consent to the processing of personal data

PERSONAL DATA PROCESSING POLICY (GDPR)

U KIDS – Byblos Trade Services, s.r.o.

Valid and effective from: 12 September 2026

1. Who Is the Data Controller

The data controller is Byblos Trade Services, s.r.o., with its registered office at náměstí Republiky 656/8, Staré Město, 110 00 Prague 1, Company ID No.: 26498472, VAT ID No.: CZ26498472, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 85969 (the “Controller” or “U KIDS”).

The Controller’s contact details: U KIDS store, Havířská 581/3, Prague 1, 110 00; email: info@ukids.cz; telephone: +420 601 564 044; website: www.ukidsalon.cz.

This Policy explains how the Controller processes the personal data of customers, website visitors, customer account users and other individuals who communicate with the Controller.

2. Legal Framework

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act No. 110/2019 Coll., on Personal Data Processing, Act No. 480/2004 Coll., on Certain Information Society Services, and other applicable legislation.

3. What Personal Data We Process

identification details, particularly first name and surname;
contact details, particularly email address, telephone number, delivery address and billing address;
details of orders, purchased goods, prices, selected delivery and payment methods, and purchase history;
data necessary for complaints, returns, withdrawal from contracts and customer support;
data relating to a customer account, where the customer creates one;
data relating to communications with the Controller;
technical data about website use, such as IP address, device and browser details, and data relating to cookies or similar technologies, where used;
records of consent, withdrawal of consent and objections to direct marketing.

4. Purposes and Legal Bases for Processing

4.1 Order Processing and Performance of the Contract

We process personal data to receive and process orders, handle payments, deliver goods, communicate with customers and fulfil other obligations arising from the sales contract. The legal basis is the performance of a contract or taking steps prior to entering into a contract.

4.2 Complaints, Returns and Withdrawal from Contracts

We process data to receive, record and handle complaints, returns and withdrawals from contracts, including submissions made through the website’s “Returns and Complaints” feature. The legal bases are the performance of a contract and compliance with the Controller’s legal obligations.

4.3 Customer Account

If a customer creates a customer account, we process the data necessary to maintain the account, enable login and provide access to account features. The legal basis is the performance of a contract or, where applicable, our legitimate interest in providing and securing customer services.

4.4 Accounting, Tax and Other Legal Obligations

We retain and further process certain data because accounting, tax, consumer protection and other legislation requires us to do so. The legal basis is compliance with a legal obligation.

4.5 Protection of Rights and Dispute Resolution

We may also process personal data to the extent necessary to protect our rights, establish or defend legal claims, prevent fraud and protect website security. The legal basis is our legitimate interest.

4.6 Marketing Communications and Direct Marketing

If you consent to receiving marketing communications, we process, in particular, your email contact details for this purpose until you withdraw your consent. You may withdraw your consent at any time.

If we obtained your electronic contact details in connection with the sale of our product or service, we may use them, subject to the conditions laid down by law, to send marketing communications about our own similar products or services. Every marketing communication provides a simple, free way to opt out of further communications.

5. Who May Receive Personal Data

We disclose personal data only to the extent necessary to parties involved in operating the online store or fulfilling our obligations. These may include, in particular, the following categories of recipients:

carriers and collection point providers;
payment service providers and banks;
providers of e-commerce, hosting, IT and technical solutions;
providers of accounting, tax and legal services;
providers of email, marketing and analytics services, where used and where an appropriate legal basis for processing exists;
public authorities and other bodies where disclosure is required by law or necessary to protect our rights.

Where a supplier acts as a data processor, it processes data only on our instructions and under the relevant contractual arrangements.

6. Transfers of Personal Data Outside the European Economic Area

Some providers of technical, analytics, cloud or marketing services may also process personal data outside the European Economic Area. Where such a transfer takes place, we ensure that an appropriate legal mechanism under the GDPR is in place, such as a European Commission adequacy decision or standard contractual clauses, where applicable to the transfer concerned.

7. How Long We Retain Personal Data

we retain data necessary for the performance of a contract for the duration of the contractual relationship and subsequently for as long as necessary to protect our rights and comply with legal obligations;
we retain accounting and tax documents for the periods required by applicable legislation, generally 5 to 10 years depending on the type of document;
we retain data relating to complaints, returns and withdrawals from contracts for as long as necessary to handle the case and subsequently protect legal claims;
we process customer account data for as long as the account exists and subsequently, to the extent necessary, for the period required to settle rights and obligations;
we process data based on consent until that consent is withdrawn or until the purpose for which it was given ends;
retention periods for cookies and similar technologies depend on their purpose and the settings specified in the cookie banner or the relevant cookie settings.

8. Cookies and Similar Technologies

The Website may use technical cookies that are essential for its operation. Prior user consent is required to store or read non-essential cookies, particularly analytics or marketing cookies, unless otherwise provided by law.

You may grant or refuse consent to non-essential cookies through the cookie banner and subsequently change your settings. Withdrawing consent must be as easy as giving it.

Details of the specific cookies used, their providers, purposes and storage periods are available in the current cookie settings on the Website.

9. Your Rights

In connection with the processing of personal data, and subject to the conditions set out in the GDPR, you have, in particular, the right:

to access your personal data;
to have inaccurate or incomplete personal data rectified;
to have personal data erased where the statutory conditions are met;
to restriction of processing;
to data portability where the statutory conditions are met;
to object to processing based on legitimate interests, including direct marketing;
to withdraw consent to the processing of personal data at any time where processing is based on consent; withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn;
to lodge a complaint with the Czech Office for Personal Data Protection.

You may exercise your rights by emailing info@ukids.cz or writing to the Controller’s contact address.

10. Automated Decision-Making and Profiling

Unless expressly stated otherwise on the Website, we do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Any marketing analysis or segmentation is used only to the extent permitted by law.

11. Security of Personal Data

We implement appropriate technical and organisational measures suited to the nature and risks of processing to protect personal data against unauthorised access, loss, misuse, alteration or destruction.

12. Changes to This Policy

We may update this Policy from time to time, particularly when the services used, processing methods or applicable legislation change. The current version is always published at www.ukidsalon.cz.

13. Contact

Please send questions about personal data protection or the exercise of your rights to info@ukids.cz, or write to:

U KIDS store, Havířská 581/3, Prague 1, 110 00.