Home / GDPR

GDPR

The operator of the e-shop, Tomáš Marek, at cocoafarm.de, ID No. 04830717, registered office at Častonín 19, Pelhřimov, processes personal data provided by the Buyer for the purpose of fulfilling and additionally confirming the Terms and Conditions, for the purpose of processing electronic orders, delivering goods, settling payments, and necessary communication between the contracting parties for the period required by special legal regulations.

Basic provisions

1.The personal data controller pursuant to Section 5(o) of Act No. 18/2018 on the Protection of Personal Data, as amended (hereinafter referred to as the "Act") is Tomáš Marek, ID No. 04830717, with its registered office at Častonín 19, Pelhřimov (hereinafter referred to as the "Controller");

2. The contact details of the Controller are: e-mail: biobezobalu@gmail.com, tel.: +420722012059;

3. Personal data means any information identifying a natural or legal person.

Sources of processed personal data

1. The Controller processes personal data provided to it with the consent of the buyer and obtained by the Controller on the basis of the performance of the Purchase Agreement and the processing of an electronic order in the cocoafarm.de online store;

2. The controller only processes the buyer's identification and contact details necessary for the performance of the Purchase Agreement;

3. The controller processes personal data for the purpose of delivery, payment settlement, and necessary communication between the contracting parties for the period required by special legal regulations. Personal data will not be disclosed and will not be transferred to other countries.

Purpose of personal data processing

The controller processes the buyer's personal data for the following reasons:

1. For the purpose of registration on the website cocoafarm.de pursuant to Section 13(1)(a) of Act No. 18/2018 on the protection of personal data;

2. For the purpose of processing the buyer's electronic order (name, address, e-mail, telephone number);

3. For the purpose of fulfilling the rights and obligations arising from the contractual relationship between the buyer and the Administrator;

4. The provision of personal data is a necessary requirement for the performance of the purchase contract. Without the provision of personal data, the contract cannot be concluded.

Personal data retention period

1. The Controller stores personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between the buyer and the Controller and for a period of 3 years from the termination of the contractual relationship;

2. After the retention period for personal data has expired, the Controller is obliged to delete the data.

Recipients and processors of personal data

The third party that receives the buyer's personal data is the Controller's subcontractors. The services of these subcontractors are unconditionally related to the successful fulfillment of the purchase contract and electronic order between the Controller and the buyer.

The Controller's subcontractors are:

  • Česká pošta, s.p. (delivery service),
  • DPD (delivery service),
  • Uloženka by WE|DO (delivery service),
  • Zásilkovna.cz (delivery service),
  • PPL (delivery service),
  • Google Analytics (website analysis)

Personal data security

1. The controller declares that it has taken all appropriate technical and organizational measures necessary to secure the buyer's personal data;

2. The controller has taken technical measures to secure personal data storage, in particular securing access to computers with passwords, using antivirus software, and performing regular computer maintenance.

Final provisions

1. By sending an electronic order on the website cocoafarm.de, the buyer confirms that they have been familiarized with the terms and conditions of personal data protection and that they accept them in their entirety;

2. The buyer agrees to these rules by checking the box in the order form.

3. The administrator is entitled to change these Rules at any time. The new version of the Rules must be published on the website.

These Rules come into effect on December 16, 2025.