IDOL SPAS

This document provides information on how Obchodní společnost Idol spas s.r.o. processes and protects your personal data in connection with the operation of the website and online store at www.idol.cz.

This text is effective from January 1, 2026.

The controller of your data is:

• Name: Idol spas s.r.o.
• Company ID: 04313348 | VAT ID: CZ04313348
• Registered office: Čs. armády 659, 254 01 Jílové u Prahy
• Registration: Municipal Court in Prague, Section C, File 85190
• Email: [email protected]
• Tel.: +420 720 171 000

We process the data you provide to us depending on which services you use:

• Contact form: First name, surname, email address, telephone number.
• Online shop purchase (WooCommerce): Additionally, billing address, delivery address and order history.
• User account: Login details and profile settings.
• Technical data: IP address and cookies (essential for the operation of the online shop and shopping cart).

We use your data only for lawful purposes:

1. Performance of a contract (E-shop): To process orders, deliver goods and handle complaints.
2. Responding to enquiries: To communicate via the contact form (legitimate interest or steps prior to entering into a contract).
3. Legal obligations: For accounting purposes and the archiving of invoices in accordance with applicable laws of the Czech Republic.
4. Legitimate interest: To ensure website security and protection against fraud.

Your data is safe with us. However, for the proper operation of the e-shop and website, we pass it on to the following partners:

• Carriers: For the purpose of delivering your orders.
• Payment providers: For the secure processing of your payments.
• Technical website administration: WordPress/WooCommerce system administrators and hosting providers.
• Accounting services: For the legally required processing of invoices.
• Note: We do not sell your data to third parties for marketing purposes.

• Form data: For a maximum of 2 years after the enquiry has been resolved, unless an order is placed.
• Order data (invoices): For 10 years as required by law.
• User account: Until you decide to delete your account.

Under the GDPR, you have the right:

• To access and rectify your data.
• To have your data erased (if it is no longer required for the performance of a contract or statutory purposes).
• To object to processing.
• To data portability.
• To lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).

Your purchase and communication are protected by HTTPS encryption. We use modern technical standards of the WordPress and WooCommerce systems to prevent unauthorized access to your personal data.