Personal data processing policies

I. Introductory provisions

1. These personal data processing principles (hereinafter referred to as the “Principles”) serve to inform the data subject about the processing of personal data provided to ADAMIK Company, s.r.o. Mitrovická 804, 739 21 Paskov, Czech Republic, ID: 26845318, as the operator of the online store “ADAMIKshop” at www.adamikshop.com, in connection with ordering and purchasing goods in the online store, registering a user account in the online store or for other purposes defined below in these Principles.

2. ADAMIK Company, s.r.o. processes all provided personal data in accordance with legal regulations, in particular Act No. 101/2000 Coll., on the protection of personal data and on amendments to certain acts, as amended (hereinafter referred to as the “Act”) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as the “Regulation”).

3. These Principles are an integral part of the purchase contract concluded between the seller (operator of the online store) and the buyer. By sending an order for goods, the buyer confirms that he has read these Principles. These Principles, to the extent specified below, supplement the general terms and conditions for purchasing goods in the online store www.adamikshop.com (hereinafter referred to as the “GTC”). The terms defined in the GTC shall apply similarly to these Principles.

4. These Policies are drawn up in English and are valid from 5.1.2026.

II. Controller and subject of personal data

1. The controller of personal data is the operator of the e-shop, i.e. ADAMIK Company, s.r.o.

• registered office: Mitrovicka 804, 739 21 Paskov, Czech Republic
• ID: 26845318, VAT ID: CZ26845318
• company registered in the Commercial Register kept by the Regional Court in Ostrava, Section C, File 50268
• email contact: eshop@adamikcompany.com
• telephone contact: +420 774 883 858

2. The subject of personal data is the customer – for the purposes of these Principles, a customer is a natural person who is a user of the e-shop, or whose personal data was provided to the administrator in connection with the use of the e-shop, and whose personal data is processed by the administrator. A buyer who is a natural person is always considered a customer.

3. The Administrator expressly states that the online store is not primarily intended for children under the age of 16; in the case of a person under the age of 16 who wants to give the Administrator consent to the processing of their personal data via the website (e.g. by subscribing to newsletters and granting consent to the processing of personal data for marketing purposes), they are obliged to ask the person exercising parental responsibility for them (in particular a parent, guardian or other legal representative) for approval of such a step, before providing any personal data to the Administrator. Without such approval, the child is not entitled to provide their personal data. In this context, the Administrator is entitled to require, in appropriate cases, confirmation that the person granting consent to the processing of personal data is over the age of 16 (in particular by checking the relevant text field containing such information), while the Administrator is not liable for the incorrectness of the information communicated by this person to the Administrator.

4. There is no obligation to appoint a data protection officer, and a data protection officer has not been appointed.

III. Categories of personal data processed by the controller

1. Personal data is any information that relates to a customer, which the personal data controller is able to identify.

2. In connection with the operation of the e-shop, the administrator may process the following categories of personal data, which are provided by the customer in connection with the conclusion of a purchase contract, upon the customer’s consent to the processing of personal data for the purposes defined in Article IV of the Principles, or for another purpose defined below in these Principles:

2.1. customer identification data – these are personal data that can be used to clearly and unmistakably identify the customer, in particular the customer’s first and last name (on the basis of which the customer’s gender can also be determined), information about reaching the age of 16 and, in the case of a customer who is an entrepreneur, also information about the customer’s company, its identification number, or tax identification number;

2.2. customer contact details – these are the personal data through which the customer can be contacted, in particular the billing address (in the case of a customer who is an entrepreneur, his registered office), telephone number and e-mail address, or delivery address, if the customer requests delivery of goods to a different address than the billing address;

2.3. data on the customer’s purchase history – this is the personal data through which it is possible to determine the customer’s transaction history, in particular data related to orders and purchase history (including the date of purchase, registration numbers of orders placed and data on the purchased goods, their price and issued invoices);

2.4. other data provided voluntarily by the customer – for example, comments on orders placed or other records of communication with the customer, or bank details for the customer, if the customer voluntarily provides this in connection with the purchase of goods (especially when withdrawing from the purchase contract or as part of a complaint procedure).

3. When providing personal data to the administrator, the customer is obliged to provide all personal data in an accurate and up-to-date form, and undertakes to update them in the event of any change; the personal data provided by the customer is considered by the administrator to be complete and correct. The administrator is entitled to ask the customer to update the personal data it processes, within the time limits corresponding to the potential risk of damage from out-of-date personal data; the administrator is not liable for out-of-date personal data due to inaction or failure to provide the necessary cooperation on the part of the customer. The administrator is also not liable for the incorrectness or incompleteness of the customer’s personal data or for the legitimacy of their communication to the administrator.

4. Personal data are processed both manually (by own employees and other collaborators and other processors) and automatically within the information systems and applications used by the controller (by own employees and other collaborators or other processors). When processing personal data, profiling may also occur based on other information that has been obtained about the customer over time according to data on the customer’s purchase history and websites (in particular cookies, data provided by the customer’s browser, data on displayed commercial messages, visited products and the customer’s purchase history), in order to be able to offer and provide the customer with a product tailored to their needs and to prevent the offering of products that are not interesting to them. In the event that the automated decision-making should produce legal effects on the customer or significantly affect him in a similar way, within the meaning of Article 22 of the Regulation, the controller is entitled to process personal data only with the customer’s express consent.

IV. Purposes, legal basis and scope of personal data processing

1. Personal data are processed for the purposes set out below, with the scope of personal data processed depending on the specific purpose of the processing. For some processing purposes, personal data may be processed directly on the basis of a statutory legal basis, where the customer’s consent to such processing of personal data is not required, while the second group consists of processing that is possible only with the customer’s consent.

2. The following legal basis is given for the processing of personal data, for which the customer’s consent is not required:

2.1. processing for the performance of a contract to which the customer is a contracting party – in particular, the performance of a purchase contract concluded between the customer and the administrator in connection with the purchase of goods in the e-shop or other contracts concluded between the administrator and the customer on the basis of these Principles, including in connection with the registration of the customer’s user account or placing orders in connection with the purchase of goods in the e-shop, where the said processing of personal data is necessary for the performance of the contract between the customer and the administrator, i.e. the implementation of the rights and obligations under the contract in question, including (i) in the case of a purchase contract, in particular the processing of the order, performance under the contract including related communication with the customer, handover of the goods for transport and the final sale of the ordered goods and their delivery to the customer and billing of the relevant purchase price or (ii) in the case of registration of a user account, enabling access, administration and management of the user account and the use of the associated benefits described in more detail in Article XIII of the GTC;

2.2. processing to fulfill legal obligations imposed on the controller – this is processing in connection with the fulfillment of obligations imposed on the administrator by individual generally binding legal regulations, which directly stipulate the obligation to process and archive certain personal data for a certain period of time, or the processing of your personal data may be necessary with regard to the fulfillment of the administrator’s obligations related to the exercise of rights from defective performance, providing cooperation to state authorities, etc. This may include, for example, handling complaints pursuant to Act No. 89/2012 Coll., the Civil Code, as amended, and Act No. 634/1992 Coll., on consumer protection, as amended, fulfillment of obligations imposed on the administrator in the area of ​​accounting and fulfillment of tax obligations, in particular Act No. 235/2004 Coll., on value added tax, as amended, Act No. 586/1992 Coll., on income taxes, as amended, or Act No. 563/1991 Coll., on accounting, as amended;

2.3. processing for the purposes of protecting the legitimate interests of the controller – this involves the processing of personal data to protect the rights and legally protected interests of the controller, which can be carried out without the customer’s consent, but when there is a corresponding interest of the controller, which is, for example, the need to process data for recording outstanding receivables and exercising the controller’s claims from concluded purchase contracts (judicial or enforcement recovery of receivables from the customer and other customer disputes, exercising insurance claims, etc.), resolving customer claims (complaints, withdrawal from the contract, etc.) and handling customer inquiries and complaints, including securing evidence in the event of future legal disputes in which the controller will be a party and compiling records, analyses and statistics.

2.3.1. The legitimate interest of the controller is also offering your own goods, including sending commercial messages (general offers and individual offers) in accordance with Section 7(3) of Act No. 480/2004 Coll., on certain information society services, as amended and in accordance with point 47 of the recital of the Regulation, if the controller has obtained electronic contact details in connection with the sale of goods to the customer. On this basis, the controller may contact the customer with commercial and advertising communications for the purpose of developing and supporting the controller’s own business activities, in particular by sending the controller’s electronic commercial communications to its customers containing current offers of goods and new products, information on current and future trends, special offers and promotional discount campaigns (so-called newsletters) that are related to previously made purchases, as the controller reasonably assumes that the customer is interested in its news.

If the customer is not interested in receiving the newsletter, they have the option to check their disagreement with the sending of commercial communications during the ordering process, and can also unsubscribe from the newsletter by using the unsubscribe link in the delivered e-mail commercial communication, or send a request to unsubscribe from the newsletter to the administrator’s e-mail address.

2.3.2. The legitimate interest of the controller is also sending Heuréka-verified customer satisfaction questionnaires – in order to improve the quality of the services provided to customers and as part of satisfaction evaluation and other surveys, the controller transfers the customer’s personal data to the extent of information about the purchased goods and the customer’s e-mail address to a third party – Heureka Shopping s.r.o., ID: 023 87 727, with its registered office at Karolinská 650/1, Karlín 186 00 Prague 8, as the operator of the Heuréka.cz portal, to send e-mail satisfaction questionnaires as part of the Verified by Customers program, in which the controller’s online store is involved, and which are sent after each purchase is made with the controller. Heureka Shopping s.r.o., as the operator of the Heuréka.cz portal, then ensures the sending of the aforementioned questionnaires, the evaluation of customer feedback and the analysis of the controller’s market position.

If the customer does not agree to the sending of an e-mail questionnaire as part of the Verified by Customers program, they have the option to check their disagreement with the sending of a satisfaction questionnaire to evaluate the purchase made during the ordering process, and they can also refuse to send further questionnaires at any time using the link contained in the delivered e-mail with the questionnaire.

The customer is entitled to object at any time to the processing of personal data based on legitimate interest – the right to object.

3. The scope of personal data processed for the processing of personal data referred to in the previous paragraph, for which the legal basis for processing is given without the need for the customer’s consent, is always limited to personal data that are necessary to fulfill the specific purpose for which they are processed and will not exceed the scope of personal data defined above in the categories of personal data (Article III, paragraph 2 of the Principles).

4. The provision of personal data by the customer is voluntary, with the proviso that the provision of some personal data may be a necessary prerequisite for the provision of the relevant service by the administrator. In this context, the administrator informs the customer that for the fulfillment of the purchase contract, it is always necessary to provide and process personal data to the extent of the customer’s identification data (Article III, paragraph 2.1. of the Principles) and the customer’s contact data (Article III, paragraph 2.2. of the Principles), which become part of the concluded purchase contract, and without which it is not possible to implement the purchase contract; the processing of data on the customer’s purchase history (Article III, paragraph 2.3. of the Principles), or other data provided voluntarily by the customer (Article III, paragraph 2.4. of the Principles) then occurs primarily in connection with the implementation of the purchase contract and also serves the other legal bases for processing, which were listed above in Article IV, paragraph 2 of the Principles.

5. The last reason for processing may be the consent provided by the customer, if granted to the controller. Based on this consent, personal data may be processed for the purpose of:

5.1. advanced marketing – including marketing purposes, which may result in a more targeted display of content and advertising to the customer, in the form of sending commercial communications (newsletters) regarding, for example, new products, current trends, special offers and promotional discount campaigns of the controller, including so-called remarketing (targeted advertising) and behavioral advertising, even if these advertisements are not related to the original purchase made on the controller’s e-shop.

If the customer is no longer interested in receiving the newsletter, he or she may unsubscribe from the newsletter by using the unsubscribe link in the email commercial communication received; the provisions of the following paragraph 6 are not affected by this.

The customer has the right to object to the processing of personal data for direct marketing purposes at any time – the right to object

6. The processing of personal data for the purpose specified in the previous paragraph is based on the customer’s voluntary consent, the granting of which is not a condition for purchasing in the e-shop. The customer may withdraw this consent at any time free of charge by sending an e-mail to the administrator’s e-mail address or in the form of a written communication addressed to the administrator at the administrator’s registered office, of which the customer will be informed before granting consent. However, the withdrawal of consent does not in any way affect the lawfulness of the processing of personal data based on the consent given by the customer before its withdrawal. The withdrawal of consent also does not affect the processing of personal data that the administrator processes on a legal basis other than consent (i.e. in particular if the processing is necessary for the performance of a contract, a legal obligation or for other reasons specified in applicable legal regulations). More detailed information regarding the granting of consent to the processing of personal data for the above-mentioned purpose, including the scope of personal data thus processed and the duration of such processing, is contained in the text of the relevant consent, by which the customer grants the right to process personal data for the given purpose.

V. Period of processing personal data

1. Personal data are processed for a limited period of time, which is always determined with regard to the purpose and legal basis for processing and the duration of activities related to the implementation of the purpose for which the data were obtained and is also based on the duration of the contractual relationship or other legal title that allows the administrator to process the customer’s personal data, and archiving obligations according to the deadlines imposed by legal regulations.

2. The processing of personal data based on the performance of the contract (Article IV., paragraph 2.1. of the Principles) is carried out by the administrator for the duration of the contractual relationship and for the period necessary with regard to the performance and exercise of rights and obligations under the concluded contract, i.e. usually until the expiration of the limitation period for the last right under this concluded contract. In the case of registration of a user account, personal data are processed until the user account in the e-shop is deleted. The user account may be deleted based on the customer’s request made by sending an e-mail message to the administrator’s e-mail address or in the form of a written communication addressed to the administrator at the administrator’s registered office.

3. Personal data is processed based on the fulfillment of legal obligations (Article IV, paragraph 2.2. of the Principles) for the period necessary for these obligations and according to the statutory deadlines set by legal regulations (e.g. invoices issued by the administrator are, in accordance with the provisions of Section 35 of Act No. 235/2004 Coll., on Value Added Tax, as amended, archived for 10 years from the end of the tax period in which the performance took place, while due to the need to prove the legal reason for issuing invoices, concluded purchase contracts or customer orders are also archived for 10 years from the date of termination of the contract).

4. Personal data processed on the basis of the legitimate interest of the controller (Article IV., paragraph 2.3. of the Principles) are processed for the duration of this legitimate interest. In the case of sending commercial and advertising communications on the basis of the legitimate interest of the controller, the period for the legitimate processing of personal data for this purpose is always 3 years from the customer’s last order, unless the customer unsubscribes from the newsletter subscription earlier or requests to terminate the newsletter subscription.

5. In the case of processing of the customer’s personal data based on the consent granted (Article IV, paragraph 5 of the Principles), the processing period is tied to the validity and effectiveness of this consent, with personal data being processed only for the duration of the purpose for which the consent was granted, and no longer than for the duration of the consent granted by the customer or until its withdrawal.

6. The above personal data processing periods may also be modified based on the exercise of the customer’s rights set out below in these Policies.

7. The administrator will archive documents containing the customer’s personal data for the prescribed period of time in cases where a generally binding legal regulation requires it to do so.

8. After the legal reason is lost, the relevant personal data is deleted or anonymized.

VI. Voluntary provision of personal data

1. Personal data is provided by the customer voluntarily, and the customer is under no obligation to provide it and is not subject to any sanctions if he does not provide his personal data to the administrator.

2. The Administrator informs the customer that in order to purchase goods in the e-shop and create, maintain and manage a user account, including using the benefits associated with it, the transfer of some personal data is required, i.e. if the customer does not provide it to the Administrator, he will not be allowed to use the relevant service.

VII. Processors and categories of recipients of personal data

1. The Administrator may disclose the Customer’s personal data:

• personal data processor – i.e. a person who processes personal data for the controller, based on a personal data processing contract;
• příjemci osobních údajů – tj. subjektu, kterému jsou osobní údaje poskytnuty.

2. The customer’s personal data is transferred only to entities that ensure the same high standard of personal data protection as the controller, and only to the extent necessary and in cases where the controller is authorized or obligated to do so (based on legal regulations, according to a contract concluded with the customer, etc.).

3. The customer’s personal data is transferred in particular to the administrator’s business partners who participate in the activities of the e-shop, for example in its operation, in connection with the preparation and delivery of goods and their payment, or who ensure the sending of the administrator’s commercial communications or other activities related to the operation of the e-shop. The administrator may provide the customer’s personal data for legitimate purposes to the following categories of recipients:

• to associates, suppliers and other contractual partners of the controller for the purpose of operating the e-shop, fulfilling the contract, providing customer service and performing other activities of the controller within the meaning of these Principles;
• postal and payment service providers;
• to providers of transport and other services ensuring the transport and delivery of goods to the customer (including the transfer of customer contact details);
• providers of marketing services and product comparison services (Heureka.cz);
• providers of accounting, auditing, tax or other consulting services;
• collection agencies and law firms (especially for the purpose of debt collection);
• computer infrastructure operators and IT system administrators;

4. The customer’s personal data will not be transferred to third parties in any way other than for the purposes specified in this Policy, which also means that they will not be shared with third parties for the purpose of sending commercial and advertising communications from these third parties. The Administrator does not intend to transfer the customer’s personal data outside the European Union or to international organizations.

VIII. Security of personal data

1. The Administrator uses standard technical and organizational measures required by applicable legal regulations that ensure the protection of processed personal data (in particular against their alteration, loss or destruction) and secure personal data against their provision to unauthorized persons, acquisition by unauthorized persons, as well as against their processing in violation of the provisions of the Act or Regulation.

2. Personal data is stored in a secure database, to ensure protection the administrator uses the security of servers, internet connection and websites. The connection associated with filling out forms is then via a secure encrypted connection, as is the connection associated with making electronic payments if this option is selected. The administrator regularly checks whether the system does not contain weaknesses and has not been exposed to attack and uses such security measures that can be reasonably required of the administrator to prevent unauthorized access to the personal data provided, and which provide sufficient security with regard to the current state of technology. The security measures taken are then regularly updated.

3. Despite the above guarantees, the activities carried out by the Administrator in order to ensure the protection of personal data may prove insufficient if the Customer does not observe certain security principles. The Administrator requests the Customer to ensure that the login and password necessary to access his/her user account are kept confidential and not to disclose these data to third parties. In order to prevent the use of the Customer’s user account by unauthorized persons, the Administrator also requests that the Customer log out of the User account after completing a transaction or other use of the e-shop. Each Customer is responsible for keeping his/her username and unique password secret and for constant control over access to his/her account.

IX. Information about the customer’s rights as a data subject

1. The Administrator processes the Customer’s personal data fairly, lawfully and transparently and in accordance with legislative requirements. The Customer also has the right to contact the Administrator at any time to obtain information about the processing of their personal data or to exercise the rights listed below related to personal data.

2. The administrator informs the customer about his rights, which are:

2.1. the right to access personal data – based on this right, the customer has the right to obtain from the controller confirmation as to whether his or her personal data is being processed, and if so, also the right to information related to this processing, or, if the rights and freedoms of other persons are not adversely affected, a copy of the processed personal data;

2.2. the right to correct personal data – based on this right, the customer may request the controller to correct inaccuracies in personal data processed by the controller, or to supplement incomplete personal data;

2.3. the right to erasure of personal data – based on this right, the customer may request the controller to erase any or all personal data processed about him, if they are not necessary for the purpose for which they were processed, or if the customer has withdrawn consent to their processing (and there is no other legal reason for the processing) or has objected to the processing (and there are no overriding legitimate reasons for the controller for the processing), further if the personal data were processed unlawfully, must be erased to comply with a legal obligation, or were collected in connection with the offer of information society services;

2.4. the right to restrict the processing of personal data – based on this right, the customer may request the controller to restrict the processing of personal data about him or her if the customer disputes the accuracy of his or her personal data (for a period of time necessary for the controller to verify the accuracy of the personal data), or if their processing is unlawful but the customer refuses to delete such personal data, or if the personal data are no longer necessary for the purpose for which they were provided by the customer, but the customer requests processing (e.g. in connection with the exercise of a claim in court for which the customer needs the processed personal data), or if the customer has objected to processing, and it is not clear whether the legitimate interests of the controller outweigh the legitimate interests of the customer;

2.5. the right to data portability – in the case of automated processing of personal data based on a concluded contract or consent given by the customer, the customer has the right to the so-called portability of this data and its provision in a structured, commonly used and machine-readable format;

2.6. exclusion of automated individual decision-making and profiling – the customer has the right not to be subject to any decision based solely on automated processing, including profiling, which would produce legal effects for him or her or similarly significantly affect him or her. In this context, the controller states that it does not carry out any automated processing without the influence of human judgment with legal effects for data subjects;

2.7. the right to withdraw consent to the processing of personal data – in the event that the customer has provided the administrator with consent to the processing of personal data for purposes that require consent, the customer has the right to withdraw this consent at any time. The processing of personal data that occurred before the withdrawal of consent is lawful;

2.8. the right to notification of personal data breaches – the customer has the right to be informed by the controller that there has been a breach of his or her personal data, if it is likely that such a breach will result in a high risk to the rights and freedoms of natural persons; the customer does not have this right if the specified conditions are met (including if the controller has taken measures to ensure that the high risk is unlikely to materialise or if such notification would require disproportionate effort, in which case it is necessary to provide information by means of a public notice or similar measure);

2.9. the right to file a complaint with a supervisory authority – the customer has the right to contact the Office for Personal Data Protection as a supervisory authority if they believe that the processing of their personal data has violated the rules on personal data protection; contact details:

Personal Data Protection Office:

Pplk. Sochora 27, 170 00 Praha 7

phone: +420 234 665 111 (main)

email address: posta@uoou.cz

website: www.uoou.cz

The customer also has the right to effective judicial protection against the decision of the supervisory authority that concerns him.

The customer also has the right to object to the processing of personal data. – the customer has the right to object at any time to the processing of personal data that the controller processes on the grounds of legitimate interest. In the event that the controller does not demonstrate that there are compelling legitimate grounds for the processing which override the interests or rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims, the controller shall terminate the processing of personal data on the basis of such objection without undue delay.

Likewise, the customer may object to the processing in a situation where his/her personal data is processed for direct marketing purposes. In such a case, the controller will no longer process the personal data for this purpose without further notice.

3. All of the above rights (except for the right to file a complaint with the supervisory authority) can be exercised by electronic mail (e-mail) sent to the address eshop@adamikcompany.com. This address can also be contacted in connection with a request for additional information regarding the above rights. Similarly, the above rights can also be exercised by correspondence to the address of the controller/administrator – ADAMIK Company, s.r.o., Mitrovická 804, 739 21 Paskov, Czech Republic.

4. Submission of a request to exercise the rights from Article IX., paragraphs 2.1. and 2.5. of the Principles is possible only by means of a written letter with an officially certified signature of the customer to the address of the administrator’s registered office; such a request always includes an e-mail address to which a verification e-mail will be sent after receipt of the request in order to confirm the customer’s identity. The provisions of the following paragraph of the last sentence shall apply here accordingly.

5. The Administrator reserves the right to request proof of the customer’s identity in connection with the exercise of the rights defined above, in particular if the request to exercise the rights is not sent from the customer’s email address registered by the Administrator (e.g. the right to request additional verification in the form of a response to a verification email). If in such a case the customer’s identity is not proven within 14 days of such a request by the Administrator, the request to exercise the customer’s rights will not be accepted; the Administrator will always inform the customer of such fact in a timely manner.

6. The controller will respond to a request concerning the exercise of customer rights without undue delay within one month of receiving the request, in which it will provide the customer with information about the measures taken, in the manner in which such a request for the exercise of rights was submitted (i.e. in writing or electronically, as the case may be). The specified period may be extended by another two months if necessary (including due to the complexity and number of requests), and the controller will always inform the customer of such an extension, including the reasons that led us to it, within one month of receiving the request.

7. If the administrator does not take the measures requested by the customer, he shall inform the customer within the above-mentioned period of time of the reasons for not taking the measures and of the possibility of filing a complaint with the supervisory authority and seeking judicial protection.

X. Other provisions related to the principles of personal data processing

1. Cookies

Cookies are small data files that contain certain information regarding the use of the website and the e-shop by the customer, which are stored on the customer’s computer, phone or other device when visiting the e-shop. Cookies allow the device used to browse the Internet (e.g. computer, smartphone, etc.) to remember specific information regarding the device used from which the customer accesses the Website, and thus help to provide, protect and improve the services offered.

Cookies in particular:

• serves for efficient navigation and operation of the e-shop during the shopping process (including the ability to save customer purchases and display the user’s login status in the online store), for personalization, saving preferences and generally improving the user experience of the website;
• they allow us to distinguish whether a specific user has already visited the website in the past or whether they are a new visitor and are thus used for statistical purposes;
• they help to display advertising in the e-shop tailored to the interests of a specific customer and enable the customer to be provided with interesting information and to adapt the e-shop’s website to the customer’s individual needs, i.e. they serve advertising purposes.
  

The Administrator uses cookies when a customer visits the e-shop website to ensure its basic and advanced functionality, most often to customize content and increase customer comfort, to analyze traffic and traffic, to facilitate more secure login and for advertising and re-marketing activities, in which they help with better targeting of the Administrator’s advertising campaigns. Cookies created by using the Administrator’s website may be made available to third parties.

Cookies used by the e-shop can be temporary or permanent. Temporary cookies are deleted after closing the browser, while permanent cookies are retained even after the customer has finished using the e-shop and are used to store information such as passwords or login details, which makes using the website faster and easier. More information about cookies can be found here: http://www.aboutcookies.org.

Cookie settings can be adjusted or changed in the relevant internet browser, and cookies can also be managed differently in standard web browsers, in particular by deleting or prohibiting their use. If these settings are not changed, cookies will be stored in the device’s memory, and by using the administrator’s website, the customer consents to the use and storage of cookies, including for the purpose of targeting advertising. Changing the cookie settings may limit the functionality of the website and e-shop. In case of problems, the administrator recommends using the browser’s help file or contacting the manufacturer of the internet browser used by the customer; more information about cookie management can also be found on the designated pages of individual browsers.

2. Data protection in Google Analytics, Google Ads and related statements

which the online store is accessible uses the analytical mechanism of Google Inc.’s network services (“Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA”) Google Analytics, which uses cookies that allow monitoring of Internet behavior in terms of time, location and use of this website. Using the Google Analytics web analytics system, user profiles can be created under a nickname. The system is used to analyze website traffic and provide related services.

Users’ IP addresses are not associated with other data collected by Google. The information collected by cookies is transmitted to Google servers located in the USA and archived. The controller does not share this information with any third party that would use it for its own purposes. If the IP address anonymization function is activated while using the controller’s website, Google shortens the user’s IP address. Only in exceptional cases is the full IP address transmitted to a Google server in the United States of America and shortened there. Complete information on the processing of personal data in connection with Google Analytics can be found at this link https://www.google.com/analytics/.

Google uses this information on behalf of the controller to analyze how the customer uses this website, for the purposes of reporting on website activity and providing other services related to website and internet use. Google may also transfer this information to third parties in accordance with legal requirements or if these third parties process this data on behalf of Google. The IP address transmitted by the customer’s browser in connection with Google Analytics is not merged with other Google data.

The user can prevent this by making the appropriate settings on his browser software. In addition, the customer can prevent Google from collecting the data generated by the cookie (including the IP address) relating to his use of the website and from processing this data by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en.

For details on how Google and its partners use cookies in advertising, please see: https://www.google.com/intl/cs/policies/technologies/ads/ and for detailed information on the types of cookies Google and its partners use: https://www.google.com/intl/cs/policies/technologies/types/. Complete information on the processing of personal data in connection with Google Analytics can also be found at this link: https://support.google.com/analytics/answer/6004245.

Within the framework of Google Analytics, the controller also uses related advertising functions provided by Google, such as overviews of impressions in the Google advertising network or displaying ads in the content network based on products viewed (so-called remarketing), including the Google Ads service (Google AdWords) used to personalize advertising and improve advertising targeting and so-called remarketing. Thanks to this, the controller can then offer visitors to its website advertising content that will be as interesting as possible for them.

Google delivers advertising materials via so-called “ad servers”. These ad servers can be used to measure certain parameters for evaluating success, such as the placement of advertisements or user clicks. If a customer reaches the online store page via a Google advertisement, Google Ads stores cookies on the customer’s device, which are not intended to personally identify the customer, but allow Google to recognize the user’s internet browser – namely, if the user visits certain websites using the Google Ads application for which the relevant cookies stored on the user’s device have not yet expired, Google can determine that the user clicked on the advertisement and was redirected to this page. As part of the above-mentioned advertising measures, the controller therefore does not collect or process any personal data from which the user could be identified, but only receives statistical evaluations from Google, on the basis of which it can verify which of the advertising measures used are effective and which are not. The supplier of the aforementioned service can then display the administrator’s advertising on various websites, i.e. use the cookies in question to display advertisements based on the user’s previous visits to the website and thus obtain information that the user has clicked on the relevant part of the e-shop or clicked on some administrator notifications.

Opting out of the use of cookies by Google is possible, in particular, by setting the user’s browser software accordingly, in particular by prohibiting external cookies, in which case the user will not receive any advertisements from third-party providers; users can also opt out of personalized advertisements, including remarketing – more information on disabling ad personalization can be found here: https://support.google.com/ads/answer/7395996. Within the Internet browser, it is possible to exclude the storage of cookies according to the conditions of individual browsers, for example:

Mozilla Firefox – https://support.mozilla.org/cs/kb/povoleni-zakazani-cookies

Chrome https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=cs

Microsoft Edge – https://support.microsoft.com/cs-cz/help/17442/windows-internet-explorer-delete-manage-cookies

More information about the purpose and scope of data collection and processing by Google can also be found here:

The user can also prevent the storage of data collected by cookies regarding the use of the website (including IP address) and its transmission to Google, as well as the provision of this data by Google, by downloading and installing the adapter available under the following link: https://tools.google.com/dlpage/gaoptout?hl=pl.

Visitors to the administrator’s website can also disable or adjust advertising personalization through their Google account, using the link available here: https://adssettings.google.com/u/0/authenticated?hl=cs.

In addition to cookies, the online store may also collect data that is usually collected by web system administrators. The information contained in the logs may include, among other things, the IP address, platform and web browser type, internet connection provider and the web address from which the customer entered the website. Some subpages within the website and other methods of communication with the customer may include so-called “web beacons” (so-called electronic images or pixel tags). Web beacons allow the receipt of information such as the IP address of the device on which the website with the embedded web beacon was loaded, the URL of the page, the time the page was loaded, the browser type and the information contained in the cookie files, for the purpose of possible evaluation of the effectiveness of advertisements. This data will be archived and used for statistical analysis and evaluation of global website traffic. This data will not be associated with the customer’s personal data.

For information on how Google and its partners use cookies in advertising, please see: https://www.google.com/intl/cs/policies/technologies/ads/a and for detailed information on the types of cookies Google and its partners use: https://www.google.com/intl/cs/policies/technologies/types/.

The e-shop currently uses cookies for advertising and statistical purposes, for the purpose of operating the website and online store and for the purchasing process, as well as cookies necessary for the functioning and analysis of the website. The administrator also uses Google Analytics cookies and Google Ads and Sklik (seznam.cz) cookies.

2. Other links

When using the website of the online store, links to other websites may periodically appear. The Administrator points out that these sites operate independently of the online store and are in no way under the supervision of the Administrator. These sites may have their own personal data protection and privacy policies, which the Administrator recommends that the Customer read. The Administrator has no control over and assumes no responsibility for any information, material, products or services contained in or accessible through these websites or the way personal data is handled within these other sites.

XI. Final provision

1. Any questions regarding these Personal Data Processing Policies can be addressed by the customer to the administrator’s e-mail address – eshop@adamikcompany.com, or by correspondence by sending a letter to the administrator’s address – ADAMIK Company, s.r.o., Mitrovická 804, 739 21 Paskov, Czech Republic.

2. Changes to these Personal Data Processing Policies in the online store www.adamikshop.com are reserved; the administrator is authorized to change or supplement the wording of the Policies, and the aforementioned changes shall enter into force no earlier than the date of their publication on the e-shop’s website.