1. Who processes personal data
The data controller is BORÁK INDUSTRIES, s.r.o., Company ID (IČO): 08753091, with its registered office at Vlčnovská 2066, 688 01 Uherský Brod, e-mail: info@relicodes.cz, phone: +420 604 647 507 (hereinafter the "Controller").
This document explains how we process the personal data of e-shop customers, digital profile administrators, persons referred to in digital profiles, website visitors, and visitors to digital profiles.
2. What personal data we process
We only process personal data that is necessary for operating the e-shop, processing orders, delivering goods, operating the digital service, customer support, fulfilling legal obligations, and protecting our legitimate interests.
- Order details — first name, surname, e-mail, phone number, billing and delivery address, order number.
- Payment details — information about payment status, the chosen payment method, amount, date of payment. We do not process full payment card details ourselves; these are processed by the payment provider.
- Communication details — e-mails, messages, complaints, enquiries, history of communication with customer support.
- Data in the digital profile — the name of the person, dates of birth and death, photographs, videos, texts, locations, family or memorial information entered by the profile administrator.
- Technical data — IP address, device type, browser, basic operational logs, data necessary for the security of the service.
- Application data — login credentials, profile identification, uploaded content, profile settings, profile capacity usage.
3. Why we process the data
We process personal data mainly so that we can accept and process orders, deliver goods, enable the activation and management of the digital profile, ensure the functioning of the Relicodes application, provide customer support, resolve complaints, and fulfil our legal obligations.
- Processing orders and delivering goods — performance of the purchase contract.
- Operation of the application and digital profile — performance of the purchase contract.
- Customer support and complaints — performance of the purchase contract and legal obligation.
- Accounting and tax records — legal obligation.
- Protection against misuse of the service, security and dispute resolution — legitimate interest.
- Sending commercial communications to customers — legitimate interest or consent, depending on the specific situation.
- Marketing campaigns, if used — consent or legitimate interest, depending on the specific tool and situation.
4. Content uploaded to the digital profile
The profile administrator is responsible for having the right to upload photographs, videos, texts and other information to the digital profile. If the content contains personal data of living persons, the profile administrator should ensure that they have the appropriate consent or another legal basis for its use.
Relicodes is a service intended for the dignified preservation of memories. It is not permitted to upload content to the profile that infringes the rights of other persons or is hateful, offensive, pornographic, unlawful, misleading, or otherwise contrary to the purpose of the service.
5. Who we share the data with
We may share personal data, only to the extent necessary, with trusted partners who help us operate the e-shop, deliver goods, accept payments, operate the application, store data, or provide customer support.
- Shopify and e-shop platform providers — operation of the e-shop, orders, payment processing, technical infrastructure.
- Payment providers — processing of card payments, Apple Pay, Google Pay and other payment methods.
- Carriers and logistics partners — delivery of ordered goods.
- Hosting and cloud service providers — data storage, operation of the application, operation of digital profiles.
- Accounting, tax and legal advisors — fulfilment of legal obligations and protection of legal claims.
- Public authorities — only where required by law or a legitimate request.
Where personal data is transferred outside the European Union or the European Economic Area, such transfer takes place only where the conditions set out in the applicable legal regulations are met, in particular on the basis of appropriate contractual safeguards or another lawful mechanism.
6. How long we retain the data
We retain personal data only for as long as is necessary for the purposes for which it was collected. Order and accounting data are retained for the period required by law. Data relating to the digital profile is retained for the duration of the service, or for as long as necessary for archiving, service restoration, dispute resolution or compliance with legal obligations.
The content of a digital profile may be retained for a long period, as the main purpose of the Relicodes service is to preserve the memorial profile for future generations. If the profile administrator requests deletion of the profile, we will process the request within a reasonable time, unless prevented from doing so by a legal obligation or legitimate reason.
7. Cookies and similar technologies
The Relicodes website and e-shop may use technical cookies that are necessary for the proper functioning of the website, shopping cart, ordering process, security and payments. These necessary cookies do not require consent, as the e-shop could not function correctly without them.
If analytical, advertising or marketing cookies are used on the website, we will use them only in accordance with the applicable legal regulations and, where required, on the basis of the visitor's consent. If we do not use such cookies, there is no need to actively offer or request marketing cookie consent.
8. Data subject rights
In connection with the processing of personal data, you have the right to request, in particular, access to your personal data, correction of inaccurate data, erasure of data, restriction of processing, data portability, or to object to processing based on a legitimate interest.
Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
You can exercise your rights by e-mail at info@relicodes.cz. If you believe that we are processing your personal data in violation of legal regulations, you have the right to contact the Office for Personal Data Protection at www.uoou.cz.
9. Data security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or destruction. Nevertheless, no online system can be considered absolutely secure. The profile administrator is obliged to protect their application login credentials and not share them with unauthorised persons.