Personal Data Processing Policy (GDPR)
Privacy Policy
Your privacy matters to us. This document explains what personal data we collect, why we process it, and what rights you have under Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
Data Controller
The controller of your personal data is VGTeam s.r.o., registered in the Czech Republic, operating the e-shop at vgteam.cz. Contact: info@vgteam.cz, tel.: +420 739 375 664.
What Data We Process
Depending on how you use our services, we process the following categories of personal data:
- Identification data (first name, last name)
- Contact details (email address, phone number)
- Address data (shipping and billing address)
- Order data (list of purchased products, prices, order date)
- Login credentials (hashed password)
- Technical data (IP address, browser type) when visiting the website.
Purposes of Processing
- Contract performance — processing and delivering your order, managing your customer account
- Legitimate interest — sending information about similar products to existing customers
- Marketing with consent — sending newsletters and promotional offers based on your consent
- Legal obligations — accounting, tax and other statutory obligations.
Legal Basis for Processing
We process data on the basis of: (a) performance of a contract (Art. 6(1)(b) GDPR), (b) legitimate interests (Art. 6(1)(f) GDPR), (c) your consent (Art. 6(1)(a) GDPR), and (d) compliance with a legal obligation (Art. 6(1)(c) GDPR).
Retention Periods
We retain personal data for as long as necessary for the purpose of processing: order data for 10 years (tax and accounting regulations), customer account data for the duration of the account and 3 years after the last activity, newsletter data until consent is withdrawn.
Recipients of Personal Data
We share your data only with trusted processors who support our services: payment gateway providers, shipping companies, email marketing provider, hosting provider. All processors are bound by a data processing agreement and may not use your data for other purposes.
Transfers Outside the EU
We generally do not transfer your personal data to third countries outside the European Economic Area. If such a transfer occurs, we will ensure adequate safeguards in accordance with GDPR (standard contractual clauses, adequacy decisions).
Your Rights
- Right of access — you have the right to obtain confirmation of whether we process your personal data and access to it
- Right to rectification — you have the right to request correction of inaccurate or incomplete data
- Right to erasure ("right to be forgotten") — you have the right to request deletion of data when the purpose of processing has ceased
- Right to restriction of processing — you have the right to request restriction of processing in cases provided by law
- Right to data portability — you have the right to receive your data in a structured, machine-readable format
- Right to object — you have the right to object to processing based on legitimate interests
- Right to withdraw consent — consent given can be withdrawn at any time without affecting the lawfulness of prior processing.
Exercise your rights by email at info@vgteam.cz. We will respond to your request within 30 days.
Right to Lodge a Complaint
If you believe that the processing of your personal data is contrary to GDPR, you have the right to lodge a complaint with the supervisory authority — the Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
Cookies
Our website uses essential cookies to ensure basic functionality (cart, login). We use analytical and marketing cookies only with your consent. Your consent can be withdrawn at any time in your browser settings.
Document Updates
This policy may be updated from time to time. The date of the last update is shown below. We recommend checking this document regularly.
Last updated: June 2025