Privacy policy
This is an English translation provided for information only. In the event of any dispute or discrepancy, the Czech version of these documents is binding.
Controller and contact
The controller of personal data is Miroslav Sádlík s.r.o., Company ID (IČO) 28641400, with its registered office at Slovenská 910, 685 01 Bučovice. Please address any questions or requests concerning personal data to sadlik@play4kids.cz. This information concerns customers, persons interested in products and services, and customers’ contact persons.
What data we need
We process in particular first name, surname, delivery and billing address, e-mail, phone, details of the order, payment and communication and, where applicable, company ID (IČO) and VAT ID (DIČ). For installation and inspection, we also process the installation site, contact persons and the documentation necessary to carry out and document the work. We take photographs documenting the equipment in such a way as to avoid unnecessarily capturing people, especially children.
Contract and inquiry
We process the data needed to handle your inquiry, order, transport, installation, inspection, payment or complaint for the purpose of pre-contractual negotiations and performance of the contract under Art. 6(1)(b) GDPR. Providing this data does not constitute consent to marketing. If you do not provide the necessary data, we may not be able to conclude or perform the contract. We process the data of employees and other contact persons of companies, municipalities or schools on the basis of our legitimate interest in communication and proper performance of the contract.
Legal obligations and protection of rights
We process data on accounting and tax documents to comply with legal obligations under Art. 6(1)(c) GDPR. To the extent necessary, we also keep contract and complaint documentation for the protection of legal claims, for product safety records and for dealing with safety incidents. Where this is not a legal obligation, such processing is based on legitimate interest under Art. 6(1)(f) GDPR.
Website security
The online shop does not maintain customer accounts. We use technical records of access and events to the extent necessary for security and the prevention of misuse on the basis of legitimate interest. Scope and retention periods of technical records: [TO BE COMPLETED: actual logs and retention periods].
Commercial communications
We may send customers offers of our own similar products and services under the conditions of § 7(3) of Act No. 480/2004 Sb., provided they were given the opportunity to refuse such communications easily and free of charge when their contact details were obtained and in each communication. In other cases, we send commercial communications only on the basis of separate, voluntary consent. You can refuse to receive them at any time via the link in the message or at sadlik@play4kids.cz. Consent is not a condition of purchase. Technical measurement of opens or clicks may be used only with an appropriate legal basis and prior information.
Who we make data available to
To the extent necessary, data may be received by carriers and providers of agreed installation or inspection, banks and payment service providers, accountants and tax advisers, legal advisers and providers of hosting, e-shop administration and other IT services. The scope of disclosure corresponds to their task; processors are subject to contractual data protection obligations. Data may also be disclosed to public authorities where required by law. Recipients currently used and their roles: operation of the e-commerce platform, hosting and sending of e-mails – [TO BE COMPLETED: platform and hosting providers]; transport, payments, installation and accounting – [TO BE COMPLETED: actual providers of transport, payments and other services].
Transfers outside the European Economic Area
Services used, any countries of transfer and appropriate safeguards: [TO BE COMPLETED: according to the actual suppliers, or state that no transfers take place]. If a specific transfer takes place, we will state its legal mechanism and how to obtain information about the safeguards used. Remote access by a provider from a third country may also be considered such a transfer.
How long we keep data
We keep the data of an active order for the time needed to process it, to fulfil related obligations and to protect related claims. The subsequent rules are set out in the table. Once the relevant period has expired, we erase or anonymise the data, unless a specific dispute, legal obligation or security reason requires longer necessary retention. We do not automatically keep all data and all communication merely because a ten-year period applies to some tax document.
| Category | Retention period |
|---|---|
| Tax documents subject to the VAT Act | 10 years from the end of the relevant tax period, unless the law provides otherwise. |
| Accounting documents not in the previous category | For the statutory period according to the type of document; ordinary accounting documents generally 5 years. |
| Contract and complaint documentation | [TO BE COMPLETED: chosen period and its starting point, taking into account claims and the nature of the equipment]. |
| Unprocessed and unsuccessful inquiries | 3 years from receipt of the inquiry; after that we anonymise the data. |
| Marketing | Until consent is withdrawn or communications are refused, at most for an internally set period: [TO BE COMPLETED]. Minimal data on the unsubscription may be kept further in order to respect the refusal. |
| Technical records and cookies | According to the actual settings stated in the cookie information and in the security rules. |
Your rights
Under the conditions of the GDPR, you have the right of access to your data and the right to rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interest; you may object to direct marketing at any time, and we will then no longer use the data for that purpose. Consent may be withdrawn at any time without affecting the lawfulness of earlier processing. We usually handle a request within one month; we will inform you in good time of any statutory extension. We may reasonably verify your identity in order to handle the request. Erasure is not possible to the extent that we are required by law to continue keeping the data.
Complaint and automated decision-making
You may lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), www.uoou.gov.cz. We do not carry out automated decision-making with legal or similarly significant effects, or profiling. This provision does not equate the ordinary automatic order confirmation with decision-making under Art. 22 GDPR.
Updates to this information
This information is effective from 1 November 2026. If the actual processing changes, we will update it and announce significant changes in an appropriate manner.