Privacy Policy


1. General Provisions

The controller of personal data pursuant to Art. 4 (7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is:

  • Name/Company: Václav Zahrádka - PlotterPen

  • Company ID: 24427039

  • Registered Office: Čenětická 2413/1a, Praha 4, 149 00

  • Email: info@plotterpen.com

2. Sources and Categories of Personal Data

The Controller processes personal data provided by you via the order form or obtained during the fulfillment of your order:

  • Identity data: Name, surname.

  • Contact data: Email address, phone number, shipping and billing address.

  • Order data: Details of the products purchased and transaction history.

3. Purpose and Legal Basis for Processing

The legal basis and purpose for processing your data are:

  • Performance of a contract: To process your electronic order, deliver goods, and handle potential warranty claims (Art. 6 (1)(b) GDPR).

  • Compliance with legal obligations: To meet accounting and tax requirements imposed by law (Art. 6 (1)(c) GDPR).

  • Legitimate interest: To ensure communication and protection of the Controller's rights (e.g., debt collection).

Note: Your data will not be used for marketing purposes or newsletter distribution.

4. Data Retention Period

The Controller stores personal data:

  • For the period necessary to exercise the rights and obligations arising from the contractual relationship (typically for 10 years following the termination of the contract as required by accounting and tax laws).

  • Once the retention period expires, the Controller shall delete the personal data.

5. Recipients of Personal Data (Subcontractors)

To fulfill the contract, the Controller uses the services of third parties:

  • Webnode AG: Provider of the e-shop platform.

  • Shipping Companies: Česká pošta (Czech Post) for delivery purposes.

  • Payment Processing: MBank, for the purpose of verifying the transaction.

The Controller does not intend to transfer personal data to a third country (outside the EU) or an international organization.

6. Your Rights

Under the conditions set out in the GDPR, you have:

  • The right to access your personal data.

  • The right to rectification (correction) of your data.

  • The right to erasure (right to be forgotten).

  • The right to object to the processing.

  • The right to data portability.

  • The right to lodge a complaint with the Office for Personal Data Protection if you believe your rights have been violated.

7. Data Security

The Controller declares that all appropriate technical and organizational measures have been taken to secure personal data, including:

  • Restricted access to data (passwords, authorized personnel only).

  • Secure servers and use of antivirus software.

  • Encrypted communication between the website and the user.

8. Final Provisions

By submitting an electronic order, you confirm that you have been informed about the conditions of personal data protection. The Controller reserves the right to update these terms. The current version is always available on the website.

This policy comes into effect on: 27. 01. 2026