Privacy Policy

1. Personal Data Controller

Administrator: Bohemia Bike a. s.
Registered office: Pujmanova 1753/10a
140 00, Prague 4 - Nusle
Company ID / VAT ID: 63910756 / CZ63910756
Contact e-mail: info@dirtparade.cz
Telephone: +420 800 882 882

(Company registered with the Municipal Court in Prague under file number B 22039.)

2. Scope and Purposes of Personal Data Processing

2.1 Purposes of processing

  • Performance of the purchase agreement and order fulfillment including delivery, invoicing, and customer communication.
  • Customer support including handling inquiries, complaints, and returns.
  • Fulfillment of legal obligations towards state authorities and accounting.
  • Marketing and sending commercial communications if the user has given consent or if sending is in accordance with legal regulations.
  • Analytics and service improvement including statistical evaluation of website traffic and user behavior.
  • Fraud prevention and security assurance including identity verification and abuse detection.

2.2 Categories of processed data

  • Identification data: first name, last name.
  • Contact data: email, phone, delivery and billing address.
  • Payment data: data necessary for payment processing; full credit card details are processed by the payment gateway as a separate processor.
  • Order data: order history, order numbers, shopping cart content.
  • Technical data: IP address, device data, browser data, cookies.
  • Data for complaints: description of the defect, photos, communication.
  • Optional data: preferences, sizes, notes.

3. Legal grounds for processing

3.1 Contract performance
Processing necessary for the performance of the purchase contract and for taking steps prior to entering into a contract.

3.2 Legal obligation
Processing necessary for compliance with a legal obligation to which the controller is subject, such as accounting and tax obligations.

3.3 Consent
Processing based on the explicit consent of the user, particularly for sending newsletters and certain types of marketing. Consent can be withdrawn at any time.

3.4 Legitimate interest
Processing based on the legitimate interest of the controller, for example, for fraud prevention, service improvement, and traffic analysis, unless the rights and freedoms of the data subject override such interests.

4. Recipients of personal data and transfers to third countries

4.1 Categories of recipients

  • Carriers and logistics companies for goods delivery.
  • Payment gateways and payment service providers.
  • IT service providers, hosting, CRM, and analytics providers.
  • External accounting and legal services.
  • Marketing platforms and advertising partners with user consent.
  • Public authorities, if required by law.

4.2 Transfers outside the EU/EEA
When transferring data outside the EU/EEA, Bohemia Bike will ensure an adequate level of data protection through standard EU contractual clauses or other legal safeguards. Information about specific recipients and safeguards will be provided upon request.

5. Data Retention Period

5.1 General Principles
We retain personal data for the period necessary to fulfill the processing purposes and in accordance with legal regulations.

5.2 Typical Retention Periods

  • Orders and Invoices: for the period stipulated by tax and accounting regulations, typically 10 years.
  • Complaints: for the duration of the complaint resolution and subsequent statutory periods, typically 2 to 3 years or according to warranty conditions.
  • Marketing Consents: until consent is withdrawn.
  • Cookies and Technical Logs: according to cookie policy settings, typically up to 2 years.
  • Data for Fraud Prevention: for the period necessary for security purposes and defense against claims.

6. Data subject rights and how to exercise them

6.1 List of rights
The data subject has the right to: access their data, rectification, erasure, restriction of processing, data portability, object to processing based on legitimate interest, withdraw consent, and lodge a complaint with a supervisory authority.

6.2 How to exercise your rights
Please send requests to info@dirtparade.cz or by post to the company's registered office address. We will respond without undue delay, no later than 1 month from the receipt of the request. The deadline may be extended by another 2 months in the case of complex requests.

7. Cookies and tracking technologies

7.1 Types of cookies

  • Essential cookies for the website's functionality.
  • Performance and analytical cookies for collecting anonymous statistics.
  • Functional cookies for saving preferences.
  • Advertising and marketing cookies for ad targeting.

7.2 Consent and cookie management
When you first visit the website, we display a banner with options to set your preferences. Consent can be changed at any time in your browser settings or within the website interface.

8. Personal data security

Bohemia Bike implements technical and organizational measures to protect personal data, including data transfer encryption, access restrictions, regular backups, system updates, and employee training. Agreements ensuring secure data processing are concluded with processors.

9. Processors and Processing Agreements

Bohemia Bike uses processors for services such as payment gateway, hosting, CRM, e-mailing, and carriers. Written agreements on personal data processing in accordance with GDPR have been concluded with all processors.

10. Security incident procedure

In the event of a personal data breach, Bohemia Bike will conduct an internal investigation, take corrective action, and, if required, notify the supervisory authority and affected data subjects without undue delay in accordance with legal regulations.

11. Changes to the Policy and Effectiveness

Bohemia Bike may update this Policy. Changes will be posted on the website with an effective date. If the changes are significant, we will inform registered users by email to the address they have provided.

12. Contacts and Complaints

Contact e-mail for all communication: info@dirtparade.cz
For exercising your rights, inquiries or complaints, please contact the administrator at the e-mail address provided. If you are not satisfied with the response, you have the right to file a complaint with the Office for Personal Data Protection.
DIRTPARADE