Privacy Policy

The e-shop www.cariuma.de is operated by SPRINT spol. s r.o., with its registered office at Bečovská 1083/3, 104 00 Prague 10 – Uhříněves, Company ID: 497 06 004, registered in the Commercial Register maintained by the Municipal Court in Prague, file no. C 22694.

Our contact details are:

  • Email: info@sprint.cz
  • Phone: +420 724 382 832

Customer contact email for the e-shop:

  • info@cariuma.de

We process certain personal data to provide our services, sell goods, and operate our website.

The processing of personal data is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – “GDPR”).

I. Processing of Personal Data

A. Processing personal data when using the contact form

If you inquire about our products and services, we will process the contact details you provide, especially via the inquiry form. These include: first name, last name, email, phone number, your requirements concerning our products and services, and possibly other data you enter in your inquiry or provide during further communication.

Why?

We use the data to contact you for further arrangements regarding goods and services.

On what legal basis?

This processing is based on Article 6(1)(b) of the GDPR – performance of a contract or steps taken prior to entering into a contract.

How long will we process personal data?

If no further cooperation is established, we will retain your data for a maximum of 6 months from the last communication.

B. Processing personal data when making a purchase

If you make a purchase, we process the data you provide, mainly billing details: name, surname, email, phone number, address, and information about your purchase.

Why?

We need the data to fulfill the contract – deliver the purchased goods. We also use your contact details to communicate with you about your order status, complaints, or inquiries.

Additionally, we process personal data to comply with legal obligations (primarily accounting and tax purposes or complaint handling).

On what legal basis?

This processing is based on Article 6(1)(b) GDPR – performance of a contract, and Article 6(1)(c) GDPR – compliance with legal obligations.

How long will we process personal data?

For the duration of service provision and then 10 years after the last delivery or service.

C. Review verification

If you leave a review after making a purchase, we may verify (where possible) that you are an actual customer and that the review relates to products or services you have truly purchased.

Why?

Consumer protection regulations (especially the Consumer Protection Act) require us to verify any review that we present as authentic.

On what legal basis?

This processing is based on Article 6(1)(c) GDPR – compliance with legal obligations.

How long will we process personal data?

As long as the review is displayed in our marketing materials or on our website.

D. Newsletters (commercial communications)

If you sign up for our newsletter or are an existing customer and did not opt out during your purchase, we may use your email address and phone number to send you updates.

On what legal basis?

If you subscribe, the processing is based on your consent under Article 6(1)(a) GDPR.
If you are an existing customer, it is allowed under Section 7(3) of Act No. 480/2004 Coll. on Certain Information Society Services, unless you opted out.

Consent is voluntary and can be withdrawn at any time.

How long will we process personal data?

For 2 years after consent is given or after your last purchase. You can unsubscribe at any time via the unsubscribe link or by contacting us.

E. Monitoring calls to our customer support line

If you call our customer service, the call may be monitored.

Why?

To record how we assisted you, what was agreed, and to ensure continuity in customer service.

On what legal basis?

This processing is based on Article 6(1)(f) GDPR – legitimate interest.

How long will we process personal data?

For 3 months, unless the call contains information that must be stored longer to comply with legal obligations or to defend or enforce legal claims – in such cases, the recording is kept for as long as necessary.

You can object to this processing – contact us via the details above.

F. Analytics

We use data about your purchase (what, when, under what conditions) for analytical purposes – such as restocking, improving services, or forecasting economic trends.

Why?

To manage and develop our business effectively.

On what legal basis?

This processing is based on Article 6(1)(f) GDPR – legitimate interest.

How long will we process personal data?

For 12 months, after which we will either anonymize or stop processing the data.

You may object to such processing – contact us.

G. Analytics and ad targeting using contact data

If you have given consent (via banner or form), we may use your phone number and email address for analytics, tracking, and advertising, including tools provided by Google.

On what legal basis?

Based on your consent under Article 6(1)(a) GDPR – consent is voluntary and can be withdrawn anytime.

How long will we process personal data?

For up to 1 year unless you extend or withdraw your consent.

II. Who has access to the data?

Your data remains with us, but selected service providers and contractors who assist in running our business may have access to the data:

  • Payment gateway provider Shop Pay (Shopify International Limited)
  • Shipping companies: GLS, DPD, Zásilkovna
  • Shipping logistics: Balíkobot
  • Email marketing provider: Klaviyo
  • Customer support system: SupportBox
  • Marketing data processors:
    • Google Analytics, Ads, and Merchants (Google LLC)
    • Seznam Sklik and Zboží (Seznam.cz a.s.)
    • Heureka (Heureka Shopping s.r.o.)
    • Facebook (Facebook Ireland Ltd.)
    • eHUB (eHUB.cz s.r.o.)

III. User account

If you create a user account, we process your personal data based on your consent under Article 6(1)(a) GDPR. We process the data you enter in the registration form – name and email – and store order history and profile data (name, surname, delivery addresses).

We use this data to manage your account and provide services as long as the account is active. If inactive for over 5 years since your last purchase, we will deactivate the account and delete your data. You may also deactivate the account at any time – in which case your data will be deleted.

IV. Your rights

If you have questions about your data, please contact us.

We have not appointed a data protection officer.

Under the GDPR, you have the right to contact us for information about the personal data we process about you, to access or rectify such data, to restrict processing, to receive a copy, to request deletion, or (in certain cases) data portability. You can withdraw your consent at any time and object to processing based on legitimate interest.

If you believe we are mishandling your data, you may file a complaint with the Office for Personal Data Protection or take your case to court.