Personal data protection
Download: Personal data protection statement (PDF, in Czech)
I. Controller of personal data
The controller of personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (the 'GDPR') is:
CZECH STYLE, spol. s r.o.
Tečovská 1239, Malenovice, 763 02 Zlín, Czech Republic
Company ID (IČO): 25560174, VAT ID (DIČ): CZ25560174
Email: info@tavinox.com
Phone: +420 571 120 120
II. Purposes and legal bases for processing
| Purpose | Legal basis | Retention period |
|---|---|---|
| Processing an order | Performance of a contract (Art. 6(1)(b) GDPR) | 5 years from the last order |
| Running a B2B account | Performance of a contract (Art. 6(1)(b) GDPR) | Until the account is closed |
| Issuing tax documents | Legal obligation (Art. 6(1)(c) GDPR) | 10 years under the Czech VAT Act |
| Handling a warranty claim | Legal obligation (Art. 6(1)(c) GDPR) | 5 years |
| Contacting you about an order | Legitimate interest (Art. 6(1)(f) GDPR) | For the duration of the business relationship |
III. Categories of data processed
- Identification data: first name, last name, company name, Company ID (IČO), VAT ID (DIČ)
- Contact details: email, phone, delivery address
- Order data: goods ordered, prices, method of payment and delivery
- Login credentials: email, password (stored as a hash)
IV. Recipients of personal data
Personal data may be passed on to the following categories of recipients:
- Carriers — for the purpose of delivering the goods
- Hosting provider — technical operation of the website
- Public authorities — in cases laid down by law
Personal data are not transferred to third countries outside the EU/EEA.
V. Rights of the data subject
- Right of access — to obtain confirmation and a copy of the data processed.
- Right to rectification — to have inaccurate data corrected.
- Right to erasure — to have your data deleted.
- Right to restriction of processing — to have processing restricted in certain cases.
- Right to data portability — to receive your data in a machine-readable format.
- Right to object — to processing based on a legitimate interest.
- Right to lodge a complaint — with the Czech Data Protection Authority (ÚOOÚ).
You can exercise your rights by email at info@tavinox.com or in writing at the company's registered office.
VI. Cookies
The tavinox.com website uses only the technical cookies necessary for it to work properly. Analytics cookies (Google Analytics) are activated only once consent has been given.
VII. Data security
- Encrypted communication (HTTPS/TLS)
- Password hashing (bcrypt)
- Access to personal data restricted to authorised persons only
- Regular data backups
This document is valid and effective from 1 January 2026. This English version is provided for information only. The legally binding version is the Czech original.