Privacy Policy (GDPR)

PRIVACY POLICY for the e-shop DETAIL-store.cz

Last update: August 9, 2026

This privacy policy describes how the company/entrepreneur NOXunity Group s.r.o. (represented by Radek Lövenhöfer), Company ID: 23986620, with registered office/place of business at: Antonína Petrofa 2116/16, 500 09 Hradec Králové, e-mail: info@detail-store.cz, phone: +420 731 225 333, (hereinafter referred to as the "controller" or "we") processes the personal data of website visitors, customers, and other individuals who communicate with us via the e-shop www.detail-store.cz.

These policies are drafted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), related legal regulations of the Czech Republic, and rules for the use of cookies and similar technologies.

1. Who processes personal data

The controller of personal data is:

NOXunity Group s.r.o. | DETAIL-store.cz
Company ID (IČO): 23986620
VAT ID (DIČ): CZ23986620
Registered office/place of business: Antonína Petrofa 2116/16, 500 09 Hradec Králové
E-mail: info@detail-store.cz
Phone: +420 731 225 333

Regarding matters of personal data protection, you can contact us at the e-mail address info@detail-store.cz.

2. What personal data we process

We may process, in particular, the following personal data:

identification data: first name, last name, Company ID, VAT ID,
contact data: e-mail, phone, delivery and billing address,
order and transaction data: ordered goods, order date, shipping and payment method, payment information, order history,
communication data: content of messages, inquiries, complaints, reviews, and other communication with us,
user account data: login credentials, account settings,
technical and online data: IP address, cookies, information about the device, browser, behavior on the website, and website traffic,
other data that you voluntarily provide to us.

The scope of the specifically processed data depends on which services you use, which functions of the website you use, and what permissions or consents you grant us.

3. Where we obtain personal data from

We obtain personal data, in particular:

directly from you during an order, registration, filling out a form, sending an inquiry, review, or complaint,
automatically when using our website through cookies and similar technologies,
from providers of payments, shipping, or technical services, if necessary for processing an order or operating the e-shop,
from the Shopify platform and related services that we use to operate the e-shop.

4. For what purposes and on what legal basis we process data

4.1 Order processing and contract performance

We process personal data for the purpose of accepting and processing orders, delivering goods, communication regarding the order, handling payments, returns of goods, and exercising rights arising from defective performance.

Legal basis: performance of a contract pursuant to Art. 6(1)(b) of the GDPR.

4.2 Accounting and compliance with legal obligations

We process personal data for the purpose of fulfilling obligations under tax, accounting, and other legal regulations.

Legal basis: fulfillment of a legal obligation pursuant to Art. 6(1)(c) of the GDPR.

4.3 Handling inquiries, complaints, and customer support

If you contact us, we process your data for the purpose of answering your inquiry, resolving complaints, grievances, or other communication.

Legal basis: performance of a contract or our legitimate interest in handling communication and protecting our rights pursuant to Art. 6(1)(b) or (f) of the GDPR.

4.4 User account

If you create a customer account, we process the data necessary for its maintenance, administration, and security.

Legal basis: performance of a contract pursuant to Art. 6(1)(b) of the GDPR.

4.5 Sending commercial communications to existing customers

If you have made a purchase from us, we may send you information about our similar products and services.

Legal basis: our legitimate interest in direct marketing and simultaneously proceeding according to the rules for information society services; you have the option to easily unsubscribe in every message.

4.6 Newsletter based on consent

If you sign up for our newsletter without a prior purchase or where required, we will process your e-mail based on your consent.

Legal basis: consent pursuant to Art. 6(1)(a) of the GDPR. You may withdraw your consent at any time.

4.7 Reviews and ratings

If we allow adding reviews, we may process data related to verifying that the review comes from an actual customer and for its publication.

Legal basis: performance of a contract, legitimate interest in the transparency and credibility of reviews, or consent if required in a specific case.

4.8 Website security, fraud prevention, and protection of rights

We may use data to secure the website, protect against misuse, evaluate risky orders, resolve disputes, and protect our rights.

Legal basis: our legitimate interest pursuant to Art. 6(1)(f) of the GDPR.

4.9 Analytical and marketing cookies

If you grant us consent via the cookie banner, we may use analytical and marketing cookies and similar technologies to measure traffic, evaluate behavior on the website, and display more relevant advertising.

Legal basis: consent pursuant to Art. 6(1)(a) of the GDPR and simultaneously consent according to the rules for storing non-technical cookies. In the Czech Republic, prior verifiable consent is required for non-technical cookies; only technical cookies are exempt.

5. How long we store the data

We store personal data only for the time strictly necessary for the given purpose and according to the nature of the processing, in particular as follows:

data related to the order and contractual relationship for the duration of the contractual relationship and subsequently for the time necessary to protect rights and resolve potential claims, generally for no longer than 4 years from the fulfillment of the contract, unless a special legal regulation requires a longer period,
accounting and tax documents for the period stipulated by legal regulations, typically 5 to 10 years,
data on complaints for the duration of the claims and related rights,
customer account for the duration of its existence; after cancellation of the account only for the time necessary to protect rights and fulfill obligations,
marketing communications to existing customers until unsubscription or until our legitimate interest is no longer justifiable,
newsletter based on consent until the withdrawal of consent,
cookies according to their type and settings, for no longer than the duration stated in the cookie banner or in the website settings.

The specific retention period may vary depending on which services you use, whether a dispute or complaint is ongoing, or whether another legal regulation imposes longer archiving on us. The GDPR requires limiting storage only to the time necessary for the purpose of processing.

6. Who we share personal data with

We may share personal data with the following categories of recipients:

provider of the e-commerce platform Shopify,
providers of payment services and payment gateways,
carriers and pick-up points,
providers of accounting, tax, and legal services,
providers of e-mailing tools,
providers of hosting, IT support, security, and technical administration,
providers of analytical and marketing tools, if you grant consent,
public authorities, if required by law.

We transfer personal data only to the extent necessary for the given purpose. If a partner processes personal data for us as a processor, we ensure that the processing is governed by an appropriate contract. The GDPR explicitly provides for informing about recipients or categories of recipients.

7. Shopify and the role of this platform

Our e-shop is operated on the Shopify platform. This means that Shopify provides the technical background for our e-shop and, in connection with this, may process some customer personal data. In its documentation, Shopify states that its Data Processing Addendum is relevant for customer data and simultaneously notes that for certain "Enhanced Services," it may also act as an independent controller.

More detailed information about how Shopify processes personal data can be found in the documentation and policies of Shopify.

8. Transfer of data to third countries

Within the scope of some services used, personal data may be transferred outside the European Economic Area, especially if the relevant providers or their infrastructure are located outside the EEA. If such a transfer occurs, it takes place based on appropriate legal mechanisms, typically the standard contractual clauses of the European Commission or another legal mechanism. Shopify explicitly states the possibility of international transfers and reliance on recognized transfer mechanisms.

Shopify
Google
Meta
Maileon
chat widget
analytical tools
shipping companies (DPD, Zásilkovna)

9. Automated decision-making and profiling

We do not make decisions based solely on automated processing that would have legal effects on you or significantly affect you in a similar way.

If we use analytical or marketing tools and you grant consent for this, segments may be created or basic profiling may occur for the purposes of measuring campaign performance, personalizing content, or advertising. However, this does not constitute automated decision-making in the sense of Art. 22 of the GDPR with legal or similarly significant effects. The GDPR includes informing about automated decision-making and profiling among the rights of data subjects.

10. What your rights are

Under the conditions set out in the GDPR, you have in particular the following rights:

right of access to personal data,
right to rectification of inaccurate data,
right to erasure,
right to restriction of processing,
right to data portability,
right to object to processing based on legitimate interest,
right to withdraw consent at any time, if processing is based on consent,
right to lodge a complaint with a supervisory authority.

In the Czech Republic, the supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů). These rights arise from Art. 15 to 21 of the GDPR.

11. How you can exercise your rights

You can exercise your rights by e-mail at info@detail-store.cz or in writing at the controller's address listed above.

To protect your data, we may reasonably verify your identity before processing the request.

12. Cookies

We use cookies and similar technologies on the website.

12.1 Technical cookies

These cookies are necessary for the website to function, for security, correct display of pages, the shopping cart, login, or privacy settings. No consent is required for these cookies if they are strictly necessary. The Office for Personal Data Protection explicitly states that technical cookies are exempt.

12.2 Analytical cookies

We use them only based on your consent if they help us measure traffic, website performance, and user behavior.

12.3 Marketing cookies

We use them only based on your consent for ad personalization, remarketing, and campaign evaluation.

12.4 Cookie settings

You can change your preferences at any time via the cookie banner.

13. Security of personal data

We have adopted appropriate technical and organizational measures to secure personal data against unauthorized access, loss, misuse, or unauthorized disclosure. The GDPR imposes an obligation on controllers to adopt appropriate security measures.

14. Links to third-party websites

Our website may contain links to third-party websites and services. We are not responsible for their content and processing of personal data. We recommend that you always familiarize yourself with their own privacy policies.

15. Changes to these policies

We may continuously update these policies, especially if our processes, used services, or legal requirements change. We will always publish the current version on this page and adjust the last update date.