Privacy policy
I. – Introductory Provisions
This Privacy Policy governs the manner in which Simastar, located at Ke Kotlářce 1146/12, Prague 5, Czech Republic (hereinafter referred to as the “seller” or “we”), processes personal data collected from customers through the online store and other related services. This policy complies with Regulation (EU) 2016/679 of the European Parliament and Council (the General Data Protection Regulation – GDPR) and applicable Czech data protection laws. By using our services, the customer agrees to the processing of their personal data as described in this policy.
II. – Scope of Personal Data Processing
The seller collects and processes only the personal data necessary for the provision of services, order fulfillment, legal compliance, and optional marketing activities. This includes the following categories of data:
- Identification data (name, address, company details if applicable),
- Contact data (email address, phone number),
- Order data (purchased goods, delivery details, payment status),
- Login and account details (if the customer registers),
- Communication content (e.g. emails or messages sent via contact forms),
- Technical data (IP address, browser and device type, cookies and usage analytics).
Data is collected either directly from the customer or automatically through the website.
III. – Purpose and Legal Basis of Processing
The seller processes personal data for the following purposes:
1. Order Processing and Fulfillment – to deliver purchased goods, manage invoices and communicate with the customer (legal basis: performance of contract).
2. Legal Obligations – to fulfill accounting, tax and consumer protection duties (legal basis: compliance with legal obligation).
3. Customer Support and Communication – to respond to inquiries or complaints (legal basis: legitimate interest or performance of contract).
4. Marketing Communication – to send newsletters or offers, only if the customer gives consent (legal basis: consent).
5. Website Optimization and Analytics – to improve the website and user experience (legal basis: legitimate interest or consent if cookies are used).
The customer may withdraw consent at any time by clicking the unsubscribe link in emails or by contacting the seller directly.
IV. – Use of Cookies and Tracking Technologies
The seller uses cookies and similar technologies to ensure proper website functionality, analyze visitor behavior, and, if consent is given, personalize advertising. Users can manage their cookie preferences via browser settings or a cookie banner provided on the website. Details are outlined in the separate Cookie Policy.
V. – Data Sharing and Recipients
Personal data may be shared with third parties only when necessary for the operation of the service or compliance with legal requirements. Such recipients include:
- Shipping companies (for delivery of goods),
- Payment processors (for secure transactions),
- IT service providers (hosting, website maintenance),
- Marketing platforms (e.g., newsletters, only with consent),
- Government authorities (if required by law).
The seller does not sell or trade personal data under any circumstances.
VI. – Data Retention
Personal data is retained only for the duration necessary to fulfill the stated purposes, in accordance with legal obligations:
- Order data: up to 10 years (legal obligation),
- Registered accounts: for the duration of account activity,
- Marketing data: until the customer withdraws consent or unsubscribes.
After this period, personal data is securely deleted or anonymized.
VII. – Rights of the Data Subject
The customer has the following rights under the GDPR:
- The right to access their personal data,
- The right to rectification of inaccurate or outdated data,
- The right to erasure ("right to be forgotten"),
- The right to restriction of processing,
- The right to object to processing,
- The right to data portability,
- The right to withdraw consent at any time,
- The right to lodge a complaint with a supervisory authority (e.g. the Czech Data Protection Office at www.uoou.cz).
To exercise these rights, customers can contact the seller via email at info@simastar.co.
VIII. – Data Security Measures
The seller implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, loss, or misuse. These measures include:
- SSL encryption on the website,
- Secure data storage and limited access rights,
- Regular system updates and monitoring,
- Cooperation only with verified service providers.
IX. – Changes to the Privacy Policy
This Privacy Policy may be updated from time to time to reflect legal or operational changes. The current version is always available on the seller’s website. Customers will be notified of any material changes affecting their rights.