Ochrana osobních údajů

Privacy Policy & Data Processing

Data Controller:

Ing. Roman Schmock, with registered office at Heydukova 1868/26, 412 01 Litoměřice, Company ID: 02520206, registered in the trade register at the Municipal Office in Litoměřice (hereinafter referred to as the "Seller" or "Controller").

I. Privacy Statement

The Seller is committed to respecting, protecting, and securely storing your privacy and personal data. All personal data is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as "GDPR") and Act No. 110/2019 Coll., on the processing of personal data.

II. Personal Data Security

The Seller uses modern security technologies, encrypted protocols (HTTPS), and internal organisational procedures to protect your personal data from unauthorised access, loss, misuse, or disclosure.

If you provide us with your personal data when ordering goods or services, this data is used exclusively to ensure contract fulfilment and communication with you. The Seller fundamentally does not sell, rent, or provide customer personal data to third parties for their commercial purposes without your explicit consent, with the exception of contractual partners providing logistics, payment, and technical operation of the e-shop jimot.cz.

III. Scope and Purposes of Personal Data Processing

A. What Personal Data Do We Process?

We process only the data necessary to provide you with quality services and deliver ordered goods. These categories include:

  • Identification Data: First name and surname, username and password (if you register an account), Company ID and VAT ID (if you purchase as a business).
  • Contact Data: Email address, phone number, delivery address, billing address, and potentially social media profiles if you contact us through them.
  • Your Settings and User Profile: Data in your account on the jimot.cz website (saved addresses, wishlists, tracked products, your product and service ratings).
  • Order Data: Data about goods and services you have ordered, delivery and payment methods (including bank account number for potential refunds), and data about any complaints filed.
  • Website Behaviour Data: Your device's IP address, inferred geographical location, technical device parameters (operating system, browser version, screen resolution), data obtained from cookies, and the URL from which you arrived at our website.

B. Why Do We Process Personal Data and What Authorises Us To Do So?

We process personal data for specific purposes based on clear legal grounds:

B.1 If You Visit Our Website (Use of Cookies)

When you visit our website, we store small text files – cookies – on your device and subsequently read them from it.

  • Technical (Essential) Cookies: These files ensure the proper functioning of the website (e.g., keeping items in your cart, logging into your account, connection security, and error detection). The processing of these cookies is necessary for the performance of our contractual obligations and the functioning of the site, therefore it does not require your consent. If you block these cookies in your browser, the website may not function correctly.
  • Analytical and Marketing Cookies: These allow us to measure traffic, advertising effectiveness, test new features, and personalise product offers. We store and process these cookies exclusively based on your voluntary consent, which you grant via the cookie banner on our website and which you can withdraw at any time.

Based on our legitimate interest (without the need for consent), we also process technical data (IP address, browser type) for the purpose of preventing cyberattacks, ensuring the security of your data, and optimising website stability.

B.2 If You Register With Us

If you create a user account on the jimot.cz website, we process your identification and contact data based on the performance of the contract for managing your user account. We process personal data for this purpose for the entire duration of your account's existence, which you can delete yourself at any time or request its deletion.

B.3 If You Purchase From Us

  • Contract Performance: If you purchase from us as an individual (consumer), we process your identification, contact data, and order data for the purpose of processing your order, communicating about delivery status, and resolving any complaints. If you purchase as a representative of a legal entity, we process this data based on our legitimate interest in concluding and performing a contract with the company you represent.
  • Fulfilment of Legal Obligations: As a business, we must comply with legal obligations. For this reason, we retain your identification data and invoices for the period stipulated by Act No. 89/2012 Coll. (Civil Code), Act No. 634/1992 Coll. (on Consumer Protection), and especially Czech tax and accounting regulations (VAT Act, Accounting Act).
  • Protection of Legal Claims (Legitimate Interest): After contract fulfilment, we retain order data for the duration of the statute of limitations (generally 3 years and 1 year thereafter) for potential legal disputes, defence of our claims, or internal control.

B.4 If You Are the Recipient of Goods or Services Ordered by Another Person

If our customer orders goods for you (e.g., as a gift), we process your first name, surname, and delivery address based on our legitimate interest in fulfilling the contract concluded with our customer. We retain the data for the period necessary for delivery and subsequently for the duration of the statute of limitations for the protection of legal claims.

B.5 If You Communicate With Us

If you contact us via email, phone, or contact form, we process your contact details and the content of the communication based on our legitimate interest in fulfilling your request. If the communication relates to an existing order or complaint, the processing is based on contract performance. We retain this data for the period necessary to resolve your query, but no longer than the statute of limitations, unless the communication results in an order.

IV. Who Processes Your Personal Data and To Whom Do We Disclose It?

We process your personal data as the Controller. However, to ensure the operation of the e-shop, goods dispatch, and payment processing, we use the services of trusted contractual partners who act as further controllers or processors:

  • Payment Service Providers (Payment Processing):

  • ComGate Payments, a.s. (payment gateway operator)

  • PayPal (Europe) S.à r.l. et Cie (alternative payment method)

  • Shipping and Logistics Companies (Goods Delivery):

  • PPL CZ s.r.o. (Company ID: 25194798)

  • Packeta Czech Republic s.r.o. / Zásilkovna / Uloženka (Company ID: 24299162)

  • Marketing and Analytical Tools (Based on Consent):

  • Heureka Shopping s.r.o. (Company ID: 02387727) – as part of the "Verified by Customers" program for assessing purchase satisfaction.

All our processors are contractually bound to adhere to strict personal data protection standards and are not permitted to use your data for purposes other than those defined by us.

V. Data Transfers Outside the EU

We primarily process your personal data within the Czech Republic and the European Union (or European Economic Area). If, in the future, data is transferred to third countries outside the EEA as part of the use of cloud or analytical services (e.g., from companies like Google or Meta), we will do so exclusively in accordance with legal regulations, i.e., based on a European Commission decision on an adequate level of protection, or based on approved Standard Contractual Clauses (SCCs).

VI. Your Rights Regarding Personal Data Processing

In accordance with GDPR, you have full control over your personal data and can exercise the following rights towards us:

  • Right of Access: You have the right to obtain confirmation as to whether your personal data is being processed, and if so, you have the right to detailed information about this processing and to receive a free copy of this data (further copies may be subject to a fee).
  • Right to Rectification: If you find that we are processing inaccurate, outdated, or incomplete data about you, you have the right to request its immediate correction or completion.
  • Right to Erasure ("Right to be Forgotten"): You have the right to request the erasure of your personal data if it is no longer necessary for the stated purposes, if you withdraw your consent, or if the processing is unlawful. Please note that data cannot be erased if its retention is our legal obligation (e.g., accounting) or if we need it for the defence of legal claims.
  • Right to Restriction of Processing: You can exercise this right, for example, while you contest the accuracy of the data, or if the processing is unlawful but you request only a restriction on its use instead of erasure.
  • Right to Data Portability: You have the right to receive your personal data that you have provided to us and that we process automatically based on a contract or consent, in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
  • Right to Object: If we process your data based on our legitimate interest, you have the right to object to this processing. In such a case, we will cease processing the data unless we demonstrate compelling legitimate grounds for the processing which override your interests.
  • Right to Lodge a Complaint: If you believe that we are processing your data in violation of the law, you have the full right to lodge a complaint with the supervisory authority:
  • Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7 (www.uoou.cz).

VII. How Can Individual Rights Be Exercised?

You can exercise all your rights by sending a written request to our contact email address: informace@jimot.cz (or eshop@jimot.cz).

We will process your request without undue delay, within one month of its receipt. In exceptional and justified cases (especially considering the complexity or high number of requests), we are entitled to extend this period by a further two months. We will inform you in a timely manner about any extension and its reasons.

These personal data protection principles are valid and effective from 18. 7. 2026 and completely replace all previous versions.