Privacy Policy
Privacy Policy
The controller of your personal data is Barbora Pulpánová, Company ID 04405668, VAT ID CZ9156082727, with registered office at Duhová 787, 463 42 Hodkovice nad Mohelkou, Czech Republic (“we”, “us” or the “Controller”).
We operate the online store www.sweetenergy.cz. In connection with its operation, order fulfilment, communication, marketing and other functions, we process certain personal data.
Contact for personal data protection matters: info@sweetenergy.cz. We have not appointed a Data Protection Officer because, given the scope and nature of our processing, applicable law does not require us to do so.
We process personal data primarily in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”), Czech Act No. 110/2019 Coll. on Personal Data Processing, Act No. 480/2004 Coll. on Certain Information Society Services, and, in relation to cookies, also Act No. 127/2005 Coll. on Electronic Communications.
1. What personal data we process and why
Orders and performance of the purchase contract
If you purchase from us, we process the data necessary to accept, process and deliver your Order, in particular your first and last name, billing and delivery address, email, telephone number, information about the Goods ordered, payment, delivery and related communication.
Purpose: processing the order, delivery of goods, communication regarding the order, handling complaints, returns or exchanges.
Legal basis: Article 6(1)(b) GDPR – performance of a contract; for accounting, tax and other statutory obligations, also Article 6(1)(c) GDPR.
Retention period: data required for the contractual relationship is retained for the duration of that relationship and subsequently for the period necessary to protect our legal claims. Tax documents are retained for the period required by law, generally 10 years from the end of the relevant tax period.
Enquiries, contact forms and advice
If you contact us by email, telephone or through a form, we process the information you provide to us. This may include your name, email, telephone number and the content of your enquiry. When advising on size selection, it may also include information about your dog, its measurements or a photograph that you voluntarily send to us.
Legal basis: depending on the nature of the enquiry, Article 6(1)(b) GDPR – steps taken prior to entering into a contract or performance of a contract; for ordinary communication and protection of legal claims, also our legitimate interest under Article 6(1)(f) GDPR.
Retention period: for as long as necessary to handle the communication and subsequently for as long as it may be required to protect legal claims; where there is no reason for longer retention, generally no more than 3 years from the last communication.
User account
If you create a customer account, we process registration, contact and order data necessary to operate the account, manage saved information and display your order history.
Legal basis: Article 6(1)(b) GDPR – providing account functions at your request.
Retention period: for the lifetime of the account; certain order-related data may be retained for longer due to statutory obligations or the protection of legal claims.
Newsletters and marketing communications
If you subscribe to our newsletter, we process primarily your email address, and where applicable your name and information about interactions with messages, so that we can send the newsletter and evaluate its performance.
For persons subscribed on the basis of an opt-in, the legal basis is consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time.
If you are our customer, under the conditions of Section 7(3) of Czech Act No. 480/2004 Coll., we may send you offers for our own similar products or services without separate marketing consent if you have not opted out. The related processing is based on our legitimate interest in direct marketing under Article 6(1)(f) GDPR.
Every marketing communication contains an easy way to unsubscribe. You may object to processing for direct marketing at any time; after that, we will no longer send you marketing communications.
Retention period: until unsubscribing, withdrawal of consent or objection, but no longer than 5 years from your last purchase or other active interaction, unless a new legal basis for processing arises in the meantime.
Dog profile and personalised recommendations
If you voluntarily provide information about your dog, such as its name, breed, age, size, measurements or other information related to product selection, we may connect it with your customer profile and use it to provide more relevant product and content recommendations.
Information about an animal is not in itself personal data under the GDPR, but it may become personal data to the extent that it is linked to an identified or identifiable person.
Legal basis: your consent under Article 6(1)(a) GDPR.
Retention period: until consent is withdrawn or the customer profile is deleted, but no longer than 5 years from the last active interaction, unless another legal basis applies.
Customer Gallery, photographs, comments and ratings
If you voluntarily submit a photograph, text, rating or other content intended for publication through the Customer Gallery or by another method, we process the information you provide in connection with that submission. This may include your name or nickname, email address, information about your dog, a photograph and the text of the contribution.
Purpose: administration of the contribution, possible publication on the SweetEnergy website, content moderation and management of the Customer Gallery.
Legal basis: for publication of content, your consent under Article 6(1)(a) GDPR; for necessary administration, abuse prevention and protection of our rights, also our legitimate interest under Article 6(1)(f) GDPR.
You may withdraw your consent to publication at any time by contacting info@sweetenergy.cz. After withdrawal, we will remove the published content unless another legal basis requires or permits us to retain it.
Analytics, advertising and traffic measurement
If you give consent through our cookie banner, we may use analytics and marketing technologies to measure traffic, evaluate campaigns, personalise advertising and better understand how the online store is used.
Depending on the current configuration, this may include services provided by Google, Seznam.cz and Meta.
Legal basis: your consent under Article 6(1)(a) GDPR and consent to storing or accessing information on your terminal equipment under Section 89(3) of Czech Act No. 127/2005 Coll.
You may change or withdraw your consent at any time through the cookie settings on our website.
Protection of our rights, security and prevention of misuse
To the extent necessary, we may also process certain data to protect our legal claims, prevent fraud, secure the online store and resolve disputes.
Legal basis: our legitimate interest under Article 6(1)(f) GDPR.
2. Who may have access to personal data
We disclose personal data only to the extent necessary for the relevant purpose. In addition to us, the following recipients or categories of processors may have access:
Carriers and payment service providers may also act as independent controllers within the scope of their own services. The specific recipient depends on the delivery method, payment method and online store functions you use.
3. Transfers outside the European Economic Area
Some providers of technology, analytics or advertising services may process personal data outside the European Union and the European Economic Area, in particular in the United States of America.
Where such transfers take place, we use, or rely on our service providers to use, lawful transfer mechanisms under the GDPR, especially European Commission adequacy decisions, including the EU–US Data Privacy Framework where the recipient is duly certified, or Standard Contractual Clauses approved by the European Commission together with any additional safeguards that may be required.
4. Cookies and similar technologies
Cookies are small data files or similar technologies that may be stored on your device or accessed from your device when you use the website.
Strictly necessary cookies
These are required for the basic operation of the online store, for example for the shopping cart, security, login or correct display of pages. Consent is not required where these technologies are genuinely necessary for a service you have requested.
Analytics and statistical cookies
These help us understand how visitors use the online store, measure traffic and improve its operation. We activate them only on the basis of your prior consent.
Marketing and personalisation cookies
These may be used to evaluate advertising campaigns, create audiences, personalise advertising and display content that may better match your interests. We activate them only on the basis of your prior consent.
The current list of cookies in use, their providers, purposes and retention periods can be found directly in the cookie settings on our website. This is more accurate than maintaining a fixed list in this Policy, because the technologies we use may change over time.
You may refuse optional cookies or change your choices at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Automated decision-making and profiling
We do not carry out automated individual decision-making based solely on automated processing that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.
If you have given the relevant consent, marketing and analytics tools may use information about your visits, purchases or interests for segmentation and personalisation of content or advertising. We do not use such profiling by itself to make decisions with legal or similarly significant effects.
6. Your rights
Depending on the circumstances, you have in particular the following rights in connection with the processing of your personal data:
you may ask whether we process your personal data and obtain access to it.
you may request correction of inaccurate data or completion of incomplete data.
under the conditions of the GDPR, you may request deletion of personal data.
in cases provided for by the GDPR, you may request temporary restriction of processing.
for certain data processed automatically on the basis of consent or a contract, you may request provision in a structured format.
in particular to processing based on legitimate interests; you may object to direct marketing at any time.
where processing is based on consent, you may withdraw it at any time.
you may contact the Czech Office for Personal Data Protection.
You may exercise your rights by contacting info@sweetenergy.cz. We will respond without undue delay and no later than within the time limits laid down by the GDPR.
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
Web: uoou.gov.cz
7. Security of personal data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. Access is limited to persons and service providers who need it to perform their tasks and who are subject to appropriate confidentiality and data protection obligations.
8. Changes to this Policy
We may update this Policy from time to time, particularly if the services we use, applicable law or our processing practices change. The current version is always published on this page.