Rules for processing personal data
1. Operator
Company:
TOMECOLLECTION CZ s.r.o.
Tábor 534/50 d, Ponava
602 00 Brno 2 – Královo Pole, Czech Republic
ID No.: 023 11 631.
Registered in the Commercial Register maintained by the Regional Court in Brno, Section C, File 146072/KSBR
(hereinafter referred to as the "controller") processes, within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation"), repealing Directive 95/46/EC (General Data Protection Regulation), effective from May 25, 2018, the personal data listed below.
2. Processing of personal data
According to the regulation, personal data means any information relating to an identified or identifiable individual. Personal data is processed for the purposes of registration, purchasing through the online store, and exercising the rights and obligations between you and TOMECOLLECTION CZ s.r.o. The following personal data is processed: first name, last name, telephone number, email address, permanent address, mailing address, delivery address, login details, bank details.
Some personal data, such as IP address, date and time of access to our website, information about the internet browser used, operating system, language settings, are processed automatically and are anonymous – it is therefore not possible to identify anyone based on this data.
3. Purpose and duration of personal data processing
We process your personal data for the following reasons:
Website visitors
- Keeping statistics, displaying advertisements for our products – in order to improve our services and focus on what really interests you; offering you similar products that best meet your needs, based on your visits to our website
- Sending responses to questions from website visitors
If you have visited our website and sent us a question about a product, our company's activities, or other matters, this personal data will be stored for a period of 1 year. Visitor data is processed for statistical purposes for a period of 5 years.
Newsletter subscribers
- Sending commercial offers and news by email, social media, messages, or telemarketing
If you have subscribed to our newsletter, we will process your personal data until you withdraw your consent or unsubscribe from the newsletter.
Customers
- Fulfillment and execution of contracts concluded with customers (in the case of e-shops, also contracts concluded remotely)
- Enforcement of claims arising from contractual relationships even after the termination of contracts – for the purpose of enforcing the right to collect receivables, compensation for damages, and other claims that may arise from the contractual relationship
- Fulfilling our obligations in the area of accounting and tax obligations – for the purpose of complying with regulations such as the Accounting Act and the VAT Act
- Sending commercial offers, professional information and reports, marketing materials, offers of goods and special promotions – for the purpose of offering similar goods to those in which you expressed interest during the term of the contractual relationship and after its termination, and communicating information relating to products of a similar character
We process personal data for the entire duration of our contractual relationship with you. If you have given us your consent to process your personal data, your data will be processed until you revoke this consent.
Accounting data - we are required by law to retain this personal data for a period of 10 years from the end of the tax period in which the service was provided to the customer, regardless of prior consent. Data used to fulfill obligations arising from a contractual relationship will be retained for a period of 10 years, regardless of prior consent.
Persons who have given their consent to the processing of data outside the website (surveys, questionnaires, marketing campaigns, personal meetings, exhibitions, etc.)
- Marketing offers – for the purpose of contacting persons with product offers
- Email correspondence – for the purpose of processing questions or requests
- Telecommunications, applications, messages – for the purpose of sending offers
- Creating an account on the website – for the purpose of providing price offers and enabling access to e-shop features
Personal data obtained through marketing campaigns, personal meetings, exhibitions, or other similar means is kept on file for 10 years or until consent to the processing of personal data is revoked.
4. Legal basis for personal data processing:
The legal basis for personal data processing may be:
- Consent to personal data processing – obtained electronically or in another form, by registering for a newsletter, filling out a questionnaire, survey, personal meeting with consent to be contacted, provision of consent to a third party who is our contractual partner and who has provided us with your personal data with your permission, consent obtained by telecommunications means, creation of a customer account on our website, contacting our company
- Legitimate interest of our company – in the context of providing and offering products that meet your needs, based on your visit to our website or mutual business relationship, based on previous purchases or in the context of improving our services and focus, the right to enforce claims, compensation for damages and other claims that may arise from the contractual relationship
- Legal and contractual obligations – obligations imposed by legal regulations such as the Accounting Act, VAT Act, fulfillment of contractual obligations
5. List of our intermediaries and recipients who process your personal data
The operator is entitled to provide your personal data in certain cases to contractual partners or third parties.
Your personal data may be provided to the following categories of intermediaries:
a) a supplier providing technical solutions, web hosting services, maintenance, and support for IT systems used by the Controller,
b) a supplier providing services in the area of accounting, payroll, and tax obligations of the Operator,
c) a courier or transport company that delivers goods to customers
d) a supplier providing marketing services
e) state authorities
f) an external tool for email communication
Provision of personal data outside the European Union
We use Google Analytics 4 + Enhance Ecommerce analytics tools on our website. This application is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as Google). This service is used to track website traffic, detect problems on the website, track purchases, and evaluate customer behavior on our website.
6. Rights in relation to the processing of personal data
Right of access to personal data
You have the right to request access to personal data concerning you from us. In particular, you have the right to obtain confirmation from us as to whether or not we are processing personal data concerning you, as well as to obtain further information about the data being processed and the manner of processing within the meaning of the relevant provisions of the GDPR (purpose of processing, categories of personal data, recipients, planned storage period, existence of your right to request rectification, erasure, restriction of processing or the right to object, source of personal data, and right to lodge a complaint). Upon request, we will provide you with a copy of the personal data we process about you free of charge. In the event of repeated requests, we may charge a reasonable fee corresponding to the administrative costs of processing.
Right to withdraw consent to the processing of personal data if the processing is based on consent
You have the right to withdraw your consent to the processing of personal data that we process on the basis of this consent at any time.
Right to rectification, restriction, or erasure
If you find that the personal data we hold about you is inaccurate, you may request that we rectify it without undue delay. If appropriate in the specific circumstances of the case, you may also request that we supplement the data we hold about you.
Right to erasure of personal data
You have the right to request that we erase personal data concerning you that we process without undue delay in the following cases:
• If you withdraw your consent to the processing of personal data and there is no other legitimate reason on our part for processing that would override your right to erasure;
• if you object to the processing of personal data (see below);
• your personal data is no longer necessary for the purposes for which we collected or otherwise processed it;
• personal data has been processed by us unlawfully;
• the personal data was collected by us in connection with the provision of information society services to a person under the age of 18;
• the personal data must be erased in order to comply with a legal obligation under European Union law or Czech law that applies to us.
The right to request the erasure of personal data does not apply in situations where processing is necessary
• for the exercise of the right of freedom of expression and information;
• for compliance with our legal obligations;
• for reasons of public interest in the area of public health;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, insofar as the erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing;
• for the establishment, exercise, or defense of legal claims.
Right to restrict the processing of personal data
You have the right to restrict the processing of your personal data in cases where:
• You contest the accuracy of the personal data. In this case, the restriction applies for the period necessary for us to verify the accuracy of the personal data.
• The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
• We no longer need your personal data for the purposes for which we processed it, but you require it for the establishment, exercise, or defense of legal claims;
• You object to the processing (see below). In this case, the restriction applies until it is verified whether our legitimate reasons outweigh your legitimate reasons.
Right to object to processing
You have the right to object to the processing of your personal data in the following cases:
• If personal data is processed for reasons where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us or for the purposes of our legitimate interests, and you object to the processing, we may no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of our legal claims.
• If personal data is processed for direct marketing purposes and you object to the processing, we will no longer process the personal data for these purposes.
• If your personal data is processed for scientific or historical research purposes or for statistical purposes, we will not further process it unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Right to data portability
If we process your personal data on the basis of your consent or because it is necessary for the performance of a contract between us, you have the right to obtain from us the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, if such personal data is processed by us. You have the right to transfer this data to another data controller or to request that we provide this data directly to another data controller, if technically feasible. You can obtain your personal data through your user account or the contacts listed in this policy.
Right not to be subject to any decision based solely on automated processing, including profiling
We do not use personal data for automated decision-making.
Right to obtain information about a breach of your personal data security
If a breach of our security is likely to result in a high risk to your rights and freedoms, we will notify you of this breach without undue delay. If appropriate technical or organizational measures have been used to process your personal data, ensuring, for example, that it is unintelligible to unauthorized persons, or if we take additional measures to ensure that the high risk does not materialize, we do not have to provide you with information about the breach.
Right to lodge a complaint
If you believe that the processing of your personal data violates the obligations set out in the GDPR, you have the right to lodge a complaint with the supervisory authority. The supervisory authority in the Czech Republic is the Office for Personal Data Protection. If you are considering lodging a complaint, we would appreciate it if you would first contact us via the contact details on our website.
7. Obligations of the persons concerned
a) the customer is obliged to provide only complete and true information,
b) the customer undertakes to update their information in the event of a change, at the latest before placing the first order following the change,
c) the customer is aware that if they provide the personal data of a third party (name, surname, telephone number), they do so only with that party's consent.
You can exercise your rights as a data subject:
- in writing to the address: TOMECOLLECTION CZ s.r.o. Tábor 534/50d, Ponava, 602 00 Brno 2 – Královo Pole, Czech Republic;
- by telephone at +420 777 724 407 or
- by email at: info@srpyro.com
8. Disclosure of data
The operator does not disclose the data obtained under any circumstances.
9. Information regarding accidentally provided personal data
We do not systematically process any accidentally obtained personal data for any purpose defined by us under any circumstances. If possible, we will inform you of its accidental acquisition and, depending on the nature of the case, provide you with the necessary assistance to restore control over your personal data. Immediately after these necessary steps to resolve the situation, we will promptly destroy all accidentally acquired personal data in a secure manner.
10. Cookies
Cookies are small text files that may be sent to your web browser when you visit a website and stored on your device (computer or other device with internet access, such as a smartphone or tablet). Cookies are stored in your web browser's file folder. Cookies usually contain the name of the website they come from and the date they were created. The next time you visit the site, your web browser reloads the cookies and sends this information back to the website that originally created the cookie.
Prior consent is always required for the processing of cookies, and this consent must contain the essentials of consent in accordance with the GDPR. You give this consent on your first visit to our website in the so-called cookie banner (cookie bar). The only exception where consent is not required is in the case of processing so-called functional cookies (or technical cookies), which are necessary for the proper functioning of the website itself. Consent to the processing of cookies is archived. Every data subject has the right to withdraw their consent at any time.
11. Website security
Our website uses SSL encryption for all user connections and data transfers, which prevents third parties from accessing or modifying data during its transmission over the internet. Databases containing personal data are protected by encryption and non-public access data in accordance with the latest technical standards.
The laws and related methods of processing your personal data may change. If we decide to update these rules, we will post the changes on our website and inform you of these changes. In cases where there is a significant change to these rules, we will inform you in advance. We therefore ask you to read these rules carefully and to check them regularly when communicating with us.
Updated:
on 01.09.2025