Privacy Policy

Introduction

DeVitality is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or use our services. This policy complies with the General Data Protection Regulation (GDPR) and Czech Republic data protection laws.

Information We Collect

Information You Provide

• Name, email address, phone number, and postal address when you contact us or place an order
• Payment information processed securely by our payment providers
• Communication preferences and product interests
• Any information you provide in messages, forms, or correspondence

Information Collected Automatically

• Browser type, device information, and operating system
• IP address and general location information
• Pages visited, time spent on site, and navigation patterns
• Referring website and search terms used

How We Use Your Information

We use collected information for the following purposes:

• Processing and fulfilling your orders and requests
• Responding to your inquiries and providing customer support
• Sending order confirmations and shipping notifications
• Improving our website functionality and user experience
• Analyzing website traffic and usage patterns
• Complying with legal obligations and regulations
• Preventing fraud and ensuring website security

Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Consent: When you provide explicit consent for specific purposes
• Contract Performance: To fulfill orders and provide requested services
• Legitimate Interests: To improve our services and prevent fraud
• Legal Obligation: To comply with applicable laws and regulations

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. For detailed information about our cookie practices, please see our Cookie Policy.

Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your data with:

• Service Providers: Payment processors, shipping companies, and technology providers who assist in operating our business
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In the event of a merger, acquisition, or sale of assets

All third parties are contractually obligated to maintain data confidentiality and security.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure SSL/TLS encryption for data transmission
• Regular security assessments and updates
• Access controls and authentication requirements
• Employee training on data protection practices

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Typically:

• Customer account information: Duration of relationship plus 3 years
• Order and transaction records: 7 years for tax and accounting purposes
• Marketing communications: Until you withdraw consent
• Website analytics: 26 months maximum

Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data under certain conditions
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us using the information below.

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Children's Privacy

Our website and products are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy regularly.

Contact Information

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

DeVitality
Klatovská třída 87
301 00 Plzeň, Czechia
Email: [email protected]
Phone: +420 377 524 896

Supervisory Authority

You have the right to lodge a complaint with the Czech data protection supervisory authority:

Office for Personal Data Protection (ÚOOÚ)
Pplk. Sochora 27
170 00 Prague 7, Czech Republic
Website: uoou.cz