PRIVACY POLICY
PRIVACY POLICY
I. Basic Provisions
The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) is Pavel Volkman, ID No. 75932237, with registered office at Lipník 76 (hereinafter referred to as the “Controller”).
Controller contact details:
Address: Lipník 76, Czech Republic
E-mail: info@fan-shop.cz
Personal data means any information relating to an identified or identifiable natural person.
The Controller has not appointed a Data Protection Officer.
II. Sources and Categories of Personal Data Processed
The Controller processes personal data that you have provided or that the Controller has obtained based on the fulfillment of your order.
Processed personal data mainly includes:
• identification data (name, surname)
• contact details (e-mail, phone number)
• address details (delivery and billing address)
• technical data (IP address, cookies, website activity)
III. Legal Basis and Purpose of Personal Data Processing
The legal basis for processing personal data is:
• performance of a contract pursuant to Article 6(1)(b) GDPR,
• legitimate interest of the Controller in direct marketing pursuant to Article 6(1)(f) GDPR,
• your consent to the processing of personal data pursuant to Article 6(1)(a) GDPR (especially for marketing and conversion tracking purposes).
The purpose of processing personal data is:
• order processing and contract fulfillment,
• sending commercial communications,
• measuring advertising campaign effectiveness, conversion tracking, and ad personalization.
For advertising measurement purposes, the Controller uses services provided by Google Ireland Limited (Google Ads).
Within this processing, personal data such as e-mail address, phone number, name, address, IP address, or website behavior information may be transferred.
Before being transferred to advertising systems, personal data is automatically pseudonymized (hashed), meaning one-way encryption is applied. Nevertheless, this still constitutes personal data processing under GDPR.
Data processing for marketing purposes and conversion tracking takes place only based on your consent granted through the cookie banner.
The Controller does not carry out automated individual decision-making pursuant to Article 22 GDPR.
IV. Data Retention Period
The Controller stores personal data:
• for the period necessary to fulfill the contract and exercise legal claims (maximum 15 years),
• for the duration of consent for marketing purposes, no longer than 26 months (or according to the settings of the specific service).
After the retention period expires, personal data will be deleted.
V. Recipients of Personal Data
Recipients of personal data include:
• persons involved in goods delivery and payment processing,
• e-shop platform providers (e.g. Shoptet),
• providers of marketing and analytical services,
• accounting, legal, and tax advisors,
• Google Ireland Limited (Google Ads).
More information about Google’s data processing can be found here:
https://policies.google.com/privacy
VI. Transfer of Personal Data to Third Countries
Personal data may be transferred to third countries outside the European Union, especially to the USA, to Google LLC.
Transfers are carried out based on appropriate safeguards pursuant to Articles 44 et seq. GDPR, especially:
• Standard Contractual Clauses (SCC),
• or participation in the Data Privacy Framework.
VII. Your Rights
You have the right:
• to access your personal data,
• to rectify or erase personal data,
• to restrict processing,
• to object to processing,
• to data portability,
• to withdraw consent at any time.
You also have the right to lodge a complaint with the supervisory authority for personal data protection.
VIII. Personal Data Security
The Controller has implemented technical and organizational measures to secure personal data.
Only authorized persons have access to personal data.
IX. Final Provisions
By placing an order, you confirm that you have been informed about these conditions.
The Controller is entitled to amend these conditions.
The new version will be published on the website.
These conditions become effective on 1 January 2026.