Privacy Policy

(effective as of the date of publication on the website www.wayunki.com – 24. 11. 2025)

1. General Provisions – Who Is the Data Controller

The controller of personal data pursuant to Article 4(7) of the GDPR is:

Wayunki s.r.o., Company ID: 24651770, VAT ID: CZ24651770,
a legal entity operating under the brand name Wayunki,
Headquarters: Na Červeném Hrádku 766, 264 01 Sedlčany

Mailing address: Nádražní 97, Sedlčany 264 01

(hereinafter referred to as the “controller”).

Contact information for the data controller:
Email: [email protected]

The controller is not required to appoint a data protection officer under Article 37 of the GDPR, as it does not process large amounts of sensitive data or carry out extensive automated processing.

2. What personal data do we process?

We process only the data necessary for:

• creating and processing an order,
• delivery of goods,
• communication with customers,
• accounting and tax obligations,
• sending the newsletter (if you give your consent).

These include, in particular:

• name and surname,
• billing and shipping address,
• email,
• phone,
• order and payment details.

We do not process any sensitive or special categories of personal data.

3. Where the data comes from

We obtain them:

• directly from you when you place an order or register,
• from our communication with you (email, phone),
• if you sign up for the newsletter.

We do not collect any personal data from public databases or from third parties.

4. Legal Basis for Processing and Purposes

We process your data for the following legal reasons:

1. Performance of the Contract pursuant to Article 6(1)(b) of the GDPR
   – processing orders, delivering goods, handling complaints.
2. The controller’s legitimate interest pursuant to Article 6(1)(f) of the GDPR
   – direct marketing to existing customers (soft opt-in).
   A legitimate interest applies only to offers of similar goods or services.
3. Consent pursuant to Article 6(1)(a) of the GDPR and Section 7(2) of Act No. 480/2004 Coll.
   – sending newsletters to new contacts who are not customers.

The purposes of processing are:

• processing orders and fulfilling contractual obligations,
• customer communication,
• bookkeeping and compliance with legal obligations,
• sending promotional messages (only if you want to),
• operation and security of the online store.

The controller does not engage in automated individual decision-making or profiling pursuant to Article 22 of the GDPR.

5. Retention Period for Personal Data

We store personal data.:

• 15 years after the termination of the contractual relationship – due to legal obligations (accounting and tax regulations),
• 5 let from the time consent is given – with regard to marketing,
• for the period strictly necessary to exercise the rights and fulfill the obligations arising from the contract.

Once the retention period has expired, personal data permanently deleted or anonymized.

6. Recipients of personal data (processors and partners)

Your data may be disclosed to the following categories of recipients:

• carriers (will ensure delivery of the package),
• banks and payment gateways,
• e-commerce and web service providers (WordPress, hosting company),
• marketing services (Google, Seznam, Heuréka) – only with your consent.

All recipients act as processors, with whom the controller has entered into personal data processing agreements pursuant to Article 28 of the GDPR.

The controller does not intend to transfer personal data outside the EU.

7. Your Rights Under the GDPR

You have the following rights:

• the right of access (Article 15),
• the right to rectification (Article 16),
• the right to erasure (Article 17),
• the right to restriction of processing (Article 18),
• the right to data portability (Article 20),
• the right to object to processing based on legitimate interests (Article 21),
• the right to withdraw consent at any time,
• the right to file a complaint with the Office for Personal Data Protection.

You can exercise your rights by contacting the parties listed in Section 1.

8. How We Protect Personal Data

The administrator declares that:

• has taken the necessary technical and organizational measures,
• secured both digital data storage and paper documents,
• only authorized and trained personnel have access to the data,
• security measures are regularly reviewed and updated.

9. Cookies

On the website www.wayunki.com are used only essential technical cookies.
Tracking and analytical cookies are disabled, unless you give your consent.

10. Changes to the Privacy Policy

The administrator may update this policy.
The new version takes effect on the date of publication on the website.

In the event of significant changes that could affect your rights or the way your data is processed, the controller will also notify you by email.

11. Final Provisions

By submitting your order or checking the consent box on the order or registration form, you confirm that you have read this Privacy Policy and that you accept it in its entirety.