Zasady ochrany soukromi
1. Ochrana soukromi v kostce
Obecne informace
Nasledujici informace podavaji jednoduchy prehled o tom, co se deje s tvymi osobnimi udaji pri navsteve tohoto webu. Osobni udaje jsou vsechny udaje, podle kterych te lze osobne identifikovat. Podrobne informace o ochrane osobnich udaju najdes v nasi zasade ochrany soukromi uvedene niz.
2. Sber dat na tomto webu
Kdo odpovida za sber dat na tomto webu?
Zpracovani dat na tomto webu provadi provozovatel webu. Jeho kontaktni udaje najdes v pravnich udajich tohoto webu.
Jak sberame tvoje data?
Některá data získáváme, když nám je poskytneš, například při objednávce, při odstoupení přes náš online formulář nebo v e-mailu.
Dalsi data jsou shromazdovana automaticky nasimi IT systemy, nebo po tvem souhlasu, pri navsteve webu. Jde predevsim o technicka data jako internetovy prohlizec, operacni system nebo cas pristupu na stranku.
K cemu tvoje data pouzivame?
Část dat získáváme, aby web fungoval bez chyb. Další data potřebujeme pro objednávky, zákaznický účet a podporu. Měření návštěvnosti probíhá bez cookies a jen souhrnně.
Jake mas ve vztahu ke svym datum prava?
Mas pravo kdykoli zdarma ziskat informace o puvodu, prijemcich a ucelu tvych ulozenych osobnich udaju. Mas take pravo pozadovat opravu nebo vymaz techto dat. Pokud jsi udelil souhlas se zpracovanim dat, muzes jej kdykoli s ucinky do budoucna odvolat.
3. Hostovani
Obsah naseho webu hostujeme u nasledujiciho poskytovatele: Vercel Inc., 340 Pine Street Suite 701, San Francisco, California 94104, USA.
Podrobnosti najdes v zasadach ochrany soukromi Vercelu: https://vercel.com/legal/privacy-policy
4. Obecne informace a povinne oznameni
Soukromi
Provozovatele techto stran berou ochranu tvych osobnich udaju velmi vazne. Tve osobni udaje zpracovavame duverne a v souladu s pravnimi predpisy o ochrane osobnich udaju a s touto zasadou ochrany soukromi.
Informace o spravci
Spravcem zpracovani osobnich udaju na tomto webu je:
Laurids Pucher e.U.
Frauengasse 14
8430 Leibnitz
Rakousko
E-mail: laurids.pucher@raceready.bike
Doba ulozeni
Pokud v teto zasade ochrany soukromi neni uvedena konkretnejsi doba ulozeni, zustavaji tve osobni udaje u nas do doby, nez pomine ucel jejich zpracovani. Pokud uplatnis opravnenou zadost o vymaz nebo odvolas souhlas se zpracovanim dat, budou tve udaje smazany, pokud nemame jine pravne pripustne duvody pro jejich uchovani.
5. Sber dat na tomto webu
Cookies a místní úložiště
Nepoužíváme cookies ani místní úložiště pro reklamu nebo analýzu. Následující seznam uvádí vše, co tento web ukládá ve tvém prohlížeči. Každá položka je technicky nezbytná pro košík, přihlášení nebo nastavení, které sis zvolil. Podle § 165 odst. 3 rakouského zákona o telekomunikacích z roku 2021 není potřeba souhlas, proto zde není cookie banner. Položky můžeš kdykoli smazat v prohlížeči. V checkoutu nastavuje Shopify vlastní cookies, platí pro ně zásady ochrany osobních údajů Shopify.
- NEXT_LOCALE (cookie, 1 year). Remembers the language of the website.
- raceready_currency, raceready_currency_source (cookie, 1 year). Remembers the displayed currency and whether you chose it yourself.
- raceready_theme (cookie, 1 year). Remembers the light or dark appearance.
- authjs.session-token, authjs.csrf-token, authjs.callback-url (cookie, session up to 30 days, the others until the browser is closed). Only after you sign in. Keeps you signed in and protects sign-in against forgery. On the live site the names carry the prefix __Secure- or __Host-.
- authjs.state, authjs.pkce.code_verifier, authjs.nonce (cookie, 15 minutes). Only during sign-in with Google or Apple. Secures the return from the provider.
- raceready_cart, raceready_coupon (local storage, until you empty the cart). Stores the cart and any voucher code you entered.
- raceready_currency, raceready_theme_mode (local storage, until you clear storage). The same settings as the cookies above, so they apply immediately on load.
- raceready_checkout_started (local storage, until your next visit after ordering). Remembers that you opened the checkout, so the cart is emptied after you order.
- raceready_consent_v1 (local storage, until you withdraw consent or clear storage). Stores whether you unlocked external videos. To withdraw: clear this website’s storage in your browser.
- raceready_checkout_method (session storage, until the tab is closed). Remembers the chosen route into the checkout.
- rfAns (session storage, until the tab is closed). Stores your answers in the tyre finder between questions.
Serverove logy
Poskytovatel techto stran automaticky shromazduje a uklada informace do serverovych logu, ktere nam tvuj prohlizec automaticky predava. Jedna se o:
- Typ a verze prohlizece
- pouzity operacni system
- referencni URL
- hostname pristupujiciho pocitace
- cas pozadavku na server
- IP adresa
Kontakt e-mailem nebo telefonem
Kontaktní formulář na tomto webu není. Pokud nás kontaktuješ e-mailem nebo telefonem, zpracujeme tvé údaje, abychom mohli odpovědět (čl. 6 odst. 1 písm. b GDPR, jinak písm. f). Po vyřízení dotaz smažeme. Pokud se týká objednávky, uchováme ho stejně dlouho jako objednávku.
6. Nakupy ve store
Pro vyřízení objednávek zpracováváme jméno, doručovací a fakturační adresu, e-mail, telefon, pokud ho uvedeš, objednané zboží a stav platby. Úplné platební údaje nevidíme, zpracovává je Shopify a zvolený poskytovatel plateb. Právním základem je plnění smlouvy (čl. 6 odst. 1 písm. b GDPR) a naše zákonná povinnost uchovávání (písm. c). Faktury a účetní doklady uchováváme sedm let (§ 132 BAO).
7. Tva prava
Mas tato prava ve vztahu ke svym osobnim udajum:
- Pravo na pristup
- pravo na opravu nebo vymaz
- pravo na omezeni zpracovani
- pravo vzneset namitku proti zpracovani
- pravo na prenositelnost udaju
Mas take pravo podat stiznost u dozoroveho uradu pro ochranu osobnich udaju ohledne zpracovani tvych osobnich udaju z nasi strany.
Prislusny dozorovy urad v Rakousku:
Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Wien
E-Mail: dsb@dsb.gv.at
Web: www.dsb.gv.at
8. Zpracování podrobně
For each service, this lists why we process data, on which legal basis, for how long and whether data reaches a country outside the EU. Videos and fonts are served from our own server.
Hosting and server logs (Vercel)
- Purpose: Deliver the website, fend off attacks and find errors.
- Data: IP address, date and time, page requested, referrer, browser and operating system.
- Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is secure and stable operation.
- Retention: Vercel deletes the logs automatically, at the latest after 30 days.
- Recipient and third country: Vercel Inc., San Francisco, USA. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR).
Audience measurement (Vercel Web Analytics)
- Purpose: See in aggregate which pages and products are viewed, to improve the shop.
- Data: Page viewed without query parameters, referrer, device type, browser and country. For cart events only the technical product ID, quantity and value. No names, email addresses or search terms. No cookies are set. Vercel recognises visits through a hash that expires after 24 hours.
- Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is improving the shop based on anonymous figures.
- Retention: The hash expires after 24 hours. After that only aggregated figures remain.
- Recipient and third country: Vercel Inc., USA. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR). More: https://vercel.com/docs/analytics/privacy-policy
Order, payment and checkout (Shopify)
- Purpose: Hand the cart over to the checkout and handle order, payment, shipping and invoice.
- Data: The order data from section 6. Your payment details go directly to Shopify and the payment provider you choose.
- Legal basis: Art. 6(1)(b) GDPR (contract) and (c) (retention duty).
- Retention: Order and invoice data for seven years (section 132 BAO).
- Recipient and third country: Shopify International Limited, Dublin, Ireland. Shopify may pass data to Shopify Inc. in Canada (EU adequacy decision) and to service providers in the USA. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR). Payment providers such as card networks, Apple Pay and Google Pay process payment data under their own privacy policies.
Product images (Shopify CDN)
- Purpose: Some product images load directly from cdn.shopify.com, on almost every page.
- Data: Technically required for delivery: IP address, time, browser identifier and the requested image file. No cookies are set.
- Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is to show the products quickly and completely.
- Retention: According to Shopify’s retention periods for server logs.
- Recipient and third country: Shopify International Limited, Dublin, Ireland, delivered through a global network. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR).
Customer account and sign-in
- Purpose: Sign you in to the customer account and keep you signed in.
- Data: When you sign in with email and password, Shopify checks your credentials. Where offered, you can also sign in with Google or Apple. We then receive your name, email address and an ID from that provider.
- Legal basis: Art. 6(1)(b) GDPR.
- Retention: The sign-in lasts until you sign out, at most 30 days. The Shopify customer account remains until you ask us to delete it.
- Recipient and third country: Shopify as above. Google Ireland Limited, Ireland, and Apple Distribution International Ltd., Ireland, if you choose that sign-in. Both may transfer data to the USA. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR).
Withdrawal via the online form (Resend)
- Purpose: Receive your withdrawal and confirm receipt by email to you and to us.
- Data: Name, email address, order number, your message if given, time of receipt. We use your IP address only briefly in memory to limit abuse.
- Legal basis: Art. 6(1)(c) GDPR (legal duty to confirm) and (b) (handling the contract).
- Retention: We keep the withdrawal with the order for seven years (section 132 BAO). Resend stores the emails only for delivery and its sending log.
- Recipient and third country: Resend, USA. Transfers to the USA rely on the European Commission’s standard contractual clauses (Art. 46 GDPR).
We do not sell data and do not use it for advertising. We do not send a newsletter at the moment.
