Personal information and policy protection of personal data (GDPR)

The operator of as a Personal Data Administrator hereby informs you of the manner and scope of processing of Personal Data, including the extent of the Rights of the Customer/Subscriber related to the processing of his Personal Data.

  1. Introductory provisions
  2. The purpose and timing of process of personal data
  3. Protection of personal Data Privacy and processing information
  4. Participant's rights related to the processingÚčastníka související se zpracováním
  5. Final Provisions

1. Introductory provisions

1.1   For the purposes of this Principle, it is understood that:

The operator is  Locksmith Service s.r.o., Company ID 021 55 052, with registered office at Luční 857, 356 01 Sokolov (Czech Republic).

Personal information is the name and surname, business name, e-mail address, telephone number, billing address, delivery address, IP address, cookies, business ID and business tax identification number of the physical person doing business as, and information of a person reaching the age of 16.

1.2   The operator of the e-shop, as a Personal Data Administrator, hereby informs you about the manner and scope of Personal Data Processing, including the extent of the Rights of the Subscriber related to the processing of his Personal Data.

1.3   The operator shall process the personal data in accordance with the following legal regulations:

  • Personal Data Protection Act No. 101/2000 Coll.,
  • Regulation (EU) 2016/679 of the European Parliament and of the Council (hereafter "the Regulation"),
  • The policy about some services of Information companies No. 480/2004 Coll.,
  • Act No. 563/1991 Coll., On Accounting, as later amended, Act No. 89/2012 Coll., The Civil Code, Act No. 634/1992 Coll., On Consumer Protection, as the case may be, in accordance with other legal regulations.

1.4   A participant is a physical person, both business and non-business, who buys from the Operator Goods and Services.

1.5   The operator is a legal entity that operates this online shop for the purpose of selling goods to the end customer. In connection with the foregoing, Personal Data is processed to the extent it was provided in connection with the ordering of the Products and / or Services from Operator, respectively. In the negotiation of the conclusion of a contract with the Operator, as well as in connection with the concluded contract for the purpose (s) specified in Article 2 below.

2. The purpose and timing of process of personal data

2.1   The Operator processes Personal Data for the following purposes:

a)   Fulfilling of the contract or of any other obligation and provision of services:

  • Personal data will be processed during negotiations for the conclusion of a contract between the Operator and the Participant for the purpose of concluding the contract as well as for the duration of the contractual relationship.
  • Marketing reasons for the purposes of marketing action, evaluation, termination, delivery of eventual winnings, etc. Processing time: during the marketing event.

b)   Fulfillment of legal obligations (in particular accounting, tax and archiving, provision of cooperation with administrative authorities, police, courts, etc.):

  • The tax document will be retained for 10 years after the contract expires. In order to fulfill the statutory obligation to archive accounting documents pursuant to Act No. 563/1991 Coll. On Accounting, as amended, Personal Data will be further processed and kept for 10 years starting from the year and following the year in which the contract was concluded between Operator and Subscriber.
  • Fulfillment of duties in connection with the exercise of rights of defective fulfilment, provision of cooperation to administrative authorities, police, court: The operator is authorized to process basic personal, identification and contact details of the customer, data on goods and communication data between the customers for a period of 4 years from the expiration of the warranty time for goods.

c)   Lawful interests of the Operator, protection rights and protected interests of the Operator:

  • Effective defense in case of dispute. The processing time is set here for 4 years from the expiry of the warranty period for the goods and is extended by the length of time the dispute is active for.
  • The operator's legitimate interest is also the sending of commercial communications (mass offers and individual offers) in accordance with Section 7 paragraph 3 of Act No. 480/2004 Coll., On certain information services of a company and in accordance with point 47 of the Regulation if the Operator has obtained the details of the electronic contact in connection with the sale of goods and services to the Subscriber.

d)   Marketing and business offers of Operator services:

  • Advertising of business offers of products and services: sending general advertising messages without targeting to a particular group of addressees. The period of processing of personal data is in this case 3 years.
  • Individual offer: sending advertising messages after evaluating some personal aspects related to a physical person. The operator does not perform profiling in accordance with Article 22 of the Regulation because it is not an automated processing but a manual creation of individual offers. The period of processing of personal data is in this case 3 years.

e)   Cookies: Short text files generated by a web server and stored on a computer through a browser. Two types are distinguished. First of all, cookies are necessary to ensure the functioning and analysis of the web (making electronic communications over the electronic communications network, by using these cookies there cannot be a disagreement). Furthermore, these are cookies that evaluate some personal aspects related to a particular individual. By using the second type of cookies, the Subscriber must agree. The processing time is 3 years in this case.2.2  2 The Operator controls the personal information.

2.2   An operator is a personal data administrator.

3. Protection of personal Data Privacy and processing information

3.1   If the Subscriber fails to provide his / her Personal Data, it is not possible to conclude a contract with the Operator and / or provide him / her with the services that follow. Personal data is necessary in this context to provide a specific service or product the Operator offers.

3.2   After expiry of the deadlines specified in Article 2, the Operator will erase or anonymize personal information.

3.3   The Subscriber is only required to provide the Operator with true and accurate Personal Data. Subscriber is the Accountable Party that is responsible for providing accurate and correct Personal Data and information. The operator is not responsible for the accuracy of the data provided.

3.4   The Operator shall make every effort to avoid the unauthorized processing of Personal Data.

3.5   The Operator is entitled to transmit the Subscriber's personal data to third parties for the following purposes: completion of the ordering process, delivery of goods, sending of business messages, customer satisfaction assessment, customer service, complaint handling, and new customer registration.

3.6   Personal data is and will be processed in electronic form in a non-automated manner.

4. Participant's rights related to the processing

4.1   The Rights of the Subscriber/Customer in relation to the protection of personal data:

a)   Request from the Operator to access his Personal Data,

b)   To Correct Provided Personal Data,

c)   Deletion of Personal Data Provided,

d)   To limit the processing of Personal Data,

e)   Submit a complaint to the Office for Personal Data Protection,

f)   The right to transfer personal data to another administrator,

g)   Right to object to the processing of personal data.

4.2   The participant may apply its rights under paragraph 1 of this Article via e-mail or in the case of a registered customer in the customer section on the e-shop web site.

4.3   The rights under paragraph 1 of this Article written (c) and (d) cannot be applied to the extent and for the purposes referred to in Article 2 paragraph (1) (a), (b) and (c) with the exception of Section 2 (Transmission of Commercial Messages, where all rights listed in paragraph can be exercised in 2.1.

4.4   In the event that the Subscriber thinks that the Operator carries out processing of his or her Personal Data contrary to the protection of his / her private and personal life or in violation of applicable law, especially if Personal Data is inaccurate with regard to the purpose of processing, may:

a) Ask the Operator for an explanation, by e-mail to

b) To object to the processing and request by e-mail sent to, so that the Operator ensures the removal of the resulting situation (eg by blocking, correcting, adding information or disposing of personal data). The Operator shall promptly decide on the objection and inform the Subscriber. If the Operator does not comply with the objection, the Subscriber has the right to contact the Office for Personal Data Protection directly. This provision is without prejudice to the Participant's right to contact the Office for Personal Data Protection directly with his complaint.

4.5   If the Subscriber applies the right under this Article, the Operator is obliged to respond within 30 days of receipt of the request by the Operator.

4.6   The acceptance of an application for the exercise of the right under Article 4 section (1) (a) and (f) is only possible through a data message or a letter with an officially authenticated signature at the registered office sent to the company's address of business. The application must include an e-mail address to which a verification email will be sent to confirm the identity of the applicant.

4.7   If the Subscriber applies some of the reports from Article 4, paragraph 1, the Operator has the right to request proof of the identity of the Subscriber. The request for access to personal data must therefore be sent from the applicant's e-mail address. If the request is made in a different form or from another email address, the Operator is entitled to request additional verification by replying to the verification email. If the applicant fails to prove his identity within 14 days of the sending of the verification email, his application for the exercise of rights under Article 4, paragraph 1 will not be accepted.

4.8   In the case of a repeated and unreasonable request to provide a physical copy of the processed Personal Data, the Operator is entitled to charge a reasonable fee for the associated administrative costs.

5. Final Provisions

5.1   All legal relationships arising in connection with the processing of Personal Data are governed by the laws of the Czech Republic, regardless of where access has been made to them. The relevant Czech courts are competent to resolve any disputes arising in connection with the protection of privacy between the Subscriber and the Operator.

5.2   The data subject has the right to contact the Office for Personal Data Protection (

5.3   These Principles become effective on 25 May 2018.