Privacy Policy

I. Basic Provisions

1. The personal data controller pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is W-Media s.r.o., ID: 28851323, with its registered office at Škrovád 199, 538 21 Slatiňany, Czech Republic, registered in the Commercial Register maintained by the Regional Court in Hradec Králové, Section C, Entry 30977 (hereinafter: "controller").

2. Contact details of the controller:

   - Address: Škrovád 199, 538 21 Slatiňany, Czech Republic

   - Email: info@mojegs.cz

   - Phone: +420 604 111 341

3. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

4. The controller has not appointed a data protection officer.

II. Sources and Categories of Processed Personal Data

1. The controller processes personal data provided by you or personal data obtained by the controller based on the fulfillment of your order:

   - first and last name

   - email address

   - postal address (billing and/or delivery)

   - phone number

2. The controller processes your identification and contact data and data necessary for the performance of the contract.

III. Legal Basis and Purpose of Processing

1. The legal basis for processing personal data is:

   - performance of the contract between you and the controller pursuant to Art. 6(1)(b) GDPR,

   - fulfillment of the controller's legal obligations pursuant to Art. 6(1)(c) GDPR,

   - legitimate interest of the controller in providing direct marketing (for sending commercial communications to existing customers) pursuant to Art. 6(1)(f) GDPR,

   - your consent to processing for marketing purposes (newsletters in case no order was placed) pursuant to Art. 6(1)(a) GDPR.

2. The purpose of processing personal data is:

   - processing your order and exercising rights and obligations arising from the contractual relationship; providing personal data is a necessary requirement for the conclusion and performance of the contract,

   - fulfillment of legal obligations (accounting, tax, warranty claims),

   - sending commercial communications and other marketing activities.

3. No automated individual decision-making within the meaning of Art. 22 GDPR occurs on the part of the controller.

IV. Data Retention Period

1. The controller stores personal data:

   - for the period necessary to exercise the rights and obligations arising from the contractual relationship and to assert claims from these relationships (for a period of 10 years after the termination of the contractual relationship),

   - until the consent to processing for marketing purposes is withdrawn, but no longer than 5 years.

2. After the expiry of the retention period, the controller shall securely delete the personal data.

V. Recipients of Personal Data (Subcontractors)

1. Recipients of personal data are persons:

   - involved in the delivery of goods / execution of payments based on a contract,

   - providing e-shop operation services and other services related to e-shop operation (IT services),

   - providing marketing services.

2. The controller intends to transfer personal data to a third country (outside the EU) only if using cloud or mailing services (e.g., Mailchimp/Google) that declare compliance with the GDPR via valid legal mechanisms (e.g., Data Privacy Framework).

VI. Your Rights

Under the conditions set out in the GDPR, you have:

- the right of access to your personal data,

- the right to rectification or restriction of processing,

- the right to erasure ("right to be forgotten"),

- the right to object to processing,

- the right to data portability,

- the right to withdraw consent via email at info@mojegs.cz.

You also have the right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).

VII. Security Conditions

1. The controller declares that they have taken all appropriate technical and organizational measures to secure personal data.

2. The controller has taken technical measures to secure data storage and physical records.

3. Only persons authorized by the controller have access to personal data.

VIII. Final Provisions

1. By submitting an order from the online order form, you confirm that you are familiar with the privacy policy and that you accept it in its entirety.

2. The controller is entitled to change these conditions. The new version will be published on their website.

These conditions take effect on January 7, 2026.