Privacy Policy (GDPR)

Document Version: 1.1.2018_001

This document describes how we use and process the personal data you have provided to us. You will also find information on how to contact us if you have questions about your personal data. We will be happy to answer any questions you may have.

Identity and contact details of the controller:

Company:  DECOLED s.r.o.
Headquarters:  Fráni Šrámka 18, Prague 5, 150 00
Number:  25683853
Tel.  +420 800 160 160
E-mail: info@decoled.cz

What type of personal data do we collect?

We only collect personal data for the purpose of delivery of the ordered shipment or the implementation of the offered service on the basis of the performance of the concluded contract. For the delivery of the shipment we need First Name, Last Name, Delivery Address, Billing Address, Email and payment details according to the type of payment.

For what purpose do we process personal data?

The processing of personal data is necessary for the fulfillment of the contract formed when the order is placed, and for the following purposes:

  • Information about order status.
  • Delivery of ordered goods.
  • Setting up a personal account with the possibility to set your privacy.
  • Making any complaints.
  • Information about product news.
  • Contact email from the advice inquiry.

We also need your email address to inform you about discounts and special promotions, contests and other interesting news. You must give your informed consent to this enhanced marketing communication. Consent is provided by confirming the email sent to you upon order submission or by completing the form to register for these emails.

If you do not wish to receive this information, you have the option to remove your consent at any time. This option can be found in the footer of each email or in the privacy section of your account. You can also contact the authorized person at the email above.

What personal data do we share with third parties?

E-shop is connected to several third-party applications that further process the data for their own purposes. For a complete list of the third-party applications that our e-shop uses, please refer to your account in the Privacy section.

Unless you have placed an order and have created a personal account, the e-shop has not passed any personal data to third-party applications. We collect information about your computer through third party applications. This data is anonymous. They cannot identify you as a person and are only used to create statistics and analyze them afterwards.

Duration of processing of personal data

The processing of personal data will take place from our side for the duration of the contract. We follow the formation of the purchase contract, which begins with the delivery of the order or the sending of the consent for marketing communication. This period is 2 years. After this time, we only archive statutory documents.

How we use cookies

We use two types of cookies. Our own, which are used directly for the running of the e-shop. We store favourite products, products added to your basket or products in comparison. We also use third party cookies that store information about your visit to the e-shop anonymously. These can then be used for analytical or marketing purposes. All the information in the cookies we store is anonymous.

What security procedures do we use regarding the storage of personal data?


The Provider has adopted and maintains such technical and organizational measures to prevent unauthorized or accidental access to personal data, its alteration, destruction or loss, unauthorized transfer, other unauthorized processing, as well as other misuse of personal data.

  1. Anonymization of personal data.
  2. Ability to restore the availability of personal data and access to them in a timely manner and in the event of physical or technical incidents.
  3. Process of regular testing, assessment and evaluation of the effectiveness of the technical and organizational measures in place to ensure the security of processing.
  4. Multi-level firewall.
  5. Anticipatory protection and control of unauthorized access.
  6. Encrypted data transmission through IT technologies.
  7. Access to personal data only for authorized persons of the Provider.
  8. Servers with personal data locked in server room.

How can you control the personal data you have provided?

If you are our customer (you have sent at least one order), you are given access to a personal account. Here, under the privacy tab, you will find an overview of the personal data we store about you and for which purpose we process it.

You will also find an overview of the third parties that interfere with our e-shop and to whom we transfer your personal data.

Here you have the possibility to control the consents to the use of your personal data and there is also the possibility, to withdraw the consents or your entire account and delete your personal data.

General Provisions

  1. The customer provides his/her personal data to the seller for the purpose of concluding a purchase contract with the seller and proper continuation of the legal relationship between the customer and seller based on the concluded purchase contract. Consent to the processing of personal data in its entirety according to this article is not a condition that would in itself prevent the conclusion of a purchase contract.
  2. The customer voluntarily provides his/her personal data and agrees to their disclosure to third parties under the conditions set out below.
  3. Personal data will be processed in electronic form in an automated manner or in printed form in a non-automated manner.
  4. In the event that the Buyer believes that the Seller or the Processor carries out processing of his/her personal data which is in conflict with the protection of the Buyer's private and personal life or in conflict with the law, in particular if the personal data is inaccurate with regard to the purpose of its processing, he/she may:
  5. Request an explanation from the seller or processor, either at his/her electronic address or in writing,
  6. Request the seller or processor, either by request to his/her electronic address or in writing, to rectify the situation thus created
  7. If the buyer requests information regarding the processing of his/her personal data, the seller is obliged to provide him/her with this information at his/her electronic address or in writing by post. The Seller has the right to charge a reasonable fee for the provision of information according to the previous sentence, not exceeding the costs necessary to provide the information, in the case of repeated requests.
  8. The Seller is a duly registered personal data controller. Customers' personal data is secured against misuse. The handling of personal data of customers is governed by the relevant provisions of Act No. 110/2019 Coll., on protection of personal data and on amendment of certain acts, in valid and effective wording.
  9. Any misconduct, queries, leakage or misuse of personal data can be reported to the relevant Personal Data Protection Office (PDPO)
.