have the right to file a complaint with the Office for Personal Data Protection (www.uoou.cz) if you believe your right to personal data protection has been violated.
VII. Personal Data Security Conditions The Controller declares that it has taken all appropriate technical and organizational measures to secure personal data. The Controller has taken technical measures to secure data repositories (password security, antivirus programs, website encryption using HTTPS) and physical personal data repositories (lockable premises). The Controller declares that only authorized persons have access to personal data.
VIII. Final Provisions By submitting an order from the online form, you acknowledge that you are familiar with this privacy policy and accept it in its entirety. The Controller is entitled to change these conditions. The new version will be published on its website. These terms take effect on March 23, 2026.