Privacy Policy

I. Data Controller

The controller of your personal data is:

Ing. Michal Martinek
Company ID (IČO): 11186615
VAT ID (DIČ): CZ6507251542
registered office: Ostružnická 336/28, 779 00 Olomouc, Czech Republic
phone: +420 608 50 99 99
e-mail: info@bicistore.eu

hereinafter the “Controller”.

II. What Personal Data We Process

We process only the personal data we need to run the e-shop, process orders, communicate with customers, comply with legal obligations, or for the other purposes set out below.

This may include in particular:

• first name, surname and, where applicable, title,
• billing and delivery address,
• e-mail address and phone number,
• Company ID (IČO), VAT ID (DIČ) and other billing details of a business customer,
• information about orders and purchased goods,
• data necessary to make or identify a payment,
• data relating to complaints, returns or other customer communication,
• technical data relating to visits to the website, where it is processed through cookies or similar technologies.

The data needed to conclude and perform a contract is a contractual requirement. Without it, it is generally not possible to conclude or properly process an order.

III. Why We Process Your Data and on What Basis

IV. Where We Get Your Personal Data

We obtain most personal data directly from you, in particular when you create and submit an order, communicate with customer support, make a complaint, subscribe to commercial communications or use the website.

Some data may also be generated automatically when you use the website, for example technical data associated with cookies, where their use is permitted.

V. Who We May Share Your Personal Data With

We share personal data only to the extent necessary for the specific purpose. Recipients or processors may include in particular:

• providers of e-shop, hosting and IT infrastructure,
• payment service providers and banks,
• carriers and logistics service providers,
• accounting, tax, legal and other professional advisers,
• providers of analytics or marketing services, where their use is legally permissible,
• public authorities, where we are required to disclose data by law.

Processors may use personal data only for the specified purpose and to the extent corresponding to the service provided.

VI. Transfers of Data Outside the European Economic Area

In the ordinary course of processing orders, we do not intentionally transfer personal data outside the European Economic Area, unless it is necessary in connection with the service used.

If you use analytics or marketing tools and give the relevant consent, some data may, depending on the provider, also be processed outside the European Economic Area.

In that case, the transfer of data is secured in the manner required by the GDPR, for example on the basis of a European Commission adequacy decision or through standard contractual clauses.

VII. How Long We Keep Your Personal Data

We keep personal data only for as long as necessary for the purpose for which it was obtained.

• Data relating to an order and the contractual relationship is kept for the duration of the contractual relationship and afterwards for as long as necessary to protect and enforce legal claims.
• Accounting and tax documents are kept for the period required by the relevant legislation.
• Data processed on the basis of consent is kept until the consent is withdrawn or until the purpose of processing ceases.
• An electronic contact used for direct marketing to existing customers is processed until the customer opts out of further communications or objects to direct marketing.
• The retention period of data obtained through cookies depends on the specific type of cookie and is stated in the cookie settings.

VIII. Commercial Communications

If you are our customer, we may, under the conditions laid down by law, use your electronic contact to send offers of our own similar products or services.

You can easily opt out of receiving these at any time and free of charge, in particular via the unsubscribe link included in every marketing e-mail or by sending a request to info@bicistore.eu.

If you are not our customer and the law requires consent, we send commercial communications only on the basis of your prior consent. You can withdraw your consent at any time.

IX. Cookies

The website may use cookies and similar technologies.

Technical cookies that are necessary for the e-shop to work properly, for security, the shopping cart or completing an order may be used without consent where the law allows.

We use analytics, marketing and other non-technical cookies only if you have consented to their use, where such consent is required.

You can manage your choice through the cookie settings available on the website.

X. Your Rights

Depending on the specific way your data is processed, under the GDPR you have in particular the right to:

• request access to your personal data,
• request rectification of inaccurate or incomplete data,
• request erasure of your personal data, where the legal conditions are met,
• request restriction of processing,
• receive your data and request its portability, where the legal conditions are met,
• object to processing based on legitimate interest,
• object at any time to the processing of personal data for direct marketing purposes,
• withdraw your consent at any time, where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

You can exercise your rights by e-mail at info@bicistore.eu.

XI. Complaint to the Supervisory Authority

If you believe that we are processing your personal data in breach of the law, you have the right to lodge a complaint with:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
e-mail: posta@uoou.gov.cz
web: uoou.gov.cz

We would appreciate it if you first contacted us directly so that we have a chance to resolve the situation. This does not, of course, limit your right to lodge a complaint in any way.

XII. Security of Personal Data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or unauthorised disclosure.

Access to personal data is limited to persons and service providers who need it to perform their work or contractual duties.

XIII. Changes to This Policy

We may update this information from time to time, in particular when the services we use, the way personal data is processed or the legislation changes.

The current version is always published on this page.

This Privacy Policy is effective from 5 September 2026.