PRIVACY POLICY

1. Introduction

This Privacy Policy explains how Santarius s.r.o., a company registered in the Czech Republic (Santarius s.r.o.,Závodní 470/3,735 64 Havířov – Dolní Suchá
Czech republic,VAT number: CZ 28611411), collects, uses, stores, and protects your personal data when you visit our website or purchase our products.

We are committed to protecting your privacy and handling your data transparently and securely in compliance with the EU General Data Protection Regulation (GDPR) and applicable Czech data protection laws.

If you have any questions about this Privacy Policy, you can contact us at:
📧 Email: shop@spboarding.com

2. What Personal Data We Collect

We may collect the following categories of personal data:

Identification data: first name, last name, billing and shipping address.
Contact data: email address, phone number.
Order and payment details: information necessary for processing your purchase.
Communication data: contents of your messages or inquiries sent by email or via social media.
Technical and analytical data: IP address, browser type, device information, and website usage statistics collected through cookies and analytics tools.

3. Purposes and Legal Bases for Processing

We process your personal data only for legitimate purposes:

Purpose	Legal basis
To process and deliver your orders	Performance of a contract
To handle inquiries or complaints	Legitimate interest / contract performance
To send transactional and customer service emails	Performance of a contract
To improve our website and user experience	Legitimate interest (analytics)
To send marketing communication (if you consent)	Consent
To comply with legal and accounting obligations	Legal obligation

4. Use of Cookies and Analytics Tools

Our website uses cookies and similar technologies to ensure proper functionality, improve performance, and analyze user behavior.

We use Google Analytics to collect anonymous statistical information about website traffic. This service is provided by Google LLC, located in the United States, which may process data outside the EU. Data transfers are based on the EU–U.S. Data Privacy Framework or standard contractual clauses.

You can manage or disable cookies in your browser settings at any time.

5. Marketing and Social Media

We use social media platforms such as Facebook and Instagram for marketing and communication purposes.
When you interact with our profiles or content, the respective platforms may collect and process your personal data according to their own privacy policies.

We may also send you marketing emails about our products and promotions if you have given your explicit consent. You can withdraw your consent at any time by clicking the unsubscribe link in our emails.

6. Who Has Access to Your Data

Your personal data may be shared with:

Service providers who assist us with IT, logistics, or marketing (e.g., hosting providers, delivery companies, analytics providers).
Payment service providers and accounting partners.
Social media platforms and advertising partners (Facebook, Instagram).

All partners are bound by confidentiality and data protection agreements.

7. Data Retention

We retain your personal data only as long as necessary:

For order and contract data: 10 years (accounting and tax purposes).
For marketing and communication: until you withdraw consent or request deletion.
For analytics: anonymized data may be retained for statistical purposes.

8. Your Rights

Under GDPR, you have the following rights:

Right to access your personal data
Right to rectification (correction)
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with the Office for Personal Data Protection (ÚOOÚ)

If you wish to exercise any of these rights, please contact us at [insert email address].

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
This includes encrypted communication (SSL), access control, and secure data storage.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal changes or improvements in our services.
The latest version will always be available on our website with the effective date clearly indicated.

Effective date: 1.11.2025