PRIVACY POLICY
1. Controller responsible for data processing
GTR SEEDS EU s.r.o.
Sokolska 1883/8
12000 Prague
Czech Republic
Email: info@gtrseeds.eu
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the General Data Protection Regulation (GDPR) and applicable Czech and EU data protection laws.
2. Access data and hosting
When you visit our website, technical data may automatically be collected in so-called server log files, such as:
Browser type and browser version
Operating system used
Referrer URL (previously visited page)
IP address
These data are processed to ensure the smooth operation and technical security of the website.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in the secure and technically reliable operation of our website).
Our online shop is operated using the Shopify platform. In the EEA, personal data are initially processed by Shopify International Limited, Ireland. Shopify may use affiliated companies and service providers in other countries to provide its services. Where personal data are transferred outside the EEA, appropriate safeguards and applicable legal transfer mechanisms are used in accordance with the GDPR.
3. Orders in the online shop
When you place an order in our online shop, we collect the following data:
Name
Billing address
Shipping address
Email address
Payment information, depending on the selected payment method
Legal basis: Art. 6(1)(b) GDPR (performance of a contract and pre-contractual measures).
Where we are legally required to retain transaction, accounting or tax information, processing is also based on Art. 6(1)(c) GDPR.
4. Payment service providers
Depending on the payment method available and selected during checkout, we use payment service providers including:
Trust Payments and Apcopay
Other payment providers as displayed and selectable during checkout
Bank transfer in EUR or CZK
The data necessary for payment processing are transmitted to the respective payment provider solely for the purpose of processing the payment.
The respective payment provider may process your data under its own legal responsibilities and privacy terms.
5. Cookies and tracking
Our shop uses cookies that are necessary for the use of the shopping cart and other basic website functions.
Marketing, analytics and other non-essential cookies are only used with your prior consent via the cookie consent banner. Where processing is based on your consent, you may withdraw your consent at any time through the available cookie settings.
Our website may also contain embedded content from third-party providers, such as YouTube. When such content is loaded, technical information such as your IP address may be transmitted to the respective provider. Where consent is legally required for such processing, the content or associated cookies are only activated after consent has been provided.
6. Transfer of data to shipping service providers
For shipping and delivery of your order, we transfer the necessary data, such as your name, shipping address and other information required for delivery, to the logistics or parcel service provider used for your order.
Legal basis: Art. 6(1)(b) GDPR (performance of the contract).
7. Duration of storage
We store personal data only for as long as is necessary for:
Performance and processing of the contract
Accounting and invoicing
Compliance with statutory retention obligations
Where statutory retention obligations apply, the relevant data are stored for the legally required period.
After expiry of these periods, the data are deleted or anonymised in accordance with legal requirements, unless further storage is legally permitted or required.
8. Your rights
You have the following rights, subject to the applicable legal requirements:
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time where processing is based on consent
Right to lodge a complaint with a data protection supervisory authority
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
The competent supervisory authority in the Czech Republic is:
Office for Personal Data Protection
(Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
Email: posta@uoou.gov.cz
You may also have the right to lodge a complaint with another competent supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement.
9. Contact for data protection matters
For all questions regarding data protection or to exercise your data protection rights, please contact:
GTR SEEDS EU s.r.o.
Sokolska 1883/8
12000 Prague
Czech Republic
Email: info@gtrseeds.eu