Privacy Policy

1.  Identity and Contact Details of the Controller

The Data Controller is SYN2 s.r.o., with its registered office at Národní 60/28, Nové Město, 110 00 Praha 1, ID No.: 22378154, operating the e-shop under the websites www.conbined.com (hereinafter the “Controller”).

  • Privacy Contact E-mail: info@conbined.com

2.  Categories of Personal Data We Process

We process the following categories of personal data:

2.1  Identification and contact data

  • First name and surname
  • Billing address and delivery address
  • E-mail address
  • Telephone number

2.2  Order and transaction data

  • Details of products and services purchased
  • Order history and status
  • Invoice and payment records
  • Payment data (e.g. amount paid or outstanding, bank account number)

2.3  Communication data

  • Records of our mutual communication (whether conducted in person, in writing, by telephone, or otherwise)

2.4  Technical and usage data (subject to cookie consent)

  • IP address and browser type
  • Browsing and click behaviour on our website
  • Cookie identifiers (analytical and marketing cookies, subject to your consent)

3.  Purposes, Legal Grounds, and Retention Periods

The Controller processes personal data for the following purposes:

  • Performance of Contract

Data (name, address, contact details) processed for the purpose of order processing and maintenance of the User Account. The legal ground is the performance of the contract (Article 6(1)(b) GDPR). Data is kept for the duration of the account or until the order is fully processed, and subsequently for the duration of the applicable limitation period for any related claims.

  • Compliance with Legal Obligations

Personal data processed for accounting and tax purposes (in particular retention of accounting documents). The legal ground is a statutory obligation (Article 6(1)(c) GDPR). Data is retained for 10 years as required by applicable accounting and tax legislation.

  • Legitimate Interest – Direct Marketing to Existing Customers

Sending news and offers to existing customers of the www.conbined.com e-shop. The legal ground is the legitimate interest of the Controller (Article 6(1)(f) GDPR. You may object to this processing at any time, free of charge (see Section 7 below). Data is retained for 3 years from the date of the last purchase.

  • Marketing Based on Consent – Newsletter

If you subscribe to the newsletter without making a purchase, we process your contact data on the basis of your consent (Article 6(1)(a) GDPR) until that consent is withdrawn. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

4.  Sources of Personal Data

The personal data processed by the Controller originates from the following sources:

  1. Data provided directly by you, e.g. in connection with placing an order, creating a user account, or in the course of our mutual communication.
  2. Data obtained from publicly available sources, registers and records, such as the Commercial Register, the Trade Licensing Register, or the Insolvency Register, where relevant for the purposes described above.

5.  Recipients of Personal Data

We transfer your personal data only where necessary and only to the following categories of verified recipients required for the operation of the e-shop:

  • E-shop platform and hosting provider
  • Shipping companies, for the purpose of product delivery
  • Payment gateway providers
  • External accounting services
  • Marketing and analytical tools (e.g. Google, Meta), subject to your cookie consent

Transfer of Data to Third Countries: The Controller may transfer personal data to third countries (outside the EU/EEA) solely in connection with the use of cloud or analytical services (e.g. Google, Meta, Microsoft). In such cases, data is transferred exclusively to providers who guarantee an adequate level of protection, either through standard contractual clauses approved by the European Commission or within the framework of an adequacy decision (e.g. the EU–U.S. Data Privacy Framework).

6.  Automated Decision-Making

No automated decision-making that produces legal effects or similarly significantly affects you takes place in connection with the processing of your personal data.

7.  Your Rights

Under the GDPR, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting us at the e-mail address stated in Section 1 above.

7.1  Right of access (Article 15 GDPR)

You have the right to obtain confirmation as to whether or not your personal data are being processed by the Controller, and, if so, to receive access to those data and to obtain a copy of them.

7.2  Right to rectification (Article 16 GDPR)

You have the right to request correction of any inaccurate personal data we hold about you, and the right to have incomplete personal data completed, including by means of providing a supplementary statement.

7.3  Right to erasure – ‘right to be forgotten’ (Article 17 GDPR)

You have the right to request erasure of your personal data if one of the following grounds applies:

  1. the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  2. you withdraw your consent on which the processing is based and there is no other legal ground for the processing;
  3. you object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object pursuant to Article 21(2) GDPR (objection to direct marketing);
  4. the personal data have been unlawfully processed;
  5. the personal data must be erased for compliance with a legal obligation under EU or Member State law;
  6. the personal data have been collected in relation to the offer of information society services to a child (Article 8(1) GDPR).

Note: the right to erasure does not apply where processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.

7.4  Right to restriction of processing (Article 18 GDPR)

You have the right to request restriction of processing of your personal data in the following cases:

  1. you contest the accuracy of the personal data, for a period enabling us to verify the accuracy;
  2. the processing is unlawful and you oppose erasure and request restriction instead;
  3. we no longer need the data for processing purposes, but you require them for the establishment, exercise or defence of legal claims;
  4. you have objected to processing pursuant to Article 21(1) GDPR, pending verification of whether our legitimate grounds override yours.

7.5  Right to data portability (Article 20 GDPR)

Where the processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format, and to transmit those data to another controller, where technically feasible. This right shall not adversely affect the rights and freedoms of others.

7.6  Right to withdraw consent (Article 7(3) GDPR)

Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You may withdraw your consent by sending a written request to our e-mail address stated in Section 1.

7.7  Right to object (Article 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data which is based on the legitimate interests of the Controller (Article 6(1)(f) GDPR). The Controller shall no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to such processing, free of charge and without providing any reason. Upon receipt of your objection, the Controller shall immediately cease processing your data for direct marketing purposes.

7.8  Right to lodge a complaint (Article 77 GDPR)

You have the right to lodge a complaint with the supervisory authority, which in the Czech Republic is:

The Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz

8.  Voluntary Nature of Providing Personal Data

Providing your personal data for the purpose of processing an order and fulfilling our contractual obligations is a contractual requirement. Without this data, we are unable to process your order or provide our services.

Providing your personal data for the purpose of receiving the newsletter is entirely voluntary and is not a condition for purchasing any product or service from our e-shop. You may withdraw your consent at any time as described in Section 7.6 above.

9.  Cookie Policy

The Controller operates the website [INSERT WEBSITE], which, in accordance with applicable legal regulations, stores files commonly known as cookies on your end devices when you visit the website.

9.1  What are cookies?

Cookies are small text data files that your browser stores on your device. They serve to make the presentation of our website more user-friendly, efficient and secure.

9.2  What cookies does our website use and why?

Our website uses so-called technical cookies, which are strictly necessary for the operation and basic functionality of the website. All such cookies are solely our own company’s cookies (and not third-party cookies).

If you permit it, our website will also use other types of cookies – specifically analytical cookies and marketing cookies.

  • Analytical cookies

Analytical cookies help us continuously improve and optimise the content of our website by collecting data about visits and interactions, which can subsequently be statistically evaluated. Data about visits and interactions are processed anonymously and are therefore not linked to any specific individual.

  • Marketing cookies

Marketing cookies enable us to manage our advertising offer. These cookies allow us to display personalised advertisements for our goods or services to visitors of our website on websites belonging to the advertising networks of the marketing cookie providers we use.

Please note that cookies used on our website may collect and further process your personal data. The legal basis for such processing is: (i) in the case of technical cookies, our legitimate interest in ensuring the operation and basic functionality of our website; and (ii) in the case of all other cookies, your consent to the use of those cookies. 

9.3  Do we need your consent to store cookies?

No consent is required for the storage of technical cookies (see Section 9.2 above). For the storage of all other cookies (analytical and marketing), it is necessary for the website visitor to permit such storage.

9.4  How can you change your cookie settings?

All common browsers offer the option to delete existing cookies, prevent their storage, or conversely to permit their storage. These operations are typically performed in your browser settings; the specific procedure depends primarily on your browser and its version. If you are unsure how to carry out any of these operations, please consult your browser’s help section. Information on the settings of specific browsers can also be found at the following addresses:

  • www.microsoft.com – for Internet Explorer and Microsoft Edge
  • support.google.com – for Google Chrome
  • support.mozilla.org – for Mozilla Firefox
  • help.opera.com – for Opera
  • support.apple.com – for Safari

Please note that if you deactivate the installation of all cookies, including technical cookies, it cannot be excluded that you will be unable to use all the functions of our website or that our website will not display correctly.