Privacy Policy

The online store www.neatlane.cz (hereinafter referred to as "our website") belongs to the company Digismoothie s.r.o., IČ 03718751, with its registered office at Rohanské nábřeží 678/29, 186 00 Prague, Czech Republic, e‑mail info@neatlane.cz (hereinafter just us"). We pay great attention to the protection of personal data and handle this data very carefully. Below you can read what data we process mainly about our visitors, whether we process it based on their consent or on the basis of another legal reason, for what purposes we process this data and also how long we keep it with us.

What personal data do we process?

Personal data we process:

  1. Identification and address data, i.e. data that enable us to identify you so that we can conclude a contract with you and be able to offer and sell our products to you without undue legal and material risks, e.g. name, surname, delivery address, billing address, address of the collection point, registered office, ID number;
  2. Data related to the purchase contract, i.e. data arising in connection with the performance of the contract, e.g. date of conclusion of the contract, duration, date and reason for termination, date of payment of the purchase price, order history, customer number, data necessary for the proper performance of the contract, incl. amount of the price, possibly bank account number, date of payment of the price;
  3. Electronic data, i.e. data generated in connection with your visit to our site, e.g. device IP/Mac address, cookies, device location data, authentication certificates;
  4. Contact data, i.e. data that allows us to establish contact and communicate with you, e.g. e‑mail address and telephone number;

This personal data reaches us in the following ways:

  1. By providing them to us when communicating with each other via telephone, e‑mail, post, web contact form, etc.
  2. By filling them in one of the forms yourself, e.g. within the user account
  3. By obtaining them from publicly accessible sources (e.g. public registers of persons, public lists, professional social networks)
  4. By obtaining them from third parties during the provision of legal and related services (custody, mediation of translations, expert opinions, communication with representatives from the Czech Republic and abroad, etc.).
  5. By obtaining them in the performance of our legal obligations.
  6. By getting them when you visit our site.
  7. When purchasing from our e-shop
  8. When sending an email address through the newsletter email section of our e-shop

Provision of third party data

If you provide us with data about a third party, it is your responsibility to inform that person and ensure their agreement to these terms of personal data protection.

This situation occurs, for example, when you order some goods, but you need to delegate the delivery to another person who will receive the shipment. At that moment, you must inform this person of this fact and ensure their consent to the terms for the protection of personal data.

You must be able to prove the consent of the third party at any time within 48 hours of our request. These are cases where a third party requests from us proof of consent to the processing of his personal data.

For what purpose do we process your personal data?

Purchase of goods and conclusion of purchase contract

Most often, we process your data for the purpose of complying with the purchase contract, i.e. to successfully implement your order and successfully deliver it. For this purpose, we may pass on your data to third parties, such as the carrier, so that it knows the address to which your package should be delivered. The title for the processing of personal data in such a case is the fulfillment of the contract.

You are under no obligation to provide us with your data for this purpose. However, without this data, we would not be able to sell our products to you and the result would be the impossibility of concluding a purchase contract.

Most often, we obtain data for this purpose via the order form. In this form, the fields are divided into two types.

  1. Mandatory, which are necessary for the creation of a purchase contract and the subsequent implementation of the purchase contract. Simply put, we need this information to be able to process your order. This includes first name, last name, delivery information, billing information, e-mail and telephone. In this case, e-mail and telephone are used for sending confirmation of successful receipt of your order, delivery of payment confirmation, continuous information on the development of the status of your order and subsequent possible communication regarding the order.
  2. Optional, you can fill in voluntarily. They help us specify your requirements and also help us process your order better and more efficiently, but they are not necessary for the actual processing.

Managing user accounts

In order to use the benefits of a user account, you must first register on one of our sites. This will create a place where we will store all your personal data, delivery and billing addresses, settings, loyalty program memberships, shopping lists, favourites, watched products (watchdog), product ratings, completed feedback from questionnaires and other similar data .

The processing of personal data for this purpose is justified by your consent. The provision of personal data based on your consent is voluntary in this case, but without it it would not be possible to create a user account. You can withdraw your consent and delete your account at any time. If you let us know that you no longer wish to be registered, we will immediately cancel your account.

The provision of personal data in this case is not a legal or contractual requirement. You are therefore under no obligation to provide us with your personal data for this purpose.

Customer care and customer line

We are always trying to improve our customer care and in order to be able to respond as quickly as possible to your suggestions and problems, we need adequate documents for this, i.e. your data and a maximum of information related to you.

If you decide to use one of the social networks to communicate with us, you should keep in mind that the processing of the data provided in this way is also governed by the conditions of these social networks, which we cannot influence.

The processing of personal data for this purpose is justified by our legitimate interest in the possibility of communicating with customers or your consent, depending on the method of communication and which party initiates the communication. The provision of personal data in this case is not a legal or contractual requirement. You are therefore under no obligation to provide us with your personal data for this purpose.

If you decide to publish a review, you do so voluntarily and we process your data based on your consent. You can withdraw your consent at any time. The provision of personal data in this case is not a legal or contractual requirement. You are therefore under no obligation to provide us with your personal data for this purpose.

Marketing

We divide into two types:

  1. E-mail marketing - We send you all commercial communications by e-mail only based on your consent or our legitimate interest based on the establishment of a business relationship. You can unsubscribe from these communications at any time, either directly in the marketing communications or after logging into the "My Account" section and clicking on "E-mail communications settings". We try to send you as few messages as possible and only those that we believe will interest or at least please you. You can object to this processing or withdraw your consent (info@neatlane.cz).
  2. Telemarketing and SMS - We only send you all commercial messages in the form of SMS based on your consent or our legitimate interest based on the establishment of a business relationship. You can unsubscribe from these communications at any time either directly in the marketing communications or after logging into the "My Account" section and clicking on "Mobile communications settings". We try to send you as few messages as possible and only those that we believe will interest or at least please you. In exceptional cases, someone from the marketing department or customer support may contact you by phone. You can object to this processing or withdraw your consent (info@neatlane.cz).

If you do not know how to unsubscribe from marketing communications, regardless of the reason we send them, please contact us at info@neatlane.cz, our goal is not to spam you unnecessarily if you do not care about our communications.

For example, if we send you an e-mail, we also record some metadata, e.g. the time when you opened the message, the device on which you opened the message and other technical parameters about this device. As a rule, this is not personal data, however, if some personal data were the subject of such processing, we do so on the basis of our legitimate interest. In such a case, you can raise an objection at any time (info@neatlane.cz).

Product ratings, reviews and content on our site

After we deliver the goods to you, you may receive a request for their evaluation - how satisfied you were with your purchase from us and how satisfied you are with the individual products. We use the independent services of Klaviyo Reviews, owned by Klaviyo, Inc., for this review. As part of this evaluation, we transfer data about the content of your order and your e-mail, to which you will receive an invitation to evaluate. We do not share any other personal information and it is up to you whether you want to send your review through this service.

In order to be active on our website and add or create any content such as reviews or comments and discussion posts, you must be registered and logged in in most cases. This content is then linked to your user account, and therefore your profile photo, name and surname may be visible in these posts. Thanks to linking to a user account, you have the possibility to edit or delete some content. You are solely responsible for the content you enter and the activity under your account, therefore we do not recommend publicly sharing any of your personal information through content that you do not want to be publicly available. You can learn more about the processing of personal data in connection with the user account above (purpose no. 2).

Creation of personalized content

We would not like to recommend something that does not make sense to you, therefore we use the collected data about you to personalize the content and offer on our website and in marketing communications. For this, we use information about products that you visit often, your previous orders (your order history), etc. This is how we achieve the fact that we can recommend goods that should most likely make you happy. And we believe this way is better than recommending random products.

The processing of personal data for the purpose of creating personalized content and advertising is justified by your consent or our legitimate interest. The provision of personal data based on your consent is voluntary in this case, but without it it would not be possible to provide you with personalized content and advertising. You can withdraw your consent at any time, just contact us at info@neatlane.cz. The provision of personal data in this case is not a legal or contractual requirement. You are therefore under no obligation to provide us with your personal data for this purpose.

We are largely able to provide personalized content thanks to cookies, which you can set as you like and manage your consent.

Compliance with legal obligations

We also process some of your personal data for the purpose of fulfilling our legal obligations, especially accounting and tax. The processing of personal data for this purpose is justified by the fulfillment of legal obligations. We have to process this data about you.

Improving our site

During your visit to our site, we collect information such as your IP address, browser settings that help us determine which language you prefer, the pages you visit, including the date and time of your visit, which links you click, which allows us to adjust the content for you so that it is more interesting for you and we offered you products and content that you will appreciate.

We may also measure the number of visits, user mouse movements and similar information. This information helps us make our site more intuitive and thus leads to the improvement of our services.

On what legal bases do we process your personal data?

We process your personal data on the basis of one of the following titles:

Performance of the contract

Explanation

Example

We process your personal data if it is necessary to fulfill the contract.

If we enter into a purchase contract together, we will process your identification, address and contact data so that we can fulfill our obligations and check the fulfillment of yours.

Legitimate interest

Explanation

Example

We process your personal data if our legitimate interest in processing them outweighs your rights and freedoms.

When you enter our pages, we process statistical data about browsing them, mainly so that we can improve our services, better target them and offer you more relevant content.

Agreement

Explanation

Example

We process your personal data if you give us your consent.

Sending newsletters on the basis that you have provided and agreed to send us an email address via the web form.

Compliance with legal obligations

Explanation

Example

We process your personal data if it is necessary to fulfill a legal obligation.

In order to comply with our legal obligations, we must retain tax documents for 10 years. These documents show, for example, your first and last name, address, etc.

Who do we share your personal data with?

In some cases, we need to transfer your personal data to third parties, who, however, comply with the terms of personal data protection, which coincide in the main points with ours and do not limit your rights in any way. These are the following cases:

  1. Delivery of goods - In order for the carrier you choose to deliver your shipment, they need to know where and to whom. Therefore, in order to fulfill the purchase contract, we give the carrier your name and surname (or the name and surname of the person who will receive the shipment), delivery data, your telephone number, to which the carrier will send you information about the delivery, or call to clarify the delivery, and in the event , that you ordered the shipment on cash on delivery, we also pass on the total amount that you have to pay to the carrier. Carriers need this data only to deliver the shipment and are not authorized to use this data in any other way, i.e. they are obliged to delete this data immediately after delivery of the shipment.
  2. Transfer of information to carriers – To transfer information to individual carriers, we use the Balíkobot.cz service belonging to the company Balikobot, s.r.o. This service only works for the transfer of information between us and the carrier you have selected. The company Balikobot, s.r.o. has no right to handle forwarded information other than to hand it over to carriers.
  3. Card Payment - For card payment, we use Shopify Inc., located at 151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P2L8. We do not manipulate your payment cards or come into contact with this data. When paying by card only to this company, we will provide payment information, such as the order number (or variable symbol), your first and last name, e-mail and the total amount you want to pay. We then, upon completion of the process by Shopify Inc. we will receive information whether the payment was successful or not.
  4. Business and Transactional Communications - We send through Shopify Inc.'s services, which are bound by their confidentiality. The content of the message may contain some of your personal data, but the given service does not have the right to handle this content in any way, outside of service intervention. We use the Klaviyo tool from Klaviyo Inc. for e-mail mailings. Service and complaints - We also pass on the necessary personal data to our goods suppliers or the service center in the event of a requested complaint.
  5. Backoffice - We entrust the things we don't understand to the experts. To the extent necessary, we therefore transfer your personal data for processing to accountants, tax advisors, auditors or legal service providers. In the vast majority of cases, this only concerns data contained on accounting and tax documents. In the same way, in order to be able to offer and sell our products and provide services at the highest level, we have to cooperate with a whole range of information and communication service providers.
  6. Public authorities - We make your personal data available to public authorities in cases where we are obliged to do so on the basis of a purchase contract (typically when filing a lawsuit, proposal, initiative, etc.) or if required by law. Disclosure of personal data to these entities does not take place regularly, but only randomly.
  7. Social network operators – Based on your order history, interests and behavior on our pages, you may be shown personalized content and offers on social networks. This is primarily made possible by cookies, which are used by so-called widgets that are embedded on our pages.
  8. Microsoft - We work with Microsoft Clarity and Microsoft Advertising to use behavioral metrics, user maps and session replay to learn how you use and interact with our website in order to improve our services. Website usage data is captured using first and third party cookies and other tracking technologies. In addition, we use this information for website optimization, security and advertising.
  9. Klaviyo Inc. - The Klaviyo tool helps us in sending email campaigns and newsletters, therefore it uses some of your data to improve the accuracy of the content sent, e.g. name, gender, number of purchases in the e-shop, etc.
  10. Google LLC - at Google, we use Google Analytics tools and advertising services that help us better understand your behavior on our e-shop and advertise more accurately, e.g. as part of sales or search ads on Google websites.
  11. Meta Platforms Inc. - at Meta, we use advertising on their platforms, so for precise targeting we have to use the Meta Pixel and Conversion API, which connect data from our e-shop with those already existing on Meta platforms.

How long do we keep your personal data?

We divide personal data into two groups, according to which the period of their retention is also determined.

  1. Mandatory - These are the data that the law requires us to keep for how long. This data cannot be deleted even at your request. This is mainly data related to the purchase contract (e.g. for tax documents, this period is set at least 10 years). In order to fulfill your requirements and provide you with quality customer support, we also keep your contact details until the conclusion of the business relationship, i.e. until the expiry of the warranty of the goods you have purchased plus 2 months in addition.
  2. Optional – This is all data that serves us to improve our services, target our messages, etc. You have the right to request the deletion of this data at any time. We also keep this data for the duration of the business relationship, or 26 months after your last activity. After expiration, we automatically delete this data, including your user account.

How do we secure your personal data?

Personal information and collected data are primarily stored on Shopify Inc. servers, which have a high level of security and are maintained by hundreds of programmers.

We use encrypted ( https ) transmission for your browser's communication with our server, which ensures that no one can intercept this communication and your data is thus safe.

What rights do you have when processing personal data?

Just as we have certain rights to the processing of personal data, you also have your rights, which you can exercise at any time.

The right to access the personal data we process about you

You have the right to ask us for a list of all personal data that we process about you. We can generate this list for you after proper verification of your identity. If you are interested in it, send your request to the e-mail address info@neatlane.cz. In the event of a repeated request, we are entitled to charge a reasonable fee for a copy of the provided personal data based on the administrative costs incurred.

The right to correct personal data

If you discover that we are recording personal data about you that is incorrect, you have the right to ask us to correct it. We will be very happy for these suggestions and we will be happy to fix them for you as soon as possible. Again, just contact us at info@neatlane.cz.

The right to erasure of personal data

You have the right to request the deletion of all personal information that we process about you, with the exception of those that we are required to retain by law, or this information is used to fulfill a purchase contract that has not yet been concluded, and without this data we would not be able to achieve a successful conclusion. To delete personal data, please contact us at info@neatlane.cz.

You can request the erasure of personal data if:

  1. a) Your personal data are no longer needed for the purpose for which they were collected or processed;
  2. b) We process your personal data illegally;
  3. c) you revoked the consent on the basis of which your personal data was processed, and we have no other authorization (legal reason) to further process this personal data;
  4. d) you object to the processing of your personal data if your personal data is processed for the purpose of marketing (e.g. sending newsletters);
  5. e) you object to the processing of your personal data, which we process on the basis of our legitimate interest, and if we are unable to prove that our legitimate interest outweighs your right to data deletion
  6. f) there is some legal reason that requires the erasure of such personal data; whose
  7. g) we process the child's personal data without parental consent to such processing.

The right to restrict the processing of personal data

If you are not interested in the complete deletion of your data, but only in the temporary restriction of the processing of your personal data, you can request us to restrict the processing of your personal data.

Right to data portability

If you want us to transfer your personal data to a third party, you can exercise your right to data portability. However, if the exercise of this right could adversely affect the rights and freedoms of third parties, we will not be able to comply with your request.

The right to object to the processing of personal data

If you feel that we are processing some personal data without authorization, you can object to this action. We process some data as part of our legitimate interest and we will be happy to specify these reasons for you, just write to us at info@neatlane.cz and specify what collected data you are asking us to defend.

The right to file a complaint about the processing of personal data

We will be happy if you send any objections or questions regarding the protection of personal data directly to us, so that we can provide you with immediate help or support in your matter of resolution. Just write to us at info@neatlane.cz. However, the application of the procedures mentioned above does not in any way limit your right to file a complaint with the Office for Personal Data Protection, based in Pplk. Sochova 27, 170 00 Prague 7.

The right to withdraw consent at any time

If the processing of your data is based on your consent, you have the right to withdraw this consent at any time. Regarding the processing of your personal data for the purpose of sending commercial messages, you can withdraw your consent to the processing of personal data and the sending of commercial messages simply by replying "No" to the given email or by expressing your disagreement in any other way in the reply, or by clicking on the relevant link, if provided at the end of the commercial communication.

The right to information about automated decision-making, including profiling

You are not the subject of any decision based solely on automated processing, including profiling, which would have legal effects for you or would similarly significantly affect you.

Are your personal data transferred outside the EU?

If we transfer your personal data for processing to a third country (outside the European Economic Area, which also includes countries outside the European Union - Iceland, Liechtenstein and Norway) or an international organization, we do so only on the condition that the European Commission has decided to that this third country or international organization provides an adequate level of protection, or if the recipient of the personal data has provided appropriate safeguards for its protection and enforceable rights of the data subject and effective legal protection of data subjects are available in the destination country.

What legislation governs data processing and privacy protection?

The processing of personal data in the Czech Republic is mainly governed by the following legal regulations:

  • by Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Regulation on the Protection of Personal Data,
  • by Act No. 110/2019 Coll., on the processing of personal data,
  • by Act No. 89/2012 Coll., Civil Code.

The terms of personal data protection are valid and effective from 7/20/2023.