GDPR
Privacy Policy
Effective from 1 September 2026
The protection of your personal data is important to us. This Privacy Policy explains what personal data we process when operating our online shop, why we process it, to whom it may be disclosed, how long it is retained and what rights you have in relation to the processing of your personal data.
This Privacy Policy has been prepared in particular in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).
1. Data Controller
The controller of personal data is:
Jaroslav Prokeš
Company ID: 69277257
VAT ID: CZ6909211903
Registered office: Atletická 2224, 356 01 Sokolov, Czech Republic
Phone: +420 608 835 829
E-mail: info@prokes-auto.cz
hereinafter referred to as the “Controller” or the “Seller”.
2. Personal Data We Process
Depending on how you use our online shop, we may process in particular:
-
first and last name,
-
company or business name,
-
company registration number, tax number and VAT ID,
-
billing and delivery address,
-
e-mail address,
-
telephone number,
-
information about orders and purchased goods,
-
information required to process payments,
-
shipping and delivery information,
-
information relating to complaints, returns and withdrawals from contracts,
-
content of communications with the customer,
-
IP address and technical information relating to the use of our online shop,
-
information collected through cookies and similar technologies, where applicable.
We do not store complete payment card details.
3. Orders and Performance of Contracts
We process personal data in particular for:
-
receiving and processing orders,
-
concluding and performing purchase contracts,
-
communicating with customers,
-
processing payments,
-
delivering ordered goods,
-
handling complaints, returns and withdrawals,
-
protecting and enforcing our legal claims.
The legal basis is primarily the performance of a contract or taking steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR.
Separate consent is not required for the processing of personal data necessary to conclude and perform a contract.
4. Compliance with Legal Obligations
We also process certain personal data to comply with our legal obligations, in particular accounting, tax and other statutory obligations.
The legal basis is Article 6(1)(c) GDPR.
Documents containing personal data, in particular invoices and accounting and tax records, are therefore retained for the periods required by applicable law.
5. Customer Account
If you create a customer account, we process the information necessary to create, administer and use that account.
You may request deletion of your customer account. This does not affect the retention of information that we are required or entitled to retain on another legal basis.
6. Customer Communications
If you contact us by e-mail, telephone, contact form or other means, we process the information you provide in connection with that communication.
The purpose is to handle your enquiry, quotation request, order, complaint or other request.
Depending on the nature of the communication, the legal basis may be steps taken prior to entering into a contract, performance of a contract or our legitimate interest in communicating with customers.
7. Payments – ComGate
We use the services of ComGate Payments, a.s. for online payments.
If a customer chooses to pay through the ComGate payment gateway, the information necessary to process, authorise and record the payment is provided to the payment service provider.
Payment card details are entered by the customer directly into the secure environment of the payment gateway. The Seller does not have access to complete payment card details and does not store them.
8. Shipping and Delivery
For the purpose of delivering ordered goods, we provide the necessary personal data to the carrier selected for the particular shipment.
These may include:
GLS, DHL, FedEx, UPS, DPD, PPL, TOPTRANS, Zásilkovna, Česká pošta, Slovenská pošta, or another carrier used for the particular order.
The information provided may include:
-
name or company name,
-
delivery address,
-
telephone number,
-
e-mail address,
-
other information necessary for delivery or customs clearance.
For shipments outside the European Union, necessary information may also be disclosed to carriers, customs authorities and other parties involved in customs clearance.
9. Heureka – Verified by Customers
We participate in the Verified by Customers programme, under which customers may receive a customer satisfaction questionnaire after making a purchase.
For this purpose, we may provide the operator of Heureka with the customer's e-mail address and information about the purchase to the extent necessary for the operation of the programme.
The legal basis for this processing is our legitimate interest in measuring customer satisfaction and improving our services.
You may object to receiving these questionnaires at any time.
10. Operation of the Online Shop and IT Services
We use external technical service providers to operate our online shop, including:
-
the Shop5 / Web5 e-commerce platform provider,
-
web hosting providers,
-
e-mail and other IT service providers.
These providers may have access to customer information to the extent necessary to provide their services.
They may process personal data only to the extent necessary for the provision of the relevant services and in accordance with applicable law.
11. Accounting
Information necessary for bookkeeping and compliance with tax obligations may be provided to our accounting service provider.
Only information necessary for bookkeeping, processing accounting and tax documents and complying with related legal obligations is provided.
12. Google Analytics and Marketing Services
If the customer gives the relevant consent through the cookie settings, we may use Google analytics and marketing services, in particular Google Analytics and Google Ads.
These services may process, in particular:
-
IP address and technical information about the device and browser,
-
information about visits to and use of the online shop,
-
pages visited,
-
information about the source of the visit,
-
information about completed orders or other conversions.
The purpose is to measure traffic, evaluate and improve the operation of our online shop and evaluate and optimise advertising campaigns.
Where consent is required for such processing, these technologies are activated only after the user has given the relevant consent.
Consent can be changed or withdrawn at any time through the cookie settings.
13. Smartsupp
If we use Smartsupp in our online shop for online customer communication and related functions, information provided by the customer during communication and technical information relating to the use of the service may be processed.
Where the service uses cookies or similar technologies requiring consent under applicable law, these technologies will only be activated after the relevant consent has been given.
14. Cookies
Our online shop uses cookies and similar technologies.
Necessary Cookies
Technically necessary cookies ensure basic functions of the online shop, such as the shopping cart, customer login, website security and storage of cookie preferences.
Where cookies are technically necessary for the operation of the online shop, they may be used without consent to the extent permitted by applicable law.
Analytics Cookies
Analytics cookies enable us to understand how visitors use our online shop and help us improve its operation.
Where consent is legally required, these cookies are activated only after consent has been given.
Marketing Cookies
Marketing cookies may be used, for example, to measure the effectiveness of advertising campaigns and display more relevant advertising.
Where consent is required, these cookies are used only after prior consent has been given.
Refusing analytics or marketing cookies does not affect your ability to purchase goods from our online shop.
Users may change or withdraw their consent at any time through the cookie settings on our website.
15. Marketing Communications
We may use contact details to send marketing communications only to the extent permitted by applicable law.
Subject to the conditions laid down by law, we may send existing customers offers relating to our own similar products or services unless they have opted out of receiving such communications.
In other cases where consent is required, marketing communications are sent only on the basis of such consent.
Recipients may opt out of further marketing communications at any time, in particular by using the unsubscribe link included in the communication or by contacting us.
16. Transfers of Personal Data Outside the EU/EEA
Some providers of IT, analytics, marketing, payment or transport services may process personal data outside the European Union or European Economic Area.
Such transfers take place only where the requirements of the GDPR are met, in particular on the basis of an adequacy decision, appropriate safeguards or another legal basis provided for by the GDPR.
For shipments to third countries, transferring necessary information to the destination country may be necessary for performance of the contract, transportation and customs clearance.
17. Retention Period
We retain personal data only for as long as necessary for the relevant purpose or for the period required by applicable law.
Order information is retained for the duration of the contractual relationship and subsequently for as long as necessary to protect and enforce related legal claims.
Accounting and tax records are retained for the period required by law.
Customer account information is retained for the duration of the account unless another legal basis requires or permits further retention.
Information processed on the basis of consent is processed until consent is withdrawn or the relevant purpose ceases to exist, unless there is another legal basis for further retention.
18. Security of Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or unauthorised disclosure.
Access to personal data is limited to persons and service providers who require such access to perform their employment, statutory or contractual duties.
19. Automated Decision-Making
In the ordinary operation of our online shop, we do not carry out automated individual decision-making within the meaning of Article 22 GDPR that produces legal effects concerning a customer or similarly significantly affects them.
20. Your Rights
Subject to the conditions laid down in the GDPR, you have in particular:
-
the right of access to your personal data,
-
the right to rectification,
-
the right to erasure,
-
the right to restriction of processing,
-
the right to data portability,
-
the right to object to processing based on legitimate interests,
-
the right to object at any time to processing for direct marketing purposes,
-
the right to withdraw consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
These rights are subject to the conditions and limitations provided for by the GDPR.
21. Exercising Your Rights
You can exercise your rights by contacting us at:
or in writing at:
Jaroslav Prokeš
Atletická 2224
356 01 Sokolov
Czech Republic
Where we have reasonable doubts concerning the identity of the person making a request, we may request additional information necessary to confirm their identity.
22. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes applicable data protection legislation, you have the right to lodge a complaint with a competent supervisory authority.
Our competent supervisory authority in the Czech Republic is:
Úřad pro ochranu osobních údajů
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
This does not affect your right to lodge a complaint with another competent supervisory authority under the GDPR.
23. Provision of Personal Data
Providing personal data required for an order is a contractual requirement. Without this information, it is generally not possible to conclude and perform a purchase contract or deliver the ordered goods.
Providing personal data for marketing, analytics or other voluntary purposes is not mandatory.
24. Changes to this Privacy Policy
We may update this Privacy Policy, in particular if applicable legislation, the services we use or the manner in which personal data is processed changes.
The current version will always be published in our online shop.
Effective from 1 September 2026.