We take your privacy seriously. In this document, you will find information about what personal data we process, for what purpose, on what legal basis, how long we retain it, and what rights you have regarding the processing of your personal data.

We process personal data in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data (“GDPR”) and related laws of the Czech Republic.

1. Who is the controller of your personal data?

The controller of your personal data is:

Gift retail s.r.o.
Pod Harfou 938/60
Vysočany, 190 00 Prague 9
Company ID No.: 05523982

The company is registered in the Commercial Register maintained by the Municipal Court in Prague.

If you have any questions regarding the processing of personal data, you can contact us at the following email address:

obchod@cooltainers.cz

(hereinafter referred to as the “Controller”).

2. What personal data do we process?

Depending on how you communicate with us and which services you use, we may process, in particular:

• first and last name,
• company name,
• Company ID and Tax ID,
• email address,
• phone number,
• billing and shipping information,
• delivery address,
• information provided in the inquiry,
• information about the requested goods or
• services,
• data necessary for preparing a quote, concluding
• and fulfilling a contract,
• data related to invoicing and payment,
• communications conducted via email, telephone,
• or contact forms,
• data related to complaints or the exercise of
• rights arising from defective performance.

We process only personal data that is appropriate and necessary for the specific purpose of its processing.

3. Why do we process personal data, and on what basis?

Processing Inquiries and Preparing Quotes

If you contact us via the inquiry form, email, phone, or by other means, we process your contact information and the details provided in your inquiry for the following purposes:

• communicating with you,
• processing your inquiry,
• preparing price quotes or other offers,
• taking the necessary steps prior to the possible
• conclusion of a contract.

The legal basis is the implementation of measures taken prior to entering into a contract at your request, pursuant to Article 6(1)(b) of the GDPR.

If no contract is concluded based on your inquiry, we retain the data only for as long as necessary to process the inquiry and any follow-up communication.

Conclusion and Performance of the Contract

If you enter into a contract with us or purchase our goods or services, we process your data primarily for the following purposes:

• conclusion of the contract,
• confirmation and recording of the order,
• communication during the fulfillment of the order,
• ensuring delivery of the goods,
• handover of the goods,
• resolution of any complaints and other rights arising from the contractual relationship.

The legal basis is the performance of a contract pursuant to Article 6(1)(b) of the GDPR.

Compliance with Legal Obligations

We are required to process and store certain personal data in order to comply with our legal obligations, particularly in the areas of accounting and taxes.

The legal basis is compliance with a legal obligation under Article 6(1)(c) of the GDPR.

We retain the data for the period specified by applicable laws.

Protecting Our Rights and Resolving Disputes

We may also process personal data to the extent necessary for the following purposes:

• to protect our rights and legal claims,
• to resolve any disputes,
• to collect debts,
• to defend against claims made against us.

The legal basis is our legitimate interest pursuant to Article 6(1)(f) of the GDPR.

We retain data for this purpose for as long as necessary to protect or assert the relevant legal claims.

Sending Commercial Communications

If you are a customer of ours, we may, subject to the conditions set forth by law, use your email address to send you information about our own similar products and services.

If you give us your consent to send you marketing communications, we will process your data for this purpose until you revoke your consent.

You may opt out of receiving marketing communications at any time or unsubscribe by clicking the link provided in a specific marketing communication or by contacting us at obchod@cooltainers.cz.

In the case of direct marketing, you also have the right to object at any time to the processing of your personal data for this purpose. If you do so, we will no longer process your data for direct marketing purposes. In addition to the GDPR, the rules governing commercial communications are also set forth in Act No. 480/2004 Coll.(Office for Personal Data Protection)

4. How long do we retain personal data?

We do not retain personal data for longer than is necessary for the purpose for which it is processed.

The retention period varies depending on the specific purpose:

• Inquiries and communications prior to entering into a contract—for the period necessary to process the inquiry and handle follow-up communications;
• Data related to the contractual relationship—for the duration of the contractual relationship and subsequently for as long as necessary to protect legal claims;
• accounting and tax documents—for the period specified by applicable laws;
• complaints and rights arising from defective performance—for the period necessary to resolve them and subsequently protect legal claims;
• marketing communications—until you object to receiving them, unsubscribe, or revoke your consent, if the processing is based on consent.

5. To whom may your personal data be disclosed?

We do not share your personal data with other entities for their own marketing purposes.

However, to the extent necessary, your data may be disclosed to entities that assist us in operating our services or are involved in the performance of the contract.

These may include, in particular:

• providers of IT, hosting, and technical services,
• providers of email and communication services,
• accounting and tax service providers,
• providers of services related to website operation,
• carriers and other persons responsible for the transportation or delivery of goods,
• or other suppliers, if their involvement is necessary to fulfill the contract or operate our services.

These entities may process your personal data only to the extent necessary to provide their services and in accordance with applicable laws.

6. Is providing personal information mandatory?

Providing certain personal data is necessary to process your inquiry, prepare a quote, or enter into and fulfill a contract.

If you do not provide us with this necessary information, we may not be able to process your inquiry, prepare a quote, enter into a contract with you, or arrange for the delivery of goods.

Providing data for marketing purposes is voluntary.

7. How do we protect your data?

We take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or unauthorized disclosure.

Access to personal data is limited to those individuals who need it to fulfill their job or contractual obligations.

8. What are your rights?

In connection with the processing of your personal data, you have the right, under the conditions set forth in the GDPR, to:

• request access to your personal data,
• request the correction of inaccurate or incomplete information,
• request the deletion of personal data,
• request a restriction on the processing of their personal data,
• object to the processing of personal data,
• request data portability, provided that the legal conditions for doing so are met,
• withdraw your consent to the processing of personal data at any time, provided that the processing is based on your consent.

Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.

If you believe that we are handling your personal data in violation of the law, you have the right to file a complaint with the Office for Personal Data Protection.

9. Automated Decision-Making

When processing personal data in accordance with this policy, we do not engage in automated individual decision-making or profiling that would have legal or similarly significant effects on you.

10. Cookies

For information about the use of cookies and similar technologies, please see our separate Cookie Policy available on our website.

11. Contact

If you wish to exercise any of your rights or have a question regarding the processing of personal data, please contact us at:

obchod@cooltainers.cz

12. Final Provisions

This Privacy Policy may be updated from time to time, particularly if there is a change in the way personal data is processed or if there is a change in the law.

The current version of this policy is always available on the website buy.cooltainers.cz.

Effective as of: 28.8.2026