1. Who processes your personal data

The controller of your personal data is:

Matěj Peltán

operating the online store under the Bohemia Fox brand

Company ID No. (IČO): 04539389

Address: Uralská 689/7, 160 00 Prague, Czech Republic

Email: info@bohemiafox.com

Phone: +420 777 583 989

Bohemia Fox operates this online store, its content, features, products and related services. The store is operated through the Shopify platform (Shopify Inc., 151 O'Connor Street, Ottawa, Ontario, K2P 2L8, Canada).

This Privacy Policy explains how we collect, use, retain and share personal data when you visit our website, place an order or otherwise communicate with us.

2. What personal data we process

Depending on how you use our store, we may process in particular the following information:

• first and last name,
• billing and shipping address,
• telephone number,
• email address,
• information about your order and purchased products,
• payment method, payment confirmation and other information necessary to process the transaction,
• information about returns, refunds or order cancellations,
• information you provide when communicating with customer service, including communication through social media,
• information about your device, browser and internet connection,
• IP address and other technical identifiers,
• information about how you use and browse our website,
• information obtained through cookies and similar technologies,
• information required to manage your customer account, if you create one.

We do not directly process full payment card details. Payment information required to complete a payment is processed by the relevant payment service provider.

We do not process security questions or claim that we store full payment card or bank account numbers ourselves.

3. Where we obtain personal data

We may obtain personal data:

• directly from you, for example when you place an order, create an account, communicate with us or interact with our social media profiles (Facebook, Instagram),
• automatically when you use the website, for example through cookies,
• from Shopify and other service providers that help us operate the store,
• from payment service providers, carriers and other partners involved in fulfilling your order.

4. Why we use your data and the legal basis for processing

We process personal data only when we have an appropriate legal basis for doing so.

Performance of a contract

We use your data to:

• process your order,
• receive and confirm payment,
• deliver products,
• communicate with you about your order,
• process returns, refunds or complaints,
• manage your customer account.

The legal basis is the performance of a contract or taking steps prior to entering into a contract.

Compliance with legal obligations

We process certain information because we are required to do so by law, particularly in relation to:

• accounting,
• taxation,
• consumer protection,
• handling complaints,
• cooperation with authorized public authorities.

Legitimate interests

We may also process data for our legitimate interests, particularly for:

• protecting the store against fraud and misuse,
• securing the website and customer accounts,
• providing customer support,
• keeping records and protecting our legal claims,
• basic improvement of the operation of the store and our services.

We process data on the basis of legitimate interests only where your rights and freedoms do not override those interests.

Consent

Based on your consent, we may process data particularly for:

• sending marketing emails and newsletters where consent is required,
• using optional analytics and advertising cookies, such as Google Analytics or the Meta/Facebook Pixel, if we activate them in the store,
• personalized advertising,
• other purposes for which we expressly ask for your consent.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Shopify notes that merchants in the EU must identify the legal basis for individual processing purposes. Common legal bases include contract, legal obligation, legitimate interest and consent.

5. Marketing

If you subscribe to marketing communications, for example through Shopify Email, we may send you information about Bohemia Fox products, collections, promotions and offers.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in each marketing email, through the consent withdrawal page, or by contacting us at info@bohemiafox.com.

Even after unsubscribing, we may continue to send you non-marketing messages related to your orders, payments or customer account.

6. Cookies and similar technologies

Our website uses a cookie consent banner that is active for the EU/EEA and the United Kingdom. The cookie banner allows you to consent to or reject non-essential categories of cookies.

At present, our website uses cookies necessary for:

• operation of the store and shopping cart,
• website security,
• remembering your preferences,
• basic traffic measurement.

We currently do not use tools such as Google Analytics or the Meta/Facebook Pixel. If we introduce them in the future, they will only be activated after the required consent has been provided through the cookie banner, and this Privacy Policy will be updated accordingly.

You can change your cookie preferences at any time through the cookie banner or privacy settings available on the website.

7. Who we may share personal data with

Where necessary, we may share personal data with:

• Shopify,
• payment service providers,
• carriers and logistics service providers,
• IT, hosting and cloud service providers,
• customer support providers,
• accountants, tax advisers and legal advisers,
• social media operators, such as Meta Platforms, Inc. – Facebook and Instagram, if you contact us through these platforms or use their features,
• analytics and marketing service providers, such as Google Analytics or the Meta/Facebook Pixel, if their use is activated and you have provided the required consent,
• public authorities where we are legally required to provide the information.

We do not share personal data with third parties without a valid reason and we do not sell personal data as a standalone customer database.

8. Our relationship with Shopify

Our online store is operated through the Shopify platform. Shopify processes personal data necessary to operate and improve its platform and services.

Information you provide in our store may be transferred to Shopify and its service providers, including entities located outside your country of residence.

We use Shopify Network Intelligence, which may process information about your use of our store together with information from other stores operated through Shopify, for purposes such as fraud prevention, personalization or analytics.

We also use the Matrixify application for importing and exporting product data. Matrixify has access to relevant product and order data to the extent necessary to provide this functionality.

For more information, please see:

• Shopify Consumer Privacy Policy (shopify.com/legal/privacy/app-users),
• Shopify Privacy Portal,
• Shopify Data Processing Addendum (DPA) (shopify.com/legal/dpa).

Shopify requires these links to be provided particularly when Shopify Network Intelligence and other enhanced services are used.

9. Third-party websites

Our website may contain links to websites or services operated by third parties, including social networks such as Facebook or Instagram.

We are not responsible for the content, security or personal data processing practices of those websites. Before using them, we recommend reviewing their own privacy policies, for example the privacy policy of Meta Platforms, Inc.

10. Personal data security

We take reasonable technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration or disclosure.

However, no method of data transmission or storage can guarantee absolute security. We therefore recommend that you do not send sensitive or confidential information through unsecured communication channels.

11. How long we retain your data

We retain personal data only for as long as necessary for the purpose for which it was collected. In particular:

• Order and customer account data: for the duration of the customer relationship and thereafter for as long as necessary to deal with possible complaints or legal claims.
• Accounting records: for 5 years from the end of the accounting period to which they relate, in accordance with accounting legislation.
• Tax documents: for 10 years from the end of the tax period to which they relate, in accordance with VAT legislation and other tax regulations.
• Data processed on the basis of consent, such as marketing: until consent is withdrawn.
• Cookies and website traffic data: for the period specified in the cookie banner settings, but no longer than the lifetime of the relevant cookie.
• Data relating to complaints or legal disputes: for the duration of the applicable limitation period.

After the relevant retention period has expired, we delete or anonymize the data unless further retention is required by law.

12. International transfers of personal data

Personal data may also be stored or processed outside the Czech Republic, the European Economic Area or the United Kingdom, for example in connection with processing through Shopify in Canada or other service providers.

Where data is transferred to countries that do not provide an adequate level of protection, recognized legal safeguards are used, such as the European Commission's Standard Contractual Clauses or other appropriate safeguards.

Shopify confirms that the GDPR does not require personal data to be stored exclusively in Europe, but it does require appropriate protection when personal data is transferred internationally.

13. Children's data

Our store is not directed at children and we do not knowingly collect children's personal data without an appropriate legal basis.

If a parent or legal guardian believes that a child has provided us with personal data, they may contact us and request that we review or delete the information.

14. Your rights

Depending on the circumstances, you may have the right to:

• request access to your personal data,
• request correction of inaccurate data,
• request deletion of your data,
• request restriction of processing,
• object to processing based on legitimate interests,
• receive your data in a structured and commonly used format,
• withdraw your consent,
• unsubscribe from marketing communications,
• lodge a complaint with a supervisory authority.

Before processing your request, we may ask you to reasonably verify your identity.

You can send your request to info@bohemiafox.com. Information about data subject rights is also published by the Czech Office for Personal Data Protection.

15. Complaints

If you have concerns about the way we process your personal data, please contact us first at info@bohemiafox.com.

You also have the right to lodge a complaint with:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic

The Office for Personal Data Protection accepts complaints concerning suspected breaches of personal data protection rules.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example due to changes in legislation, our services, applications we use or the way we process personal data.

The current version will always be published on this website together with the date of the latest update.

17. Contact

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us:

Matěj Peltán – Bohemia Fox
Company ID No. (IČO): 04539389
Address: Uralská 689/7, 160 00 Prague, Czech Republic
Email: info@bohemiafox.com
Phone: +420 777 583 989