Privacy Policy
1. Introductory Provisions and Definition of Terms
1.1. The operator of the online store at (hereinafter referred to as the "E-shop") is Czech Figure Skating s.r.o., Company Reg. No. (IČO): 04334434, registered in the Commercial Register maintained by the Municipal Court in Prague under file No. C 246058, with its registered office at Lihovarská 1060/12, Libeň, 190 00 Praha 9 (hereinafter referred to as the "Seller").
1.2. The Seller can only effectively operate the E-shop if it processes the personal data listed below, which relates to natural persons shopping in the E-shop or natural persons representing a legal entity when shopping in the E-shop (all such natural persons collectively referred to as the "Buyer").
1.3. To fulfil their legal obligation to provide information under data protection laws, the Seller shall supply basic information (hereinafter referred to as "Information") regarding the processing of Buyers' personal data by the Seller as the data controller.
1.4. The Buyer can exercise their rights under personal data protection laws or ask questions, make requests, or raise objections regarding the manner in which their personal data is handled by contacting the Seller either via email at the Seller's email address eshop@prague2026.org or by a written request to the Seller's registered office.
1.5. When processing personal data, the Seller follows their statutory obligations, in particular:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "GDPR"), and
- Generally binding legal regulations of the Czech Republic relating to the protection of personal data (in particular Act No. 110/2019 Coll., on the processing of personal data).
1.6. Definition of terms – for the purposes of this Policy, the following definitions apply:
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the "Data Subject"); an identifiable natural person is someone who can be identified, directly or indirectly, primarily through identifiers such as a name, surname, identification number, location data, network identifier, or other factors specific to that person's physical or other identity.
Processing means any operation or set of operations that are performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction;
Controller is the Seller as the person who, alone or jointly with others, determines the purposes and means of processing personal data;
Processor is the Seller, as the person who processes personal data in connection with the operation of the E-shop, and the company Ellipse CZ s.r.o., Horní Jasenka 162, 755 01 Vsetín, IČ 25886525 as the eshop Controller, and the company Shoptet s.r.o. Dvořeckého 628, 169 00 Prague 6, Czech Republic, Company Reg. No. (IČO): 28935675, VAT ID: CZ28935675, as the operator of the internet application Shoptet.cz, Direct Parcel Distribution CZ s. r. o., Modletice 135, 251 01 Říčany u Prahy, Company Reg. No. (IČO): 61329266 as the parcel carrier, and Comgate a.s., Gočárova třída 1754 / 48b, 500 02 Hradec Králové, Company Reg. No. (IČO): 279 24 505 as the online payment provider.
Processing by any other processor is also subject to an agreement made in accordance with Article 28 of the GDPR.
Recipient is a natural or legal person to whom personal data is disclosed, for example, in connection with fulfilling contractual obligations (especially the carrier).
1.7. The Seller processes personal data manually and automatically (using computer technology) and in paper and electronic form, depending on the nature of the specific processing activity.
1.8. The Seller is not currently required to appoint a data protection officer and has not done so voluntarily.
2. Categories of Personal Data, Method and Purpose of Processing
2.1. The Seller collects personal data from the Buyer when the Buyer places an order in the E-shop. Sometimes, the Seller may also obtain data from public sources such as public registers, lists, or records accessible through public administration.
2.2. Personal data is processed by the Seller only for the purpose of operating the E-shop. Without this processing, the operation of the E-Shop would not be feasible. The Seller emphasizes that personal data is handled solely to comply with legal obligations under specific legislation (such as accounting and taxation) or to fulfill the purchase contract concluded with the Buyer.
2.3. The Seller processes the following categories of personal data belonging to Buyers:
Address and identification data: in particular, name and surname, company name, e-mail address, telephone number, Company Registration number (IČO), and, where applicable, VAT number, or information about registration in the commercial or trade register, address of residence or registered office, or delivery address, any mutual communication, IP address, cookies;
Descriptive data: in particular, bank details;
Other data: in particular, data on ordered goods, order date, order number, prices of goods, due date for payment of ordered goods, data on payments made, notifications made (order confirmation, information on movement of goods), description of goods delivered and their quantity, delivery, possible withdrawal from the contract, complaints, and mutual communication.
2.4. If the Buyer provides their consent when placing the order, the Seller also processes the Buyer's personal data for the purpose of sending commercial communications. The Buyer can revoke this consent at any time by notifying the Seller.
2.5. The Seller declares that all personal data processed is protected with an appropriate level of security based on the nature of the data and is accessible only to specifically designated and trained individuals within the Seller's operations. All communication between the Seller's web server and the data subject's device is encrypted. The E-shop website, along with other systems used by the Seller in operating the E-shop, are protected through technical and organizational measures against unauthorized access and interference.
2.6. The Seller also points out that the website hosting the E-shop uses cookies and similar technologies.
3. Legal Basis for Processing
3.1. The Seller processes personal data only as needed and in connection with:
- Negotiating the conclusion of a purchase contract,
- Conclusion and performance of a purchase contract,
- Sending commercial communications, if the Buyer has given their consent,
- Protection of the Seller's legitimate interests, and
- Fulfilling the Seller's obligations arising from special legal regulations.
4. Period of personal data processing
4.1. The Seller processes personal data only for the period necessary to achieve the specific purpose of processing.
4.2. Personal data processed in connection with the Buyer's purchase through the E-shop is handled by the Seller for the duration of the contract with the Buyer and, after its termination, is retained in accordance with applicable legal regulations, in particular Act No. 499/2004 Coll., on Archiving and Filing Services and on Amendments to Certain Acts, as well as the GDPR.
4.3. After the period specified for processing the personal data expires, the Seller shall delete the data in a manner that prevents its recovery.
5. Data Subject Rights
5.1. In connection with the processing of their personal data, the Buyer has the following rights in particular:
Right of access to personal data: The Buyer has the right to obtain information from the Seller regarding whether the Seller processes their personal data, if so, what data is involved, and how it is processed. The Buyer also has the right to request that the Seller correct any inaccurate personal data concerning them without undue delay. The Buyer has the right to supplement incomplete personal data at any time.
Right to rectification and erasure of personal data: This right represents, in other words, the Seller's obligation to rectify or erase personal data that it processes about the Buyer, if the legal conditions are met and the Buyer requests it. The Seller shall notify individual recipients of personal data of any rectification or erasure.
The Buyer has the right to request that the Controller – the Seller – restrict the processing of their personal data in certain instances. The Buyer has the right to object at any time to processing, where such processing is based on the Seller's or a third party's legitimate interests, or where it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
Right to data portability: The Buyer has the option to obtain the personal data they have provided to the Seller in a commonly used and machine-readable format. They may then transfer this data to another controller or, if technically feasible, request that the controllers transfer it to each other.
Right to withdraw consent to the processing of personal data at any time: this applies only in relation to the sending of commercial communications; otherwise, it does not apply, as the Buyer's personal data is processed for the purpose of performing a contract concluded with the Buyer, not based on consent to processing.
If the Buyer is dissatisfied with the processing of their personal data by the Controller – the Seller - they may lodge a complaint directly with the Seller or with the Office for Personal Data Protection.
More information about the rights of the data subject is available on the website of the Office for Personal Data Protection (https://www.uoou.cz/6-prava-subjektu-udaj/d-27276).
6. Final Provisions
6.1. The Buyer is obliged to immediately inform the Seller of any change in the personal data provided to the Seller and necessary for the performance of the contract.
6.2. The Seller hereby informs that the Buyer's personal data or some of it may be made available to any of the following recipients:
- The Seller's employees and persons performing work for the Seller outside of an employment relationship;
- Persons performing work for the Seller or providing services to the Seller based on a separate contract;
- Persons managing the Seller's accounting and providing tax advice to the Seller;
- Persons providing legal services to the Seller;
- Public authorities, in cases required by law.
6.3. The Seller does not transfer the Buyer's personal data to a third country (or to a recipient in a third country) or to an international organisation.
6.4. This Policy shall enter into force on October 1st, 2025. The Seller reserves the right to modify the content of this Policy at any time, with the revised information taking effect upon its publication on the E-shop website.
6.5. The Seller is responsible for the lawfulness of the processing of personal data. The supervisory authority for the processing of personal data in the Czech Republic is the Office for Personal Data Protection (https://www.uoou.cz/).
In Prague on October 1st, 2025