Effective from the date of publication on www.pcpraha.cz. This policy explains how we process the personal data of customers and visitors of the pcpraha.cz online shop and the PC Praha shop in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on the processing of personal data.
1. Controller
The controller of personal data is Kentino s.r.o., IČO 05066743, registered office Čestmírova 1358/25, 140 00 Praha 4, registered with the Municipal Court in Prague, section C, file 257790 (“we”).
Contact for questions about personal data: email info@pcpraha.cz, phone +420 792 480 835, shop address Rostovská 260/2b, 101 00 Praha 10 – Vršovice.
2. What data we process, why and for how long
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Processing orders, delivery, payment, customer account | name, address, email, phone, for businesses company ID/VAT number, order contents, payment details (we do not see the card number – it is processed by the payment gateway) | performance of a contract (Art. 6(1)(b) GDPR) | for the duration of the contract; the account until it is closed |
| Claims, returns, servicing and repairs | identification and contact details, description of the fault, device details (e.g. serial number), communication | performance of a contract and legal obligation | until resolved and thereafter as for the protection of claims |
| Accounting and taxes | data on invoices and documents | legal obligation (Accounting Act, VAT Act) | 10 years from the end of the year in which the document was issued |
| Protection of our legal claims | order data, communication, claims | legitimate interest (Art. 6(1)(f) GDPR) | for the limitation period (usually 3 years) plus 1 year after it expires; in the event of a dispute until it ends |
| Replying to an enquiry (contact form, email, chat, phone) | name, contact details, content of the message | legitimate interest in replying; where it concerns an order, performance of a contract | for the time necessary to deal with the enquiry and follow-up communication |
| Job applications (Careers) | name, contact details, CV and other data you send us (e.g. to kariera@pcpraha.cz) | steps prior to entering into a contract; longer retention only with your consent | until the end of the selection process; with your consent for the period stated in it |
| Newsletter and marketing communications | email, possibly name | your consent (Art. 6(1)(a) GDPR) | until consent is withdrawn |
| Operation and security of the website, statistics and marketing using cookies | IP address, device and browser data, behaviour on the website | necessary cookies: legitimate interest; statistics and marketing cookies: your consent | depending on the type of cookie, see Article 5 |
| Cryptocurrency exchange (Bitcoin ATM, P2P exchange) – customer identification and due diligence where required by law | data required by law (e.g. from an identity document) and transaction data | legal obligation under Czech Act No. 253/2008 Coll., on anti-money laundering | for the period laid down by that Act |
Providing the data required for an order is voluntary, but without it we cannot process the order. We do not carry out automated decision-making or profiling with legal effects.
3. Who else works with the data
We only pass on as much data as necessary, to the following processors and recipients:
- Shopify – operator of the online shop platform: Shopify International Limited (Ireland) and its parent company Shopify Inc. (Canada). Data is transferred to Canada on the basis of a European Commission adequacy decision; other Shopify sub-processors outside the EU (e.g. in the USA) are bound by the EU standard contractual clauses.
- Carriers – UPS, PPL and DPD; name, address, phone and email for delivering or collecting a parcel.
- The bank where we hold our accounts (Fio banka) for bank transfers; once card payments are launched, also the Comgate payment gateway. We accept cryptocurrency payments directly to our addresses; the transaction is recorded on the public blockchain of the relevant network.
- Accountants and tax advisers, email and IT service providers.
- Analytics and advertising tools – only with your consent to cookies.
- Newsletter sending tool – only if you have subscribed.
- Public authorities, where required by law.
The hosting service is provided by a company based in the USA. If you order hosting, we pass on to it and to the data centre operator the data needed to provide the service; details are set out in the hosting terms, which you receive before entering into the contract. The PCPRAHA mobile app has its own privacy policy, which you will find with the app in the App Store.
Satisfaction questionnaire – Heureka “Ověřeno zákazníky” (Verified by Customers)
We take part in the Ověřeno zákazníky (Verified by Customers) programme operated by Heureka Group a.s., company ID (IČO) 07822774, registered office Karolinská 706/3, 186 00 Praha 8 – Karlín, Czech Republic. After you complete an order, we pass on your email address, order number and details of the goods purchased to Heureka. Heureka then sends you a questionnaire about your satisfaction with the purchase, which gives us an independent rating of our shop. The legal basis is our legitimate interest in finding out how satisfied our customers are and improving our services (Art. 6(1)(f) GDPR).
You do not have to receive the questionnaire: before completing your order, simply tick the box in the basket saying that you do not agree to receiving the satisfaction questionnaire, and we will not pass your data on to Heureka. You can also object to the transfer at any time by email at info@pcpraha.cz.
When sending the questionnaires, Heureka processes the data on our behalf; for publishing any review you submit, it is responsible as an independent controller. How long Heureka keeps the data is set out in the Heureka Group privacy policy.
We do not sell data.
4. Your rights
- Access – you can ask what data we process about you and obtain a copy.
- Rectification – we will correct inaccurate or incomplete data.
- Erasure – we will erase data if we no longer need it, if you withdraw consent or if your objection is justified; this does not apply to data we must keep by law or to protect claims.
- Restriction of processing – e.g. while we verify the accuracy of the data or your objection.
- Portability – data you have provided to us and that we process automatically on the basis of a contract or consent will be handed over to you in a machine-readable format.
- Objection – to processing based on legitimate interest. You can object to marketing communications at any time and we will stop sending them.
- Withdrawal of consent – at any time, e.g. via the link in the newsletter or in the cookie settings. Withdrawal does not affect processing carried out before it.
- Complaint to the supervisory authority – the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.
You can exercise your rights by email at info@pcpraha.cz, by post to our registered office or in person at our shop. We will reply without undue delay and within one month at the latest; in complex cases we may extend this period by a further two months and will tell you why. If we have doubts that the request comes from you, we may ask you to verify your identity.
5. Cookies
The website uses cookies and similar technologies. We always use necessary cookies (basket, login, security, remembering your consent choice) because the shop does not work without them. We only use statistics and marketing cookies with your consent.
You give, refuse or change your consent in the cookie consent banner that appears on your first visit. You can change your choice at any time – for example by deleting cookies in your browser; the banner will then appear again. You can also block cookies in your browser settings.
An overview of the cookies Shopify uses can be found in the Shopify cookie policy.
6. Security
We protect data with technical and organisational measures – an encrypted connection (HTTPS), access control to our systems and contracts with processors. Card payment data is processed by a certified payment gateway; we have no access to it.
7. Changes to this policy
We may update this policy, for example when introducing a new tool. The current version is always available on this page.