1. Data controller
The controller of your personal data is Parking-karavanů, s.r.o., company ID 11724242, registered office Nesvačilka 14, 664 54, Czech Republic.
We operate the website www.parking-karavanu.cz. Contact e-mail: info@parking-karavanu.cz, phone +420 724 247 644.
2. What data we process
While operating the e-shop we process the following categories of data:
| Category | Specific data | Source |
|---|---|---|
| Identification | name, surname, company ID, VAT ID | from the customer |
| Contact | e-mail, phone, address | from the customer |
| Transactional | order contents, document numbers and dates, payment data | from the order |
| Operational | IP address, cookies, device and browser data | automatically |
| Marketing | preferences, purchase history, e-mail engagement | from behaviour |
3. Purposes and legal basis
We process your personal data solely for these purposes:
- Order fulfilment and contract performance — without this data we cannot deliver goods. Legal basis: performance of a contract.
- Compliance with legal obligations — accounting, VAT records, warranty claims. Legal basis: legal obligation.
- Marketing — newsletter, discount campaigns, personalised offers. Legal basis: your consent or legitimate interest (existing customers).
- Analytics and service improvement — anonymised behavioural data. Legal basis: legitimate interest.
- Protection of legal claims — dispute resolution, debt recovery. Legal basis: legitimate interest.
4. Retention period
We keep your data only as long as necessary:
- Order data — 10 years (VAT and accounting law obligation)
- Marketing data — until consent is withdrawn, at most 5 years from the last interaction
- User account data — for the lifetime of the account
- Cookies — see the Cookie policy (from session up to 24 months)
5. Who we share data with
Only authorised employees and vetted processors have access to your data:
- Carriers — Zásilkovna, PPL, DPD (name, address, phone)
- Payment gateways — GoPay, Comgate (transactional data)
- Accountants and tax advisors — billing data
- IT and hosting — server operators within the EU
- Marketing tools — Google Analytics, Mailchimp, Facebook Pixel
We do not transfer data outside the EU without appropriate GDPR safeguards.
6. Your rights
As a data subject you have the following rights, which you may exercise at any time:
Right of access
You have the right to know what data we process about you and obtain a copy.
Right to rectification
If the data is inaccurate, you may have it corrected or completed.
Right to erasure
You may request deletion of your data (the “right to be forgotten”).
Right to restriction
You may restrict processing if you doubt its lawfulness.
Right to portability
You may obtain your data in a machine-readable format (CSV, JSON).
Right to object
You may object to processing based on legitimate interest.
Right to withdraw consent
You may withdraw any given consent (e.g. marketing) at any time.
Right to complain
You may lodge a complaint with the Czech DPA (ÚOOÚ).
8. Data security
We protect your data with modern technical and organisational measures: HTTPS encryption, password hashing (bcrypt), regular backups, restricted employee access, and an ISO 27001 certified EU data centre.
If a security incident is suspected, we will inform you within 72 hours in accordance with GDPR.
9. Contact and exercising your rights
If you wish to exercise any of your rights or have a question, contact us:
By e-mail
info@parking-karavanu.czIn writing
Parking-karavanů, s.r.o.
Nesvačilka 14
664 54
We will respond to your request within 30 days of receipt.