Privacy Policy

Protection of your personal data is important to us. This Privacy Policy explains what personal data we process, why we process it, how long we retain it, to whom we may disclose it, and what rights you have in connection with the processing of your personal data.

1. Who is the controller of your personal data?

The controller of your personal data is:

Stat-X CZ s.r.o.
registered office: Mánesova 390/74, 370 01 České Budějovice, Czech Republic
Company ID: 01992333
VAT ID: CZ01992333
registered in the Commercial Register maintained by the Regional Court in České Budějovice, Section C, File No. 21961

E-mail: info@stat-x.cz
Phone: +420 775 945 325

hereinafter referred to as “we” or the “Controller”.

If you have any questions regarding the processing of your personal data, you can contact us using the e-mail address above.

2. What personal data do we process?

Depending on how you use our services and online shop, we may process in particular:

first name and surname,
job title or position,
company name and other business details if they are associated with an identifiable individual,
Company ID and VAT ID where these relate to a self-employed natural person,
billing and delivery address,
e-mail address,
telephone number,
information about orders, enquiries and purchased goods or services,
payment and invoicing information,
information relating to your customer account,
information contained in your communications with us,
information relating to complaints, returns or the exercise of other rights,
technical information relating to the use of our website to the extent described in our Cookie Policy.

We do not process all of the above data in every case. The scope of processing depends on the specific situation and purpose.

3. Why do we process personal data and on what legal basis?

Processing orders and performance of a contract

We process personal data for the purpose of:

receiving and processing orders,
delivering goods or providing services,
communicating with you regarding your order,
processing payments,
handling returns, complaints and other claims arising from the contract.

The legal basis is performance of a contract or taking steps at your request prior to entering into a contract.

Without the information necessary to conclude and perform the contract, we are unable to process your order or provide the requested service.

Enquiries and business communication

If you send us an enquiry or contact us to request a quotation, we process your contact details and the information contained in your enquiry in order to respond, prepare an offer and potentially enter into a contract.

The legal basis is primarily taking steps at your request prior to entering into a contract, or, where appropriate, our legitimate interest in communicating with persons interested in our products and services.

Customer account

If you create a customer account, we process the data necessary to manage the account, enable login, display order history, store your details and provide other customer account functions.

The legal basis is performance of the contract relating to the operation of your customer account.

Accounting and tax obligations

We are required to process and retain certain information contained in invoices and other accounting or tax documents in accordance with applicable legislation.

The legal basis is compliance with a legal obligation to which the Controller is subject.

Protection of legal claims and prevention of misuse

We may retain certain information for the period necessary for the purposes of:

protecting and enforcing our legal claims,
resolving disputes,
preventing fraudulent or other unlawful conduct,
ensuring the security of our systems and services.

The legal basis is our legitimate interest in protecting our rights, property and security.

Internal support, automation and use of artificial intelligence tools

For certain internal activities, we may use automation and artificial intelligence tools, for example when preparing materials, processing communications, providing administrative support, performing analyses or creating content.

Where the use of such tools involves the processing of personal data, we only provide data to the extent necessary for the specific purpose and take appropriate technical, organisational and contractual measures.

We do not use artificial intelligence tools for automated decision-making that would produce legal effects concerning you or similarly significantly affect you.

Marketing communications to existing customers

If you are our customer, we may, in accordance with applicable legislation, send you electronic marketing communications relating to our own similar products and services.

You may object to such communications or unsubscribe at any time free of charge using the unsubscribe link included in each marketing communication.

Newsletter and other consent-based marketing

If you subscribe to our newsletter or otherwise provide us with marketing consent, we process your personal data for this purpose on the basis of your consent.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

4. How long do we retain personal data?

We retain personal data only for as long as necessary for the purpose for which it is processed.

In particular:

data necessary for processing an order and performing a contract is retained for the duration of the contractual relationship and subsequently for the period necessary to protect and enforce rights arising from that relationship,
accounting and tax documents are retained for the period required by applicable legislation; tax documents subject to Czech VAT legislation are generally retained for 10 years from the end of the tax period in which the taxable supply took place,
data relating to a customer account is retained for as long as the account exists and subsequently for the period necessary where further retention is required by law or justified by a legitimate interest,
data processed on the basis of consent is processed until the consent is withdrawn or until the period for which the consent was granted expires,
data processed for the protection of legal claims is retained for as long as the relevant claims may be asserted or need to be defended.

Once there is no longer a reason to retain personal data, we delete or anonymise it.

5. To whom may we disclose personal data?

We do not disclose your personal data to third parties without a valid reason.

However, to the extent necessary, your personal data may be accessed in particular by:

providers of e-commerce, hosting and IT solutions, in particular the provider of the platform on which we operate our online shop,
providers of accounting, ERP, warehouse management and CRM systems,
carriers and logistics service providers, such as PPL,
providers of banking and payment services,
providers of e-mail marketing and communication services, including services used for sending newsletters and other marketing communications,
providers of analytics, advertising and marketing services, in particular Google services used for analytics, measurement and management of advertising campaigns,
providers of automation and artificial intelligence tools, such as OpenAI, where such tools are used in activities that may involve the processing of personal data,
external contractors providing marketing, digital channel management, IT or technical support, where access to personal data is necessary for the performance of their activities,
accounting, tax and legal advisers,
members of the Stat-X group, where they participate in processing a specific order, quotation or service and there is an appropriate legal basis for such disclosure,
public authorities, where we are legally obliged to provide the data.

Some recipients act as our processors and process personal data only on our instructions. Other recipients may, depending on the specific circumstances, act as independent controllers.

We only disclose personal data to them to the extent necessary for the relevant purpose.

6. Transfers of personal data outside the European Economic Area

When using certain providers of technical, analytics, advertising, communication or AI services, personal data may in certain circumstances be processed or transferred outside the European Union or European Economic Area.

This may concern, for example, certain services provided by Google or OpenAI, where personal data is processed when using those services.

Where such a transfer takes place, we use appropriate mechanisms provided for under the GDPR, in particular an adequacy decision of the European Commission, Standard Contractual Clauses or other appropriate safeguards.

Specific information relating to cookies, analytics and advertising technologies is provided in our Cookie Policy.

7. Cookies and similar technologies

We use cookies and similar technologies on our website.

Cookies that are necessary for the operation of the online shop and the provision of the requested service may be used without your consent.

Analytics, marketing and other optional cookies are used only if you give us your consent through the cookie settings.

You may subsequently change your preferences or withdraw your consent.

Detailed information about the cookies we use, their providers, purposes and retention periods can be found in our separate Cookie Policy.

8. What are your rights?

Subject to the conditions laid down in the GDPR, you have in particular the following rights:

Right of access

You have the right to obtain confirmation as to whether we process your personal data and, if so, to obtain access to that data and further information about its processing.

Right to rectification

If your personal data is inaccurate or incomplete, you may request that it be corrected or completed.

Right to erasure

Subject to the conditions laid down in the GDPR, you may request the deletion of your personal data.

The right to erasure is not absolute. For example, we may be required to retain certain data in order to comply with legal obligations or protect legal claims.

Right to restriction of processing

In the circumstances specified by the GDPR, you may request restriction of the processing of your personal data.

Right to data portability

For data processed by automated means on the basis of consent or a contract, you may, subject to the conditions laid down in the GDPR, request that the data be provided to you in a structured, commonly used and machine-readable format or transmitted to another controller.

Right to object

Where we process personal data on the basis of a legitimate interest, you have the right to object to such processing.

Where we process personal data for direct marketing purposes, you may object to such processing at any time. Once you object, we will no longer process your data for that purpose.

Right to withdraw consent

Where processing is based on your consent, you may withdraw it at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

9. How can you exercise your rights?

You may exercise your rights in particular by e-mail at:

info@stat-x.cz

or in writing at:

Stat-X CZ s.r.o.
Mánesova 390/74
370 01 České Budějovice
Czech Republic

Before responding to your request, we may, where justified, request reasonable verification of your identity in order to prevent personal data from being disclosed to an unauthorised person.

10. Right to lodge a complaint

If you believe that our processing of your personal data infringes applicable data protection legislation, you have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic

Up-to-date contact details and further information are available on the website of the Office for Personal Data Protection.

11. Automated decision-making

We do not carry out automated individual decision-making or profiling that would produce legal effects concerning you or similarly significantly affect you.

Any automation or artificial intelligence tools we use serve only as supporting tools. Decisions that may have legal or similarly significant effects on customers are not made solely by automated means.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, in particular in connection with changes to the systems we use, our processing activities or applicable legislation.

The current version is always available on our website.

Effective from: 1. 9. 2026