DATA PROTECTION POLICY / PRIVACY POLICY

Principles of Personal Data Processing

Principal Elektrik s.r.o.,

located at: Osadní 869/32, 17000 Prague, Czech Republic,

Company ID: 03402614, email: shop@pelek.eu, tel.: +420774242766 (hereinafter – "Controller")

for the sale of goods
through the online store operating via pelek.eu, under the name Principal Elektrik s.r.o .

Personal data protection is very important to us.
The purpose of this document is to familiarize you with all information regarding
the processing of your Personal Data when you use the online store pelek.eu. We recommend that you read these Personal Data Processing
Principles. If you have any further questions regarding
the processing of your Personal Data, please contact us by email at shop@pelek.eu.

Definitions. For better understanding and orientation, the following terms, which are frequently repeated, are provided in these
personal data processing principles:

— Online store: online store
operated by the Controller under the name Principal
Elektrik

s.r.o via the online store pelek.eu;

— GDPR: Regulation (EU) 2016/679 of the European Parliament and
of the Council;

— Personal Data: any
information about the User by which they can be directly or indirectly
identified;

— User: a natural person to whom
Personal Data relates, usually a customer or a potential
customer, also referred to as "you";

— Processor: performs
Personal Data processing actions according to an agreement or other authorization from the Controller;

1. Basic data

Your Personal Data is collected
via the online store pelek.eu; and/or directly by us. In both cases,
we may act as the data controller. If your Personal Data is processed via
the online store pelek.eu;, please read their Personal Data Processing Principles (https://pelek.eu/cs/pages/privacy-policy-1).

We process the following Personal Data about you:

— name and surname, contact details (especially
email, phone number), address;

— billing details and bank account (data
necessary for accounting);

— information you provide to us
when communicating with us (in particular, these will be your questions and answers to
your inquiries, communication with you).

We do not process Special Categories of Personal
Data.

2. For what purpose do we process personal data and what is the legal basis for processing

2.1 Performance of contractual relations and
related legal obligations. The legal basis for Personal Data processing
is the performance of the purchase contract and related obligations (delivery of goods, accounting,
handling of claims, or if you exercise the right to
return goods within the statutory period). We will process your name and surname, contact details
(residential address and delivery address, email and phone number), possibly other
billing details. Personal Data is processed for the duration of contractual
relations and subsequently for 4 years after their
termination (we have an interest in retaining some Personal Data related to
the purchase contract to protect our interests). We are legally obliged to
archive accounting and tax documents. The retention period for this data may be up to 10
years from the end of the tax period in which the transaction was performed. If it is
necessary for delivery and payment purposes, the Personal Data we collect
will be transferred to an authorized transport company or an authorized credit institution.

2.2 Card payment. If you
provide us with your payment card details, we will not have access to all the data. We only know
that you are paying by card, and the card details are processed by the recipients of these data,
who will process the payment for us.

2.3 Order
fulfillment. For the purpose of order fulfillment, we also cooperate with
other service providers (transport companies and others) who help us to fulfill
the concluded contracts. We transfer your data to these partners only to fulfill
the obligations of the purchase contract.

2.4 Communication with customer
service, complaints, or other questions. If you have contacted us, we then process your
Personal Data based on your consent to resolve the inquiry
or complaint. We may process the following Personal Data about you: name, surname,
phone number, email, order details. Closed inquiries and complaints
from customer service are regularly deleted, but no later than 4 years from
the resolution of the inquiry or complaint.

2.5 Reviews. Our
customer ratings are important to us. We will publish reviews if you give us your
consent (you give a review of a specific product or service). We may process the following Personal Data about you: name, surname, email, order details. With your explicit consent, we will also process photos and Personal
Data that are part of the review text. Reviews will be kept until
your consent is withdrawn, but no longer than 5 years.

2.6 Customer ratings. You can
share your experience with the purchase and rate individual products. When evaluating your feedback on individual purchased products,
we may use other Processors.

2.7 Legal obligations. Personal
Data may be transferred to third parties, in addition to the Processors listed below, if required by law or in response to legitimate requests from public authorities or
court requests in legal disputes.

2.8 Age restrictions. In the case of goods subject to age restrictions, we check whether you have reached
the required minimum age in accordance with applicable legal regulations. For this purpose,
we use an identification service that allows us to verify your age.

2.9 Digital products. If
it is necessary to update goods with digital elements or digital products,
we process the data you provided at the time of order.

3. Communication

3.1 Emails we may
send. During the sale of our goods or services, we may send customers
emails related to:

3.1.1
delivery notification, delivery date update

3.1.2
tax documents, invoices

3.1.3
providing a return label for goods.

4. Processors

Your
Personal Data may be transferred to our business partners (Processors) or
other third parties if required by law.

We
use only verified Processors with whom we have a written agreement, and
who provide us with at least the same guarantees as we do to you. These are only
Processors who are from the European Union, or from countries that have been
recognized as safe, or from countries with which we have concluded standard
contractual clauses under Article 46 of the GDPR and who provide your Personal Data with
a similar level of protection as that provided by the GDPR and Czech legislation.
All these Processors are obliged to maintain confidentiality and
may not use the provided Personal Data for any other purposes than those
disclosed in accordance with these principles.

— Transport companies (see Article 2.1 Performance of contractual
relations and related legal obligations):

Czech Post, PPL, DPD,
WEDO,Zasilkovna,Balikovna,GLS

— Order
processing (see Article 2.1 Performance of contractual relations and related legal obligations): Pelek.eu, BaseLinker

— Accounting (see Article 2.1 Performance of contractual
relations and related legal obligations):

ABRA

5. What rights do you have?

Where to apply? Write to us at shop@pelek.eu, or
to our registered office address.

When will we resolve it? We will respond to you no later than within one month. If
providing the information would endanger the privacy of other persons, or if the provision would be
disproportionate to the risks or costs associated with its provision, we may not be able to
comply with your request. In the case of a repeated request, the controller will have the right to charge a reasonable fee for a copy of
the Personal Data.

— Right of access. Confirmation
of whether we process your Personal Data. Information about the purposes of processing, categories of
Personal Data, recipients to whom they are disclosed, processing period, about
the existence

the right to require
the controller to implement one of the rights listed below. The prerequisite is that the rights and freedoms of other persons will not be
negatively affected.

— Right to rectification. Request rectification of
inaccurate Personal Data.

— Right to erasure. If
there is no other reason why this data should continue to be processed, then the data you request
will be deleted or fully anonymized.

— Right to restriction of processing. If
you believe that we are processing data incorrectly - regardless of the reasons for processing
or the scope, please let us know.

— Right to notification of rectification, erasure
or restriction of processing. If you contact us with a request, we will
inform you of the result, unless it would be impossible (e.g., the email address
from which you wrote to us is no longer active).

— Right to data portability. We can
provide your data, which you have provided to us in a structured and machine-readable
format, at your request to another controller.

— Right to object. If
we process your data on the basis of a legitimate interest (e.g., sending a newsletter). We are
obliged to prove our legitimate interest, if we grant you the right,
we will stop this processing.

— Right to withdraw consent. If
you have changed your mind, please write to us. Processing for marketing and
commercial purposes can be revoked at any time.

— Automated individual
decision-making, including profiling. You have the right not to be subject to any
decision based solely on automated processing, including
profiling, which produces legal effects concerning you or similarly significantly
affects you. We respect your rights, and therefore we do not perform profiling.

6. Conclusion

Please read
also the Personal Data Protection Statement in the online store pelek.eu (https://pelek.eu/cs/pages/privacy-policy-1). In this document, you will find more information about when
the online store pelek.eu is the Personal Data Controller and how it processes your data.

These Personal Data Processing Principles
can only be changed in writing. If you have any questions regarding our Personal Data Processing Principles,
please contact us at shop@pelek.eu.

If you are
dissatisfied, you can at any time submit a proposal or complaint to the Office for Personal Data Protection, whose registered office is Pplk. Sochora 727/27, 170 00 Praha 7 – Holešovice
(more information https://www.uoou.cz).

These personal data protection principles
come into effect on 2024-01-01