Privacy Policy

Privacy Policy

Personal Data Protection Policy

applicable to customers of the e-shop www.oxobubble.cz

I. Basic provisions

Personal data controller:
Puffbox s.r.o.
Vzdálená 327/19, Březiněves, 182 00 Prague
Company ID: 19737955 | VAT ID: CZ19737955

Delivery address:
Vzdálená 327/19, Březiněves, 182 00 Prague

Contact e-mail:
info@oxobubble.cz

Personal data means any information relating to an identified or identifiable natural person.
An identifiable person is anyone who can be identified directly or indirectly (e.g. by name, number, address, IP address).

The controller has not appointed a Data Protection Officer, as this is not required under Article 37 of the GDPR.

---

II. Sources and categories of processed personal data

The controller processes personal data that you have provided or that were obtained during the fulfillment of your order.

Processed data include:

• Identification data (first name, last name)

• Contact data (e-mail, phone number, address)

• Data necessary for contract performance (e.g. billing details)

III. Legal basis and purpose of processing

The legal grounds for processing personal data are in particular:

• performance of a contract between you and the controller (Art. 6(1)(b) GDPR)

• legitimate interest of the controller in direct marketing (Art. 6(1)(f) GDPR)

• your consent to processing for direct marketing purposes (Art. 6(1)(a) GDPR)

Purposes of processing:

• processing your order and exercising rights and obligations arising from the contract,

• sending commercial communications and marketing offers,

• optimization of the user experience (e.g. storing the preferred currency).

By entering your data in the order form, you consent to their processing for the above purposes.

The controller does not carry out automated individual decision-making or profiling within the meaning of Article 22 GDPR.

Cookies & currency:
By using the website, you agree that your IP address may be processed by a third party in order to display prices in your local currency. This currency preference is stored in a temporary cookie, which is deleted when the browser is closed.

---

IV. Data retention period

Personal data are stored:

• for the duration of the contractual relationship and subsequently for 10 years after its termination for legal claims,

• for the duration of the consent, up to a maximum of 15 years, if the data are processed on the basis of consent.

After the expiration of these periods, the data are securely deleted.

V. Recipients of personal data

Recipients of personal data are persons and companies involved in:

• delivery of goods and services (e.g. carriers: Czech Post, PPL, Zásilkovna),

• operation of the e-shop (Shopify, web hosting),

• provision of marketing services (e.g. Google, Facebook, MailChimp).

The controller may transfer personal data to third countries outside the EU only if legal conditions are met (Standard Contractual Clauses).

VI. Your rights

Under the GDPR, you have the right to:

• access your personal data (Art. 15 GDPR),

• rectification and restriction of processing (Art. 16, 18 GDPR),

• erasure of personal data (Art. 17 GDPR),

• object to processing (Art. 21 GDPR),

• data portability (Art. 20 GDPR),

• withdraw consent at any time by e-mail or in writing.

If you believe that your rights have been violated, you have the right to lodge a complaint with the Office for Personal Data Protection.

---

VII. Security of personal data

The controller has adopted all appropriate technical and organizational measures to secure personal data.
Data are stored on secure servers and, in the case of paper documents, in locked premises.
Access is granted only to authorized persons who are bound by confidentiality.

VIII. Final provisions

By submitting an order, you confirm that you have read these conditions and accept them in full.
Consent to personal data processing is granted voluntarily by checking the relevant box in the order form.

The controller reserves the right to update these conditions.
The current version will always be available on the website; in the event of significant changes, you will be informed by e-mail.

Applicable to customers of the e-shop www.oxobubble.cz