More
    Currency
    EUR
    Language
    English
    Registration
    Home / Privacy Policy

    Privacy Policy

    The processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter „GDPR“) and by Act No. 110/2019 Coll., on Personal Data Processing, as amended.

    1. Introduction

    This policy contains basic information about the processing of personal data processed by the controller, in particular but not exclusively in connection with a contractual or non-contractual relationship with the controller, with the provision and purchase of services or goods, including through e-shops operated by the controller, in particular the e-shops located at basketking.cz, peakshop.cz, basket-obchod.cz and spojovak.eu (hereinafter „E-shop“ or „E-shops“) and with the operation of these websites.
    Please do not provide us with any of your personal data if you do not wish it to be used in the manner described in this policy. 

    2. CONTROLLER OF PERSONAL DATA

    In relation to your personal data, the controller of personal data is PRO TENAX s.r.o., Company ID: 64357465, with registered office at Plzeňská 35, 252 19 Chrášťany, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 233026 (hereinafter the „controller“).

    3. CONTACT DETAILS

    In order to exercise your rights or in the event of related questions, you can contact the controller in writing at the address of the controller's registered office or at the e-mail address ucetni@protenax.cz.

    Our company has not appointed a data protection officer.

    4. PROCESSING OF PERSONAL DATA

    Personal data are processed to the extent to which the relevant data subject provided them to the controller, in connection with the conclusion of a contractual or other legal relationship with the controller, or which the controller collected otherwise and processes in accordance with the applicable legislation or to fulfil the controller's legal obligations.

    • Processing of personal data when the contact form is used

    If you enquire about our products and services, we will work with the contact details you provide us, mainly through the enquiry form; these will usually be the data listed in point 6 of this policy.

    • For what reason?

    We contact you in order to handle the request made through the contact or other web form on our website and to arrange further details regarding the provision of goods and services. It may also serve another applicable purpose depending on the nature of the request made through the relevant form on our website.

    • On what legal basis?

    This is processing of personal data on the basis of Article 6(1)(b) GDPR – negotiation of a contract, or taking steps prior to entering into a contract at your request, or alternatively the controller's legitimate interest in answering and handling the message.

    • How long will we process the personal data?

    If we do not enter into further cooperation, we will process your data until the request is handled and then for five years from our last communication.

    • Processing of personal data in the event of a purchase (including a purchase in our E-shop)

    If you make a purchase from us, we will work with the data you fill in. These will usually be the data listed in point 6 of this policy.

    • For what reason?

    We need to process personal data in order to perform our contract – to deliver our goods according to the order you concluded with us, i.e. with the controller. We will also use your contact details to communicate with you about the status of your order, or about complaints or your questions.

    We will further process personal data to fulfil our obligations arising from the law, in particular but not exclusively Act No. 563/1991 Coll., on Accounting, Act No. 586/1992 Coll., on Income Taxes, or Act No. 235/2004 Coll., on Value Added Tax, i.e. mainly for accounting and tax purposes.

    • On what legal basis?

    This is processing on the basis of Article 6(1)(b) GDPR – performance of a contract, and Article 6(1)(c) GDPR – compliance with our legal obligation.

    • How long will we process the personal data?

    Personal data will be processed for the duration of the contractual relationship, and then for five years from termination of the contract so that the controller can defend any legal claims, or for such longer period as legislation requires of the controller.

    • Newsletters (commercial communications)

    If you have made a purchase in one of our E-shops, we will use your e-mail address to send our newsletters – news about our products or services – unless you have refused this.

    • On what legal ground?

    This is permitted by Section 7(3) of Act No. 480/2004 Coll., on Certain Information Society Services, unless you have refused this.

    • How long will we process the personal data?

    10 years from your last purchase. You can unsubscribe at any time by e-mail or by clicking the link in the commercial communication; in that case we will no longer use your address for sending commercial communications.

    • Satisfaction surveys

    We ascertain your satisfaction with your purchase through e-mail surveys under the Verified by Customers programme, in which our E-shop participates. We send these to you every time you make a purchase with us, unless you refuse their sending within the meaning of Section 7(3) of Act No. 480/2004 Coll., on Certain Information Society Services. We carry out the processing of personal data for the purpose of sending surveys under the Verified by Customers programme on the basis of our legitimate interest, which consists in ascertaining your satisfaction with your purchase with us. For sending the surveys, evaluating your feedback and analysing our market position we use a processor, namely the operator of the Heureka.cz portal; for these purposes we may pass on information about the purchased goods and your e-mail address. When e-mail surveys are sent, your personal data are not passed to any third party for its own purposes. You may object at any time to the sending of e-mail surveys under the Verified by Customers programme by refusing further surveys using the link in the survey e-mail. If you object, we will not send you any further surveys.

    5. SOURCES OF PERSONAL DATA

    The source for the processing and collection of personal data is the data subject directly.
    The controller may also collect personal data from third parties, such as public authorities, business partners, or from publicly available sources – databases. 

    6. CATEGORIES OF PERSONAL DATA

    The following personal data are the subject of processing:

    • basic identification data which are or may be necessary for the conclusion of a contract, in particular name and surname, address of residence/registered office, function or job position,
    • contact details, in particular name and surname, telephone number, e-mail and delivery address,
    • other personal data provided for the purpose of being contacted by the controller or establishing cooperation,
    • personal data whose processing is necessary for the provision of services or the purchase of goods or services, or data provided in connection with the provision of services or the purchase of goods or services and performance of the contract,
    • data relating to the use of the website, and
    • any other data provided at the data subjects' own discretion for a specific purpose of processing. 

    7. CATEGORIES OF RECIPIENTS OF PERSONAL DATA

    Personal data may be passed to an external person providing the operation of the controller's technical (in particular software and hardware) equipment.

    If you shop with us through one of our E-shops, these are the persons who help us run them. In particular:

    • the operator of the Shoptet e-shop platform (Shoptet a.s., with registered office at Dvořeckého 628/8, Břevnov, 169 00, Praha 6, Company ID 289 35 675) in the case of the E-shop located at spojovak.eu, basketking.cz and basket-obchod.cz;
    • the operator of the MajorShop e-shop platform (PC HELP, a.s., with registered office at Samešova 1144, 674 01 Třebíč, Company ID 607 48 516) in the case of the E-shop located at peakshop.cz;
    • the provider of the Heureka service operated by Heureka Group a.s., Company ID 289 35 675, with registered office at Karolinská 650/1, 186 00, Praha 8 - Karlín;
    • providers of logistics and transport services;
    • providers of payment services and payment gateways;
    • the provider of the e-mailing service.

    Advisers and external collaborators of the controller, e.g. tax advisers, legal advisers etc., may have access to certain personal data, but exclusively where they need such personal data to fulfil the purpose of processing.

    The above recipients are obliged to provide sufficient and credible guarantees of the technical and organisational security of personal data protection.

    The controller processes personal data exclusively in the European Union or in countries which ensure an adequate level of protection on the basis of a decision of the European Commission. Personal data will not be transferred to an international organisation.

    8. RIGHTS OF DATA SUBJECTS

    Under the conditions laid down by law, in particular the conditions laid down in Chapter III of the GDPR, you have:

    • the right of access to all your personal data processed by the controller, which includes the right to obtain from the controller confirmation as to whether it processes your personal data, or information on the purposes of processing, the categories of personal data concerned, the recipients to whom the personal data have been or will be disclosed, the envisaged period of processing, the existence of the right to request from the controller rectification or erasure of personal data concerning your personal data or restriction of their processing, or to object to such processing, the right to lodge a complaint with a supervisory authority, all available information about the source of the personal data where they are not obtained from the data subject, the fact that automated decision-making including profiling takes place, and the appropriate safeguards for transfers of data outside the EU,
    • the right to request rectification or erasure of personal data, whereby you have the right to request rectification where inaccurate data are processed, or completion of incomplete personal data, or erasure of personal data where any of the grounds for erasure within the meaning of Article 17 GDPR applies, in particular where they were processed unlawfully,
    • the right to restriction of processing of personal data within the meaning of Article 18 GDPR, in particular where an objection to processing has been raised and it has not yet been verified whether the controller's legitimate grounds override those of the data subjects,
    • the right to data portability within the meaning of Article 20 GDPR, whereby under the stipulated conditions you have the right to transmit the personal data provided to another controller,
    • under the conditions laid down by law, in particular Article 21 GDPR, you also have the right to raise an objection with the controller concerning the processing of personal data,
    • where personal data are processed on the basis of consent granted, you have the right to withdraw your consent at any time in writing, i.e. by sending an e-mail or letter to the controller, without any additional costs. However, withdrawal of consent does not affect the lawfulness of processing of personal data based on that consent before its withdrawal, and
    • the right to lodge a complaint with the state supervisory authority, which within the Czech Republic is the Office for Personal Data Protection, if you believe that the processing of your personal data has infringed the GDPR.

    In the event of doubts about compliance with obligations relating to the processing of your personal data, you may contact the controller using the contacts given above under point 3, or lodge a complaint with the above-mentioned Office for Personal Data Protection, with registered office at Pplk. Sochora 27, 170 00 Praha 7, e-mail: posta@uoou.cz, website: www.uoou.cz. 

    9. SECURITY OF PERSONAL DATA

    The controller has implemented technical and organisational measures within the meaning of Article 32 GDPR which are necessary and at the same time appropriate to ensure that all processing is carried out in accordance with legislation, in particular the GDPR, and further to ensure the protection of the rights and freedoms of data subjects in connection with the processing of personal data. These measures consist in minimising the processing of personal data, the fastest possible pseudonymisation, transparency, necessity and proportionality of the processing of personal data, and the controller's ability to create and improve security features.
    The controller's implemented technical and organisational measures are reviewed and updated as needed. 

    10. USE OF COOKIES

    The controller of personal data, as the operator of the website protenax.cz and of the sites on which the E-shops are operated (hereinafter the „sites“), uses cookies on the sites.

    Cookies are short text files which a website stores on the visitor's computer and which the internet browser provides every time the user returns to the site.

    Standard web browsers (Internet Explorer, Mozilla Firefox, Google Chrome etc.) support cookie management. In the browser settings you can delete individual cookies manually, block them or disable their use entirely; they can also be blocked or allowed for individual websites only. For more detailed information please use your browser's help.

    We use the following cookies on the website:

    • Necessary cookies: these are required for the operation of the website; they allow you, for example, to log in to secured parts of the site and enable other basic site functions. This category of cookies cannot be disabled.
    • Analytical/statistical cookies: these allow us, for example, to recognise and determine the number of visitors and to monitor how our visitors use the website. They help us improve the way the site works, for example by allowing users to find easily what they are looking for. We only run these files with your prior consent.
    • Advertising cookies: these are used to track preferences and make it possible to display advertising and other content that best matches your interests and online behaviour. We only run these files with your prior consent.

    The current list of cookies used and their controllers can be found in the cookie settings tool („Cookie settings“ in the website footer).

    The use of cookies for the above purposes may involve the processing of personal data. Such processing is possible on a legal ground:

    • the controller's legitimate interest, permitted by Article 6(1)(f) GDPR in the case of necessary cookies, because they are essential for the correct functioning of the site;
    • the data subject's consent under Article 6(1)(a) GDPR for analytical and advertising cookies. You can withdraw consent at any time via the „Cookie settings“ link in the site footer or by changing the settings in your browser. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal.

    Retention period: Necessary cookies are retained only for the duration of the session (until the browser is closed). Analytical and advertising cookies are retained for the period stated for each cookie in the „Cookie settings“, but for no longer than 13 months from the time they are stored.

    Cookies collected for the purpose of measuring website traffic and creating statistics on traffic and visitor behaviour on the website are assessed in aggregate form and in anonymous form which does not allow an individual to be identified.

    Data from cookies may also be processed by our contractual partners (processors):

    • the provider of the Google Analytics service, operated by Google Inc., with registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;
    • providers of advertising systems which help target advertising: Google Ads, Meta Platforms (Facebook Pixel – fbp.basketking.cz, fbp.basket-obchod.cz), Sklik, Adform (C.adform.net, uid.adform.net, track.adform.net); Medium (uid.medium.com, sid.medium.com);
    • providers of external mailing tools (for sending commercial communications and segmenting newsletters), for example SmartEmailing (SmartSelling a.s.);
    • providers of other analytical and marketing tools, for example Stape (cee.mpc-prod-18-s6uit34pua-uc.a.run.app); Glami (glm_usr_tmp.glami.cz, glm_usr.glami.cz, _nss.glami.cz); Sklik, Seznam (sznlbrc.seznam.cz);
    • providers of other interaction-tracking and content-personalisation services, e.g. LinkedIn (langwww.basketking.cz, langwww.peakshop.cz – only to remember the language setting).

    Please note that third parties (including e.g. providers of external services) may also use cookies and/or access data collected by cookies on the website.

    Consent may be expressed via the checkbox contained in the so-called cookie bar. You can also subsequently refuse cookies in your internet browser settings, or set the use of only some of them.

    11. CONCLUSION

    This policy takes effect on 3 November 2025.
    Please note that this policy may be amended or updated. Any changes to this policy will take effect once published on the controller's website.