Privacy Policy
Effective from: 1 January 2025 | Version: 1.0
1. Data Controller
The controller of personal data within the meaning of Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) is:
GHS All Service e-Shop
Company ID: 14033445
Chudenická 1059/30, 10200 Praha 10
E-mail: info(@)ghsas.cz
2. Personal Data We Process
- Identification data: company name, company ID, tax ID
- Contact data: e-mail address, phone number, contact person
- Address data: billing and delivery address
- Technical data: IP address, cookies, access logs
- Commercial data: orders, their contents and status
3. Legal Basis and Purpose
| Purpose | Legal basis | Retention period |
|---|---|---|
| Account registration and management | Consent (Art. 6(1)(a) GDPR) | Duration of account + 3 years |
| Performance of purchase contract | Contract (Art. 6(1)(b) GDPR) | Duration of contractual relationship |
| Tax and accounting obligations | Legal obligation (Art. 6(1)(c) GDPR) | 10 years (Czech Accounting Act) |
| Legitimate interest (enforcement of rights) | Legitimate interest (Art. 6(1)(f) GDPR) | Limitation period (3–10 years) |
4. Recipients of Personal Data
Personal data may be disclosed to the following categories of recipients:
- Shipping and logistics companies (for delivery purposes)
- Accounting and tax advisors (for compliance with legal obligations)
- IT service and hosting providers (acting as processors under Art. 28 GDPR)
- Public authorities (on the basis of a legal obligation)
We do not sell personal data to third parties and do not transfer it to countries outside the EEA.
5. Your Rights
As a data subject you have the right to:
- Access — request a copy of the personal data we process about you (Art. 15 GDPR)
- Rectification — request correction of inaccurate data (Art. 16 GDPR)
- Erasure — request deletion where the purpose of processing has ceased (Art. 17 GDPR)
- Restriction — request restriction of processing (Art. 18 GDPR)
- Portability — receive data in a machine-readable format (Art. 20 GDPR)
- Objection — object to processing based on legitimate interest (Art. 21 GDPR)
- Withdrawal of consent — withdraw consent at any time
Send your request to: info(@)ghsas.cz. We will respond within 30 days of receipt.
You also have the right to lodge a complaint with any EU supervisory authority. The controller's competent authority is the Czech Office for Personal Data Protection (ÚOOÚ) (www.uoou.cz).
6. Cookies
Information on the use of cookies is available in the Cookie Policy.
7. Changes to This Document
The controller may update this policy at any time. Users will be notified of material changes by e-mail or by a notice upon login. The current version is always available on this page.