This document provides information about how Idol spas s.r.o. processes and protects your personal data in connection with the operation of the website and e-shop at www.idol.cz.

This text is effective from 1. 1. 2026.

1. Personal data controller

The controller of your data is:

• Name: idol spas s.r.o.
• IČO: 04313348 | DIC: CZ04313348
• Headquarters: Čs. Armády 659, 252 26 Jílové u Prahy
• Minutes: Municipal Court in Prague, Section C, Insert 85190
• E-mail: sales@idol-spas.com
• Tel..: +420 271 750 696

2. What data do we process?

We process the data you provide to us depending on the services you use:

• Contact form: Name, surname, email address, phone number.
• Buying on the e-shop (WooCommerce): plus billing address, delivery address and order history.
• User account: login details and profile settings.
• Technical data: IP address and cookies (necessary for the functioning of the e-shop and the basket).

3. Purpose and legal basis of processing

We only use your data for lawful purposes:

1. Contract fulfilment (E-shop): for order processing, delivery of goods and complaint handling.
2. Answer to questions: for communication via the contact form (legitimate interest or contract negotiations).
3. Legal obligations: for accounting purposes and archiving of invoices according to the applicable laws of the Czech Republic.
4. Legitimate interest: to ensure the security of the website and to protect against fraud.

4. Who has access to the data?

Your data is safe with us. However, for the proper operation of the e-shop and website, we pass it on to the following partners:

• Carriers: For the purpose of delivering your orders.
• Payment providers: to process your payments securely.
• Technical administration of the site: WordPress/WooCommerce system administrators and hosting providers.
• Accounting services: for the legal processing of invoicing.
• Note: We do not sell your data to third parties for marketing purposes.

5. Data retention period

• Form data: for a maximum of 2 years after the enquiry has been processed, unless an order is placed.
• Order data (invoices): by law for 10 years.
• User account: until you decide to delete your account.

6. Your rights

According to the GDPR, you have the right to:

• To access and correct your data.
• To delete the data (if they are no longer needed for the performance of the contract or for legal purposes).
• Object to processing.
• On data portability.
• File a complaint with the Office for Personal Data Protection (www.uoou.cz).

7. Data security

Your purchase and communications are protected by HTTPS encryption. We use modern WordPress and WooCommerce technical standards to prevent unauthorized access to your personal information.