1. Data Controller
The data controller is ELOEE s.r.o., with its registered seat at č.p. 147, 252 05 Hvozdnice, Czech Republic, Company ID (IČO) 195 92 957, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 388927 (the "Controller"). Contact: adela@eloee.com.
2. What personal data we process, for what purpose, and on what legal basis
a) Contact form: name, company name, work e-mail, product categories, message content. Purpose: handling the inquiry and arranging a service presentation. Legal basis: taking steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).
b) Defect-reporting form (widget): name, contact details, product identification, serial number, defect description, photographic attachment. Purpose: facilitating and administering the repair process, generating the European Repair Information Form (ERIF). Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
c) ERIF forms and audit records: complete documentation of the repair process, including related communication. Purpose: demonstrating compliance with legal obligations arising from repair-related legislation towards supervisory authorities. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
d) Cookies: We use only necessary cookies required for the basic operation of the website: NEXT_LOCALE (stores your chosen interface language; retention 1 year; Necessary) and cookie_consent_v1 (stores your cookie consent choice; retention 1 year; Necessary). We do not currently use analytics cookies; Google Analytics cookies (_ga, _ga_<container-id>; retention 2 years; Analytics) are prepared for possible future deployment and will not load until they are actively enabled and until consent is given. For traffic measurement we use Vercel Analytics, which stores no cookies (anonymous identification via a request hash, data deleted within 24 hours). You can review and change your choice at any time via the "Cookies" link in the website footer.
3. Recipients of personal data
We disclose personal data only to the extent necessary to the following categories of recipients: the provider of transactional e-mail delivery services (Resend, Inc., USA); the provider of web application hosting and file storage, including photographic attachments (Vercel Inc., storage located in the Frankfurt region, EU); the provider of database services (Neon, Frankfurt region, EU); service partners carrying out the repair (only the data necessary for its performance).
4. Transfer of personal data to third countries
The provider of e-mail services is based in the United States of America. Transfers of personal data are secured in accordance with Chapter V of the GDPR.
5. Retention period
a) ERIF forms, audit records, and photographic attachments submitted with the repair request: for 5 years from the completion of the repair process.
b) Data from the contact form: for the duration of handling the inquiry, for no longer than 12 months from the last contact, unless a contract is concluded.
6. Rights of the data subject
You have the right to access your personal data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing (Art. 21). You may exercise your rights at adela@eloee.com. We respond to requests without undue delay, and no later than within one month.
7. Right to lodge a complaint
You have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.
8. Obligation to provide data
Providing personal data as part of the repair process is a contractual requirement; without it, the repair cannot be arranged. Providing data in the contact form is voluntary.
9. Automated decision-making
The Controller does not carry out automated individual decision-making within the meaning of Art. 22 GDPR.