Terms of personal data protection

1. Data Controller

We are Tufty s.r.o., with registered office at Bělehradská 858/23, Praha 2, 120 00, Czech Republic
Company ID: 21828083
VAT ID: CZ21828083

We operate an e-shop on the website www.tufty.eu.

The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 (GDPR) is Tufty s.r.o.

Contact details:

We have not appointed a Data Protection Officer, as we are not obliged to do so under GDPR.

2. What Are Personal Data

Personal data means any information relating to an identified or identifiable natural person, in particular a name, contact details, address, identification number, online identifier or other information related to physical, economic or social identity.

3. Processing of Personal Data

a) Contact Form

When you contact us via the contact form or email, we process the following data:

  • name
  • email address
  • delivery address (if provided)
  • product or service you are interested in

Purpose:
To respond to your enquiry and communicate with you regarding our products or services.

Legal basis:
Article 6(1)(b) GDPR – pre-contractual measures taken at your request.

Retention period:
Maximum 1 year from the last communication, unless further cooperation is established.

b) Purchase in the E-shop

When you make a purchase, we process:

  • name and surname
  • billing and delivery address
  • email address
  • phone number
  • order and payment details

Purpose:
To fulfil the purchase contract, deliver goods, communicate about orders, complaints and customer support.

We also process personal data to comply with our legal obligations, especially accounting and tax obligations.

Legal basis:
Article 6(1)(b) GDPR – performance of a contract
Article 6(1)(c) GDPR – compliance with legal obligations

Retention period:
For the duration of the contractual relationship and subsequently 10 years, as required by applicable accounting and tax laws.

c) Newsletters (Commercial Communication)

If you purchase from us and do not opt out, we may send you commercial emails regarding similar products.

Legal basis:
Legitimate interest and applicable national legislation implementing EU rules on electronic communications.

Retention period:
A maximum of 5 years from your last purchase, or until you unsubscribe.

You can unsubscribe at any time via the link in the email or by contacting us at info@tufty.eu.

4. Recipients of Personal Data

Your personal data may be accessed by trusted partners who help us operate the e-shop, in particular:

  • Shoptet a.s. – e-shop platform provider
  • Shipping providers: Zásilkovna, PPL, DHL
  • Payment providers: Fio banka, Shoptet
  • Email service providers

Personal data may also be accessed by:

  • company management
  • authorized employees
  • Shoptet administrators

All data are processed exclusively within the European Union.

5. Automated Decision-Making

We do not use automated decision-making or profiling.

6. Cookies

Cookies are small text files stored on your device when you visit our website.

We use:

  • Necessary cookies – required for website functionality (cannot be disabled)
  • Analytical cookies – used to analyze website traffic (only with your consent)
  • Marketing cookies – used for advertising personalization (only with your consent)

We use tools such as Google Analytics and Sklik. Analytical and marketing cookies are activated only after your explicit consent via the cookie bar.

Consent can be withdrawn at any time via browser settings.

7. Your Rights

Under GDPR, you have the right to:

  • access your personal data
  • rectification or erasure of personal data
  • restriction of processing
  • data portability
  • object to processing
  • lodge a complaint with a supervisory authority

If you believe your data are processed unlawfully, you may contact the Data Protection Authority or a court.

8. Contact

If you have any questions regarding personal data protection, contact us at:
info@tufty.eu
+420 736 264 977

Effective date: 17 March 2023