Privacy policy

This is an English translation provided for convenience. The Czech version is legally binding.

KOLOFIX s.r.o., Company ID 22026061, with its registered office at Roztylská 1860/1, 148 00 Praha 4 – Chodov, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File 409875, phone: +420 241 930 240, e-mail: servis@kolofix.cz (the “Controller”), is the controller of your personal data within the meaning of Act No. 110/2019 Coll., on the processing of personal data, as amended (the “Act”), and the General Data Protection Regulation (Regulation (EU) 2016/679) (the “Regulation”); that is, it collects, stores and uses (and otherwise processes) your personal data in the course of its business. The individual purposes of processing are described in more detail in this Privacy Policy.

All your personal data may be used only in accordance with this Privacy Policy. The Controller may change this privacy policy from time to time by updating it on the website www.kolofix.cz (the “Website”).

What we collect

The Controller collects and processes the following personal data:

1. Information obtained from its business partners when a contract is concluded, which is necessary for drawing up the contract and performing the contractual relationship between the Controller and its business partner. This personal data includes:
   • first name and surname,
   • address / correspondence address,
   • e-mail address,
   • phone number,
   • billing and payment details,
   • other information relating to the identification of the business partner and the services that are the subject of the contractual relationship between the Controller and the business partner.
2. Where an offer to conclude a contract is made by a natural person who is not an entrepreneur (for example by booking a service on the Website), the Controller processes the same personal data listed in point 1 above.
3. When a user account is created on the Website, we process:
   • first name and surname,
   • e-mail address,
   • phone number,
   • other information relating to the identification of the business partner and the services that are the subject of the contractual relationship between the Controller and the business partner.
4. When you subscribe to the Kolofix newsletter or news, we process your e-mail address.

Why we process personal data

We process the identification, payment and contact details of our business partners and of natural persons who are not entrepreneurs in order to negotiate the conclusion, amendment or performance of a contract, where the communication is aimed at such negotiation. Processing lasts for the duration of the specific contractual relationship and then for the statutory limitation periods, or for the duration of the economic rights of authors if these are the subject of the contractual relationship.

Where there is a legitimate interest or we have the appropriate consent, we use the contact details (e-mail / phone number) of business partners to send marketing communications about products and services or to inform the public.

We may also use all the data above to protect our legitimate interests (e.g. to recover any receivables and to protect our legal rights).

We also process personal data to fulfil our legal obligations (in particular in the areas of tax, payments and statistics) for the period laid down by the relevant legislation.

We may further use contact details to ensure our mutual communication and to enable you to exercise your rights in connection with the protection of personal data.

For other specific purposes for which we have obtained your consent.

Personal data are kept for as long as necessary to fulfil the purposes above, or for as long as necessary to ensure our compliance with the relevant legal obligation or to protect our rights.

Can we process your personal data without your consent?

Yes, we may process your personal data without your consent, but only for the purpose of:

• providing a service or product (performance of a contract between you and us; the actual use of a service also constitutes a contract, without anything having to be signed);
• fulfilling legal obligations arising for us from generally binding legislation; or
• processing necessary for the purposes of our legitimate interests (e.g. direct marketing, providing communications and notices to inform the public, communicating with experts to fulfil obligations arising from the contractual relationship with our business partners).

The possibility and lawfulness of such processing follow directly from the applicable legislation and your consent to this processing is not required.

Third-party websites

Our Website links to third-party websites that we do not operate (e.g. links to the websites of our contractual partners). Such websites may use cookies and collect your personal data in accordance with their own privacy policies. This privacy policy does not apply to third-party websites. We accept no responsibility for third-party websites.

Cookies

Our Website does not use cookies or third-party tools for measuring traffic, advertising or online chat. During your visit, the browser only remembers whether you are viewing prices for a conventional bike or an e-bike; this information is deleted when you close the window.

Where we store your personal data

Your personal data are kept in secured systems operated by us within the EU.

Personal data may be disclosed to entities that work with us where this is necessary to ensure our legal and contractual rights and obligations and with whom we have concluded a data processing agreement. The current list of personal data processors is kept by the Controller and will be provided on request.

Personal data are processed mainly at the Controller's registered office. Processing is carried out by computer and, where applicable, manually for personal data in paper form, in compliance with all security principles for the management and processing of personal data.

Personal data will not be transferred outside the EU without an adequate level of personal data protection being ensured.

Security

We are committed to ensuring the security of your personal data. To prevent unauthorised access to or disclosure of your data, we have put in place appropriate physical, electronic and managerial procedures to protect and secure the information we collect. The personal data you provide to us will be managed systematically by automated means using automated and all other tools of the information system.

Disclosure of your personal data

Client personal data processed in connection with the performance of your contract with us will be available to the relevant staff and employees of the Controller responsible for performing the contract. We may provide client personal data to third parties for the purpose of fulfilling our obligations under the contract we conclude with you, to the extent and for the purpose envisaged by that contract.

We may also provide your personal data to other companies we engage to help us with our activities, e.g. IT service providers, business partners or sponsors involved in organising our events, always only to the extent necessary for the event in question.

Rights of data subjects

When collecting, processing and storing your personal data, we take full care to protect your rights as they arise from the relevant legal provisions.

In connection with the processing of personal data, you have the rights specified below, which you may exercise at your discretion.

Right of access to personal data

You may ask us for information about the processing of your personal data free of charge.

Right to data portability

This is the right to have personal data processed by automated means on the basis of the data subject's consent or a contract transferred to another controller in a structured, commonly used and machine-readable format. When exercising the right to data portability, data subjects have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

Right to withdraw consent to the processing of personal data

Where processing is based on your consent, you have the right to withdraw that consent in part or in full at any time with effect for the future. Without the appropriate consent we will no longer carry out the processing in question. You can withdraw your consent at the e-mail or postal address below. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal.

Right to request rectification, restriction or erasure of personal data

If you believe or find that we or third parties appointed by us are processing your personal data in a way that is contrary to the protection of your private and personal life or contrary to the relevant legislation, in particular if your personal data are inaccurate or incomplete or are processed for a given purpose without an appropriate legal basis, you may ask us to:

• rectify and/or complete inaccurate personal data concerning you without undue delay;
• erase your personal data (in particular where your personal data are no longer needed for the purposes for which they were collected or otherwise processed, or where you withdraw your consent to processing or object to processing and there are no overriding legitimate grounds for further processing);
• restrict the processing of your personal data (in particular where you contest the accuracy of the personal data or the processing is unlawful and you oppose erasure and request restriction of use instead, or we no longer need your personal data for the purposes of processing but you require them for the establishment, exercise or defence of legal claims).

Right to lodge a complaint

You may lodge a complaint about the processing of personal data and the Controller's conduct with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.

To exercise your rights, and for any questions or information about the handling of personal data, please contact us in writing at servis@kolofix.cz or at the Controller's registered office address.

This privacy policy is valid from 1 October 2026.