Privacy Policy – Elsymco

1. Data controller

Elsymco s.r.o.

Velflíkova 4, Prague 6, 160 00, Czech Republic

Registered in the Commercial Register maintained by the Municipal Court in Prague.

Elsymco s.r.o. (the "controller" or "we") processes personal data in accordance with applicable data protection law. Below you will find detailed information on what personal data we process, for what purpose, and what rights you have.

2. What personal data we process

Depending on how you interact with us, we process the following categories of personal data:

a) Contact and identification data

First and last name
Email address
Phone number
Address (correspondence, billing, delivery)
Company registration and VAT numbers (for business customers)

b) Contractual and business data

Order and contract content
Purchase and communication history
Payment information (we do not store card details; payments are processed by a certified payment provider)

c) Operational and technical data (website)

IP address and approximate location
Browser and device type
Pages visited and time spent on the site
Cookies (see Section 7)

3. Purpose and legal basis for processing

Purpose

Legal basis (GDPR)

Retention period

Performance of a contract (order, delivery of goods)

Art. 6(1)(b)

Duration of the contract + 3 years

Compliance with legal obligations (accounting, tax)

Art. 6(1)(c)

10 years (Czech Accounting Act)

Responding to an inquiry

Art. 6(1)(b) or (f)

Until the inquiry is resolved + 1 year

Protection of legitimate interests (complaints, disputes)

Art. 6(1)(f)

Until the statute of limitations expires (3–4 years)

Sending marketing communications

Art. 6(1)(a) – consent

Until consent is withdrawn

4. Recipients of personal data

We do not sell your personal data to third parties. We share it only to the extent necessary with the following categories of recipients:

Shipping and logistics companies (delivering goods)
Accountants and tax advisors (compliance with legal obligations)
Payment gateway providers (processing payments)
IT and cloud service providers (system administration)
Public authorities (where required by law)

All processors are contractually bound to protect your personal data and may process it only for the specified purposes. Personal data is processed exclusively within the European Economic Area (EEA), or in third countries offering an adequate level of protection.

5. Your rights

As a data subject, you have the following rights against the controller:

Right of access (Art. 15 GDPR) — you may request information about how your personal data is processed and receive a copy of it.
Right to rectification (Art. 16 GDPR) — you may request that inaccurate personal data be corrected or incomplete data be completed.
Right to erasure (Art. 17 GDPR) — you may request the erasure of your personal data once the purpose of processing has ended or if you withdraw your consent.
Right to restriction of processing (Art. 18 GDPR) — under certain conditions, you may request that we restrict the processing of your data.
Right to data portability (Art. 20 GDPR) — you may request your personal data in a structured, machine-readable format.
Right to object (Art. 21 GDPR) — you may object to processing based on the controller's legitimate interest.
Right to withdraw consent — you may withdraw your consent to processing at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, send a request to info@elsymco.com or by post to the controller's address. We will respond without undue delay, and no later than within 30 days.

6. Supervisory authority

You have the right to lodge a complaint with a supervisory authority. For the Czech Republic, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, "ÚOOÚ"):

Pplk. Sochora 27, 170 00 Prague 7, Czech Republic

Tel.: +420 234 665 111

Website: www.uoou.cz

If you are resident in another EU member state, you may instead lodge a complaint with the supervisory authority of your own country of residence.

7. Cookies

Our website may use cookies — small text files stored in your browser. We distinguish between:

Necessary cookies

These ensure the website's core functionality (for example, navigation and security). They cannot be disabled, as the website would not function correctly without them. Your consent is not required for these.

Analytics and statistics cookies

These help us understand how visitors use the website (for example, which pages are most visited). Data is anonymized or pseudonymized. We use these cookies only with your consent.

Marketing cookies

These are used to display relevant advertising. We activate these cookies solely based on your consent, which you can withdraw at any time in the cookie settings.

You can find the retention period for cookies and how to manage them in your browser settings, or in the consent management banner (cookie banner) on our website.

8. Security of personal data

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or disclosure. These include, among others, encryption of data in transit (SSL/TLS), access controls, and regular security audits.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or by a notice on the website. The date of the last update is shown at the top of this document.

10. Contact

If you have any questions about how we process your personal data, please get in touch:

Email: info@elsymco.com
Phone: +420 733 190 578
Address: Elsymco s.r.o., Velflíkova 4, Prague 6, 160 00, Czech Republic

Back to homepage