Privacy Policy

1. Data controller

EVOLUTION SERVICE s.r.o., Václavské náměstí 2132/47, Nové Město, 110 00 Praha 1, Czech Republic (IČO: 174 32 626), is the data controller of your personal data. Our Data Protection Officer can be reached at dpo@public-demo.cy.

2. Data we collect

• Identity and contact: name, e-mail, phone number, delivery and billing address.
• Order data: products purchased, payment method (not full card numbers), returns and warranty claims.
• Account data: login details, favourites and preferences.
• Technical data: IP address, device and browser type, cookies and pages visited.
• Communications: messages to Customer Care and survey responses.

3. Why we use your data and legal bases

• To process and deliver orders — performance of a contract (Art. 6(1)(b)).
• To meet tax, accounting and warranty obligations — legal obligation (Art. 6(1)(c)).
• To prevent fraud and secure our website — legitimate interests (Art. 6(1)(f)).
• To send newsletters and personalised offers — your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Cookies

We use strictly necessary cookies to run the cart and checkout. Analytics and marketing cookies are only set with your consent, which you can change at any time from the cookie settings link in the footer.

5. Sharing your data

We never sell your data. We share it only with:

• couriers and postal services, to deliver your order;
• payment providers and banks, to process payments;
• manufacturers and authorised service centres, for warranty repairs;
• IT and hosting providers bound by data processing agreements;
• public authorities where required by law.

Transfers outside the EEA are protected by Standard Contractual Clauses or an adequacy decision.

6. How long we keep data

• Order and invoice records: 7 years (tax law).
• Account data: until you close your account, plus 12 months.
• Marketing consent: until you withdraw it.
• CCTV in stores: up to 30 days.

7. Your GDPR rights

You have the right to:

• access a copy of your personal data;
• correct inaccurate data;
• request erasure ("right to be forgotten");
• restrict or object to processing, including direct marketing;
• data portability in a machine-readable format;
• withdraw consent at any time.

We respond within one month. You may also complain to the Czech Office for Personal Data Protection (ÚOOÚ, www.uoou.cz) or the data protection authority in your country.

8. Security

We use encryption (TLS), access controls, regular security testing and staff training to protect your data. If a breach affects your rights, we will notify you and the authority as required by law.

9. Changes to this policy

We may update this policy from time to time. Significant changes will be announced on the website or by e-mail.