Privacy policy

PRIVACY POLICY


1. my čtyři s.r.o., with registered office at V kapslovně 2770/7, Žižkov (Prague 3), 130 00 Prague, Company ID No.: 07787308, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 307547 (hereinafter the „Seller" or the „Controller") processes, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the „Regulation"), the following personal data:

  • - first name, surname;
  • - e-mail address;
  • - telephone number;
  • - address / place of residence;

and further information obtained in connection with the use of our services:

  • - IP address;
  • - company identification number (IČO) and tax identification number (DIČ);
  • - cookies (in the case of online services);
  • - where applicable, other online identifiers.

2. We process the personal data listed above for the purpose of fulfilling the order and otherwise performing the contract, where a purchase contract has been concluded between you and the Seller. Such processing of personal data is permitted by Article 6(1)(b) of the Regulation - processing is necessary for the performance of a contract.

The Seller also processes this data for the purpose of keeping records of the contract and of any future exercise and defence of the rights and obligations of the contracting parties.

Personal data is stored and processed for the purpose stated above for a period of 10 years from the date on which the final part of the performance under the contract was rendered, unless another legal regulation requires contractual documentation to be retained for a longer period. This processing is permitted under Article 6(1)(c) and (f) of the Regulation - processing is necessary for compliance with a legal obligation and for the purposes of the legitimate interests of the Controller.

3. Newsletters and other commercial communications may be sent to the buyer's e-mail address or, where applicable, telephone number. In the case of our customers, this is permitted by Section 7(3) of Act No. 480/2004 Coll., on Certain Information Society Services, unless the buyer refuses. To all other persons we send commercial communications only on the basis of their consent under Article 6(1)(a) of the Regulation.

Commercial communications may be unsubscribed from at any time and by any means - for example by sending an e-mail or by clicking the link contained in the commercial communication. Consent once given may be withdrawn at any time; withdrawal of consent does not affect the lawfulness of processing carried out before it was withdrawn.

4. Personal data is processed by my čtyři s.r.o. as the controller of personal data. Personal data is also processed on behalf of this controller by the following processors:

  • - Shopify Inc., with registered office at 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada - operation of the online store;
  • - Zásilkovna s.r.o., with registered office at Lihovarská 1060/12, 190 00 Prague 9, Company ID No. 28408306 - delivery of shipments;
  • - PPL CZ s.r.o., with registered office at K Borovému 99, Jažlovice, 251 01 Říčany, Company ID No. 25194798 - delivery of shipments.

Further processors involved in the processing of cookies are listed in Article 7.

5. Some of the processors listed above, as well as the processors listed in Article 7, are established outside the European Union. Personal data is transferred to these countries under the following conditions:

  • - Canada (Shopify Inc.) - on the basis of the European Commission's adequacy decision covering commercial organisations subject to the Canadian PIPEDA legislation;
  • - United States of America (Google LLC, Meta Platforms, Inc.) - on the basis of the European Commission's adequacy decision under the EU-U.S. Data Privacy Framework, or on the basis of Standard Contractual Clauses approved by the European Commission.

We do not transfer personal data to any other third countries.

6. The Controller has not appointed a Data Protection Officer. The Controller may be contacted at the e-mail address ahoj@ohyby.com.

7. The controller of personal data, as the operator of the website www.ohyby.com, uses cookies and similar technologies on this website.

Cookies are short text files which a website stores on the visitor's device and which the internet browser provides back to the website each time the user returns to it.

We use cookies in the following categories:

  • - strictly necessary (technical) - these ensure the basic functionality of the website, for example the contents of the shopping cart, the checkout process and security. The website cannot function properly without them;
  • - analytics - these serve to measure website traffic and to compile statistics concerning traffic and the behaviour of visitors on the website. This data is assessed in aggregate and anonymised form which does not allow an individual to be identified;
  • - marketing - these enable advertising to be targeted and its effectiveness to be measured, both on our website and beyond it.

Strictly necessary cookies are stored on the basis of the Controller's legitimate interest under Article 6(1)(f) of the Regulation.

Analytics and marketing cookies are stored solely on the basis of your consent under Article 6(1)(a) of the Regulation and Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications. You give this consent through the banner displayed on your first visit to the website.

Consent is voluntary and may be withdrawn, or its scope changed, at any time in the cookie settings on our website. Withdrawal of consent does not affect the lawfulness of processing carried out before it was withdrawn.

You may also manage the storage of cookies in the settings of your internet browser (Google Chrome, Mozilla Firefox, Safari, Microsoft Edge and others), where individual cookies can be deleted, blocked or disabled entirely, or blocked or permitted for selected websites only. For more detailed information, please consult your browser's help section. Please note that blocking strictly necessary cookies may limit the functionality of the website.

The cookies collected may be processed by the following further processors:

  • - Google LLC, with registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA - the Google Analytics service;
  • - Meta Platforms Ireland Limited, with registered office at Merrion Road, Dublin 4, D04 X2K5, Ireland - Meta advertising tools;

8. Please note that, under the Regulation, you have the right:

  • - to withdraw at any time any consent given to the processing of personal data,
  • - to stop the sending of commercial communications at any time,
  • - to object to processing carried out on the basis of the Controller's legitimate interest,
  • - to request information from us as to which of your personal data we process,
  • - to request access to this data from us and to have it updated or corrected, or to request restriction of processing,
  • - to request erasure of this personal data from us; we will carry out the erasure provided that doing so does not conflict with applicable legal regulations or the legitimate interests of the Controller,
  • - to data portability, where the processing is automated and based on consent or on the performance of a contract,
  • - to request a copy of the personal data processed,
  • - to an effective judicial remedy, where you consider that your rights under the Regulation have been infringed as a result of your personal data being processed contrary to the Regulation,
  • - to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).