Privacy Policy (GDPR)

1. Who is the data controller
The controller of personal data is TLOYA, s.r.o., with its registered office at Jantarová 3347/7, Ostrava, 70200, ID No.: 04295331 (hereinafter referred to as the "Controller"). You can contact me via email at: maximpachomov@email.cz.

2. What data I collect and why
I process only the personal data you entrust to me for the purpose of fulfilling your order:
  • Name, surname, and address: So I know who to send the TLOYA products to and where.
  • Email and phone number: For order confirmation and communication with the carrier (so you receive delivery updates).
  • Billing details: For issuing tax documents as required by law.

The legal basis for this processing is the performance of a contract (delivery of goods) and compliance with legal obligations (accounting).

3. Who else has access to the data
I do not sell your data. I only pass it on to verified partners essential for the e-shop's operation:
  • Carriers: (e.g., Zásilkovna, PPL, Česká pošta) – they receive only what is necessary to deliver the package.
  • E-shop solution / web hosting providers: For the technical operation of the website.
  • Accounting / Invoicing systems: For processing accounting.

4. How long I keep the data
I retain personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship and subsequently for the period required by legal regulations (e.g., 10 years for tax documents).

5. Your rights
You have the right to request access to your data, its correction, or deletion (unless prevented by a legal obligation, such as invoice archiving). In case of doubt, you can contact the Office for Personal Data Protection.