Privacy policy
Privacy&Policy
We are SEFIS moto s.r.o., Company ID No.: 292 76 713, with its registered office at Spojovací 182/11, Praha 9, Vysočany, 190 00, registered with the Municipal Court in Prague under File No. C 329328 (“we” or “us”).
We operate an online store on the website www.sefismoto.cz (“the Website”) and we act as the controller of your personal data.
For the purpose of providing our services, selling goods, and operating the Website, we process certain personal data.
Protecting your privacy is very important to us, and we therefore safeguard your personal data with great care. We have prepared these Personal Data Processing Principles (“the Principles”) where you will find all information about what personal data we process, why and how we work with it, and how long we retain it. The Principles comply with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR). They apply both to our customers and all other users of the Website (“you”).
We strive to process your personal data to the smallest extent possible. Sometimes, however, processing is unavoidable – for example, when you want to order our goods or services, we need your data to be able to deliver them. We will not process your personal data using automated individual decision-making that would produce legal effects concerning you or otherwise significantly affect you.
We process your personal data differently depending on the nature of our relationship. It matters whether we have entered into a contract with you, you are contacting us through a contact form, or you are merely browsing our Website without any established relationship between us.
If you have any questions, you can contact us by email at info@sefismoto.cz or by phone at +420 606 323 321.
I. Processing of Personal Data
A. Processing of Personal Data When Using the Contact Form or by Other Means (e.g., by Email or Telephone)
If you contact us via the contact form on the Website (e.g., when inquiring about goods), we will work with the contact details you provide, primarily through the form.
What personal data do we process for this purpose?
- Identification data. E.g., name, surname, address, Company ID number, or date of birth.
- Contact data. E.g., phone number and email address.
- Information from our communication. E.g., information contained in emails, contact forms, and the content of our communication.
We process the data in order to respond to your inquiry (data listed in points 1–2) or to enter into a contract with you (data listed in points 1–3).
What is the legal basis?
Processing is based on:
- negotiating the conclusion of a contract with you – Art. 6(1)(b) GDPR, or
- our legitimate interest – Art. 6(1)(f) GDPR.
If we do not enter into further cooperation (e.g., do not conclude a contract), your data will be processed for a maximum of 1 year from our last communication.
B. Processing of Personal Data When You Make a Purchase on the Website
What personal data do we process for this purpose?
These include:
- Identification data. E.g., name, surname, address, Company ID number, date of birth.
- Contact data. E.g., phone number and email address.
- Billing and banking details. E.g., information appearing on invoices, bank account details, information on received or sent payments.
- Information contained in the contract. E.g., details of the goods we sell to you and other contractual information regarding complaints, withdrawal, etc.
- Information from our communication. Mainly information from emails, forms, and the content of our communication.
We process personal data for several reasons:
- We need the data to enter into and perform the contract (data in points 1–5).
- We also process the data to comply with our legal obligations (particularly for accounting and tax purposes and for handling complaints and other legal matters) (data in points 1–4).
- To protect and enforce our legal claims (data in points 1–5).
- To improve our services and conduct satisfaction surveys (data in points 2, 4, and 5).
Processing is based on:
- conclusion and performance of a contract – Art. 6(1)(b) GDPR,
- compliance with legal obligations – Art. 6(1)(c) GDPR,
- our legitimate interest in protecting claims and improving services – Art. 6(1)(f) GDPR.
- For contract performance: for the duration of the contract or until all rights and obligations expire.
- For legal obligations: for the period required by law.
- For protection and enforcement of claims: up to 16 years (maximum limitation period plus time needed for notification by a court).
- For service improvement and satisfaction surveys: up to 1 year after contract termination.
If you subscribe to the newsletter on the Website or if you are a customer who has not opted out at purchase, we will use your email address to send you our updates.
What personal data do we process for this purpose?
I. Contact data
Why do we process your data?
To send you newsletters.
What is the legal basis?
- If you subscribed without making a purchase: your consent – Art. 6(1)(a) GDPR.
- If you are our customer: our legitimate interest – Art. 6(1)(f) GDPR.
- For newsletter subscription without purchase: 3 years from giving consent. You can withdraw your consent at any time via email or by unsubscribing.
- For customers: for 3 years from the last contract, or until you object (e.g., by unsubscribing).
II. User Account
If you register for a user account, we process your personal data based on your consent under Art. 6(1)(a) GDPR. Consent is entirely voluntary.
For creating an account, we process the data entered in the registration form – name, email address.
Within the account, we store your order history and personal data entered in your profile, such as name, billing and/or delivery address, phone number, and email.
We use personal data to manage your account and provide associated services for as long as the account is active.
We will deactivate the account and delete the data if it remains unused for 5 years after the last purchase.
You may deactivate the account at any time (withdraw consent), in which case your personal data will be deleted.
D. Cookies
When you browse our Website, we process certain personal data, mainly so that the Website displays correctly.
What personal data do we process?
- Contact data, if you provide them during communication (phone, email).
- Cookies required for the Website’s operation.
Cookies enable more efficient use of our Website and tailoring its content to your needs. They improve user experience on revisited pages.
What types of cookies do we use?
- Technical / functional cookies – necessary for displaying and ensuring proper operation of the Website. They do not require consent. They cannot be disabled in our cookie settings, but disabling them in your browser may result in improper display.
- Analytical cookies – help us analyze Website performance and traffic sources. Require your consent.
- Preference cookies – ensure that content is shown in your preferred settings (e.g., language). Require consent.
- Marketing cookies – allow us or third parties to personalize offers even outside our Website. If you consent, data may be shared with partners for remarketing, personalized advertising, or linking with other data you provide them.
Cookie Table
| Name | Type | Processor | Retention | Purpose | |
| currency | technical | us | 1 month | remembers visitor’s currency | |
| language | technical | us | 1 month | remembers visitor’s language | |
| PHPSESSID | technical | us | session | maintains session | |
| referrer | other | us | 1 day | remembers source link | |
| fbp | marketing | Meta Ireland Limited | 1 month | stores/recognizes interactions via unique ID | |
| fbc | marketing | Meta Ireland Limited | 1 month | stores Facebook referral |
II. Who will have access to the data?
We may share your data with third parties—mainly companies or entrepreneurs who assist us in operating our business. These include:
- companies involved in goods delivery (Zásilkovna, DPD, GLS, Uloženka)
- payment processors (GPWebPay, Comgate, Visa, Mastercard)
- e-shop hosting provider (Forpsi)
- email service provider (Czechia)
- Google Analytics, Ads, and DoubleClick provider: Google Ireland Ltd.
- Facebook services provider: Meta Platforms Ireland Limited
- Sklik provider: Seznam.cz, a.s.
We may also provide personal data to public authorities if this is in our interest or if they request it.
III. Your Rights in Connection with Personal Data Processing
Under the GDPR, you have, among others, the right to:
- request information about what personal data we process,
- request access to your data and have it updated or corrected,
- request restriction of processing,
- request a copy of processed personal data,
- request deletion of personal data in certain cases,
- request data portability in certain cases,
- obtain confirmation of whether we process your personal data,
- withdraw your consent,
- object to processing based on legitimate interest (at our address or via email: info@sefismoto.cz).