PRIVACY POLICY

effective from September 2026

Diametral a.s. is committed to protecting the personal data of customers and visitors to the Hobbytechnik.cz online shop.

This policy explains what personal data we process, for what purposes, on what legal basis, to whom the data may be disclosed, how long we retain it, and what rights are held by the individuals whose personal data we process.

1. Data Controller

The data controller is:

Diametral a.s.
Václava Špačka 1759
193 00 Prague 9 – Horní Počernice
Company registration number: 044 34 374
VAT No.: CZ04434374
registered in the Commercial Register maintained by the Municipal Court in Prague, Section B, File 20964

Email: info@hobbytechnik.cz
Telephone: +420 222 360 423

(hereinafter referred to as ‘the controller’ or ‘we’)

2. What personal data do we process?

In connection with the operation of our online shop, we may process, in particular:

• first name and surname,
• billing and delivery address,
• an email address and a telephone number,
• company name, company registration number and VAT number, if the customer is making a purchase on behalf of an organisation or for business purposes,
• details of the goods ordered, the price, the method of payment and delivery,
• payment-related data, to the extent that it is made available to us,
• order history and business correspondence,
• information relating to a complaint, a return of goods, a withdrawal from a contract or a service request,
• customer account details, if the customer creates one,
• technical data relating to the use of the online shop, such as your IP address, information about your device and web browser,
• data collected via cookies and similar technologies.

We do not store payment card details ourselves if the payment is processed via an external payment service provider and these details are processed directly by that provider.

We do not normally process special categories of personal data within the meaning of Article 9 of the GDPR.

3. Orders and performance of the contract of sale

We process customers’ personal data primarily for the following purposes:

• receipt and processing of the order,
• the conclusion and performance of the contract of sale,
• communication with customers,
• ensuring payment,
• preparation and dispatch of goods,
• arranging transport and delivery of goods,
• issuing accounting and tax documents,
• procedures for withdrawing from a contract, returning goods and making complaints,
• providing warranty and, where applicable, post-warranty servicing.

The legal basis for the processing is, in particular, Article 6(1)(b) of the GDPR – the performance of a contract or the implementation of pre-contractual measures.

Providing the information required to place an order is a contractual requirement. Without this information, we cannot process the order properly or deliver the goods.

4. Compliance with legal obligations

We also process certain personal data because we are required by law to process and store it.

These relate in particular to obligations arising from accounting, tax and other legal regulations.

The legal basis is Article 6(1)(c) of the GDPR – compliance with a legal obligation to which the controller is subject.

5. Legitimate interests

To the extent necessary, we may also process personal data on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR, in particular for the following purposes:

• to protect and enforce our legal claims,
• records of business correspondence,
• to protect the online shop from misuse and fraudulent behaviour,
• ensuring the security of information systems,
• resolving disputes and protecting our rights.

When processing data on the basis of a legitimate interest, we take care to ensure that the rights and freedoms of data subjects are not unduly affected.

6. Customer account

If an online shop allows customers to create an account and a customer does so, we process the data necessary for the management and use of that account.

An account may, for example, allow you to manage your contact details, make it easier to place further orders and access your order history.

We retain customer account data for as long as the account remains active.

If a customer requests that their account be closed, we will close it. This does not affect the continued retention of data which we are obliged or authorised to retain for other reasons, for example in connection with orders that have already been placed, accounting documents, complaints or the protection of legal claims.

7. Records of customers and business transactions

Data relating to customers, orders and business transactions is recorded not only in the online shop system, but also in our customer relationship management (CRM) system.

The following, in particular, may be recorded in these systems:

• identification and contact details,
• details of the customer’s company or organisation,
• order history,
• business and technical communication,
• quotations and related business transactions,
• information required for follow-up customer care.

Only authorised persons have access to this data, to the extent necessary for the performance of their employment or contractual duties.

Where a system or related service is operated by an external provider acting as a data processor in relation to us, the processing is governed in accordance with Article 28 of the GDPR.

8. Payments

When processing an order payment, we process the data necessary to allocate and record the payment.

If a customer uses a payment gateway or another service provided by an external payment service provider, the data necessary to process the payment may be passed on to that provider.

In such cases, sensitive payment card details are usually entered directly into the payment service provider’s secure environment, and the administrator does not have access to the full payment card details.

9. Transport and delivery of goods

If the goods ordered are delivered via an external carrier or logistics partner, we provide them with the information necessary for the delivery of the parcel.

These are usually:

• the recipient’s first name and surname or name,
• delivery address,
• telephone number,
• email address,
• or any other details required for the specific method of delivery.

We only pass on data to the extent necessary to fulfil the order.

10. Commercial communication

At present, we do not send out regular newsletters or bulk marketing communications to customers via the Hobbytechnik.cz online shop.

Should we start sending marketing communications in the future, we will do so in accordance with the relevant legislation, and customers will be able to easily opt out of receiving them.

11. Cookies and similar technologies

The online shop uses cookies and may use other similar technologies.

Cookies that are essential for the operation of the online shop – for example, to retain the contents of the shopping basket, for security, for logging in or for other basic functions – may be used without consent to the extent permitted by law.

Analytical, statistical, marketing and other non-technical cookies, for which consent is required by law, are only used once consent has been given.

Failure to consent to optional cookies must not prevent users from making a normal purchase or using the basic functions of the online shop.

Detailed information about the cookies used, their providers, their purposes and how long they are stored is set out in the separate Cookie Policy and in the online shop’s cookie settings.

You can change or withdraw your consent to optional cookies at any time.

12. Recipients of personal data

Personal data may be disclosed, to the extent necessary, in particular to:

• providers of technical solutions for online shops,
• web hosting, IT and software service providers,
• providers of CRM and other information systems,
• payment service providers and banks,
• carriers and logistics partners,
• providers of accountancy, tax, legal or similar professional services, where necessary,
• to public authorities, where we are required by law to provide the data.

We only disclose personal data to the extent necessary for the purpose in question.

Where the recipient acts as our data processor, the processing is governed in accordance with the requirements of Article 28 of the GDPR.

13. Transfer of data outside the European Economic Area

Some providers of IT, analytics or other technology services may process personal data outside the European Economic Area.

Where such transfers take place, we ensure that they are carried out in accordance with the GDPR, in particular on the basis of a decision by the European Commission on an adequate level of protection or by utilising other appropriate safeguards under the GDPR.

More detailed information about the technologies used on the website may also be set out in the Cookie Policy.

14. Retention period for personal data

We retain personal data only for as long as is necessary for the purposes for which it is processed.

We retain data relating to the order and the contract of sale for the period necessary to fulfil the contract and, subsequently, for the period required to protect and enforce legal claims.

We retain accounting and tax documents for the period specified by the relevant legislation.

We retain data relating to complaints, warranty claims or service requests for the period required to process them and, subsequently, for the period necessary to safeguard legal claims.

We retain the data held in a customer’s account for as long as the account remains active, unless there is another legal basis for the continued retention of certain data.

Once the basis for processing personal data ceases to exist, we will delete or anonymise it, unless its continued retention is required by law or is necessary to protect our rights.

15. Protection of personal data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or unauthorised disclosure.

Access to personal data is restricted to those who require it for the performance of their work or contractual duties.

16. Rights of data subjects

Under the terms of the GDPR, you have, in particular, the right to:

• the right to access your personal data,
• to correct inaccurate or incomplete information,
• the right to have personal data erased,
• to restrict processing,
• data portability, provided that the legal conditions are met,
• to object to processing based on a legitimate interest,
• to withdraw consent at any time, where a particular processing operation is based on consent,
• to lodge a complaint with the supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

You can exercise your rights by emailing info@hobbytechnik.cz or in writing to the registered office of Diametral a.s.

If we have reasonable grounds to doubt the applicant’s identity, we may request further information necessary to verify their identity.

We will respond to requests without undue delay, usually within one month at the latest. In the cases specified by the GDPR, this time limit may be extended.

17. Complaint to the supervisory authority

If you believe that we are processing your personal data in breach of the law, you have the right to lodge a complaint with:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic

18. Automated decision-making

In the day-to-day operation of the Hobbytechnik.cz online shop, we do not make decisions based solely on automated processing, including profiling, which would produce legal effects on the customer or significantly affect them in a similar manner.

19. Changes to this policy

We may update this policy from time to time, particularly in the event of changes to the systems we use, the way in which we process personal data, or the relevant legislation.

The latest version is always published on the Hobbytechnik.cz website.

Last updated: September 2026