Personal Data Protection

Personal Data Protection Terms

Principles of handling your data

We are the company Orbitel s.r.o., company ID number (IČO): 23114070, registered in the Commercial Register kept by the Regional Court in Hradec Králové, file no. C 54487, with its registered office at Němčice 18, 561 18 Němčice.

Place of business and address for sending shipments, complaints (claims) and returns:
Smetanovo náměstí 79, 570 01 Litomyšl

We operate an e-shop at the website:

https://www.orbitel.cz

In order to provide our services, sell goods, process orders, complaints (claims) and B2B registrations, and operate our website, we process certain personal data.

The processing of personal data is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (the “GDPR”).

---

I. Processing of Personal Data

A. Processing of personal data when the contact form is used

If you contact us via the contact form, e-mail, telephone or another communication channel, we will work with the data you provide to us.

Most often, this includes:

• first name and surname,
• e-mail address,
• telephone number,
• the content of your message,
• information about the goods or service you are interested in,
• and, where applicable, any other data you yourself provide to us.

For what reason?

We use the data to contact you and to deal with your enquiry, request for quotation or other request.

On what legal basis?

This is processing under Article 6(1)(b) GDPR – negotiations on a contract or taking steps prior to entering into a contract at your request.

In some cases, the processing may also be based on our legitimate interest under Article 6(1)(f) GDPR, in particular where routine communication with customers is concerned.

For how long will we process the personal data?

Unless further cooperation is established, we will process the data for no longer than 12 months from the last communication.

---

B. Processing of personal data in the case of a purchase

If you make a purchase from us, we will work with the data necessary to process your order.

This includes in particular:

• first name and surname,
• billing address,
• delivery address,
• e-mail address,
• telephone number,
• details of the ordered goods,
• payment details,
• data required for shipping,
• and, where applicable, company ID number (IČO) and tax ID number (DIČ) if you make the purchase as a business.

For what reason?

We need to process the personal data so that we can:

• receive and process the order,
• deliver the goods,
• issue an invoice,
• communicate with you regarding the order,
• handle complaints (claims), returns of goods or enquiries,
• comply with tax, accounting and other statutory obligations.

On what legal basis?

We process the personal data under:

• Article 6(1)(b) GDPR – performance of a contract,
• Article 6(1)(c) GDPR – compliance with a legal obligation,
• Article 6(1)(f) GDPR – legitimate interest, in particular the protection of our legal claims.

For how long will we process the personal data?

For the duration of the performance of the contract and subsequently for the period required by legal regulations, in particular for accounting and tax purposes, usually 10 years from the end of the tax period to which the documents relate.

---

C. Processing of personal data in connection with B2B registration

If you apply for B2B registration or use a B2B account, we process the data necessary to verify the business account and to provide B2B terms.

This includes in particular:

• first name and surname of the contact person,
• company name,
• company ID number (IČO),
• tax ID number (DIČ),
• registered office or billing address,
• e-mail,
• telephone,
• order history,
• customer group settings,
• commercial terms and individual prices.

For what reason?

We process the data for the purposes of:

• creating and managing the B2B account,
• verifying the business,
• setting individual prices,
• processing orders,
• accounting and tax obligations,
• protection against misuse of the B2B account.

On what legal basis?

The processing is carried out under:

• Article 6(1)(b) GDPR – performance of a contract,
• Article 6(1)(c) GDPR – legal obligation,
• Article 6(1)(f) GDPR – legitimate interest.

For how long will we process the personal data?

For the duration of the existence of the B2B account and subsequently for the period necessary to comply with legal obligations and to protect our legal claims, but as a rule for no longer than 10 years from the last order or the last business relationship.

---

D. Processing of personal data in connection with complaints (claims), returns of goods or withdrawal from the contract

If you make a complaint (claim), withdraw from the contract or return goods, we will process the data necessary to handle the request in question.

This includes in particular:

• first name and surname,
• address,
• e-mail,
• telephone,
• order number,
• information about the goods complained of or returned,
• description of the defect,
• photographs or other supporting documents,
• bank account number for refunding the payment.

For what reason?

We need the data in order to:

• handle the complaint (claim),
• refund the payment,
• assess the claim,
• comply with statutory obligations,
• protect our legal claims.

On what legal basis?

The processing is carried out under:

• Article 6(1)(b) GDPR – performance of a contract,
• Article 6(1)(c) GDPR – legal obligation,
• Article 6(1)(f) GDPR – legitimate interest.

For how long will we process the personal data?

For the duration of the handling of the complaint (claim) or the return of goods and subsequently for the period necessary to protect legal claims and to comply with statutory obligations, as a rule 10 years.

---

E. Newsletters and commercial communications

If you are our customer and did not opt out of receiving commercial communications at the time of your purchase, we may use your e-mail address to send you news, special offers and commercial communications relating to our goods and services.

You can unsubscribe at any time via the link in each e-mail, or you can contact us at:

info@orbitel.cz

On what legal basis?

Sending commercial communications to existing customers is permitted under § 7 odst. 3 zákona č. 480/2004 Sb., o některých službách informační společnosti (Section 7(3) of Czech Act No. 480/2004 Coll., on Certain Information Society Services).

If you are not our customer and subscribe to the newsletter separately, the processing is based on your consent under Article 6(1)(a) GDPR.

For how long will we process the personal data?

Until you unsubscribe, but for no longer than 10 years from the last purchase or from the granting of consent.

---

II. Who will have access to the data?

Your data remains primarily with us. Nevertheless, we use certain companies and services that help us with the operation of the e-shop, payments, dispatch, accounting, marketing and customer support.

The following in particular may have access to the personal data:

• the operator of the e-shop platform Shoptet, a.s., Dvořeckého 628/8, 169 00 Praha 6, IČO: 28935675, registered with the Municipal Court in Prague, Section B, Insert 25395,
• the payment gateway provider Shoptet Pay / Shoptet, a.s., Dvořeckého 628/8, 169 00 Praha 6, IČO: 28935675,
• the carrier Direct Parcel Distribution CZ s.r.o. / DPD,
• any other carriers listed in the ordering process,
• providers of accounting and tax services,
• providers of IT services, hosting services and technical support,
• providers of marketing and analytics tools,
• providers of e-mailing services,
• public authorities, where such an obligation is imposed on us by law.

We process personal data primarily within the territory of the European Union. If a transfer outside the EU were to take place, such a transfer would be carried out only where the conditions of the GDPR are met.

---

III. What else you should know

Our company’s data protection officer is Jan Vaňkát, contact: info@orbitel.cz.

Our company does not carry out any decision-making based solely on automated processing which would produce legal effects concerning you or similarly significantly affect you.

If you have any questions concerning personal data, please contact us:

E-mail: info@orbitel.cz
Telephone: +420 778 080 209

For complaints (claims) and returns of goods, you can use:

E-mail: reklamace@orbitel.cz
Address: Smetanovo náměstí 79, 570 01 Litomyšl

---

IV. Use of cookies

Cookies are small text files that are stored on your device when you visit a website. They help the website function properly, remember your choices, measure traffic and, where applicable, display relevant advertising.

We use the following categories of cookies on the website:

Necessary cookies

They are necessary for the functioning of the website and the e-shop. They enable, for example, adding goods to the cart, completing an order, logging in to the customer account or securing the website.

These cookies cannot be switched off, because without them the e-shop would not function properly.

Analytics and statistical cookies

They help us measure traffic and understand how visitors use the website. This allows us to improve the content, features and usability of the e-shop.

We activate these cookies only with your consent.

Advertising cookies

They are used to display relevant advertising, for remarketing and for measuring the effectiveness of advertising campaigns.

We activate these cookies only with your consent.

Consent to analytics and advertising cookies must be freely given, specific, informed and unambiguous; the visitor must be able to refuse consent without being blocked from normal access to the website.

---

Cookies used

The current list of cookies may change depending on the services, add-ons and e-shop settings in use.

You can grant, refuse or change your consent to cookies via the cookie bar on our website. You can also manage cookies in your web browser.

---

Managing cookies in your browser

You can find more information on managing cookies here:

Internet Explorer:
https://support.microsoft.com/cs-cz/help/17442/windows-internet-explorer-delete-manage-cookies

Google Chrome:
https://support.google.com/chrome/answer/95647?hl=cs

Firefox:
https://support.mozilla.org/cs/kb/povoleni-zakazani-cookies

Safari:
https://support.apple.com/cs-cz/guide/safari/sfri11471/mac

Opera:
https://help.opera.com/cs/latest/security-and-privacy/

Microsoft Edge:
https://support.microsoft.com/cs-cz/microsoft-edge

---

V. Your rights in connection with the processing of personal data

Under the GDPR, you have in particular the right to:

• request information about what personal data we process about you,
• request access to your personal data,
• request rectification of inaccurate data,
• request erasure of personal data where the conditions for erasure are met,
• request restriction of processing,
• request data portability,
• object to processing based on legitimate interest,
• withdraw consent where the processing is based on consent,
• lodge a complaint with a supervisory authority.

If you believe that we are not handling your data correctly, you have the right to lodge a complaint with:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Praha 7
Web: https://www.uoou.gov.cz

Complaints concerning possible unlawful processing of personal data are handled by the Office for Personal Data Protection (ÚOOÚ) as the competent supervisory authority.

---

VI. Final provisions

These Personal Data Protection Terms are effective from:

1 May 2026

The controller is entitled to update these terms, in particular in the event of changes to the services used, carriers, payment methods, marketing tools or legal regulations.