Privacy and cookies
Version for new orders from 20 October 20261. Controller
The controller is Tomáš Bartek, identification number 75483475, Františka Hajdy 1235/20, 700 30 Ostrava–Hrabůvka, Czech Republic, operator of Crypolink. Privacy requests: info@crypolink.com, +420 733 697 368. Correspondence may also be sent to Jana Maluchy 81, 700 30 Ostrava–Dubina.
2. Data, purposes and legal grounds
For accounts and contractual performance we process email, a securely derived password-verification value, verification status, profile, plan, alert settings and history, selected channels and telephone numbers. Orders additionally require names, addresses, items, delivery/pickup selection, currency, amount and payment status. Linking Telegram requires a chat identifier and delivery-related data. The legal basis is performance of a contract or requested pre-contractual steps (GDPR Article 6(1)(b)). Necessary accounting records are processed for legal duties (c). Necessary technical logs, IP addresses, security and legal claims rely on legitimate interests in security and protecting rights (f). Optional marketing and non-essential cookies requiring consent rely on revocable consent (a). Ordinary use does not require national identity numbers, document copies or financial-asset information.
3. Recipients
Necessary data may be disclosed to hosting and email providers, payment providers, SMS/telephone providers, the communication channel linked by the customer, selected carriers and the manufacturing partner dispatching goods. Hosting uses VEDOS/WEDOS and telecommunications use Odorik; choosing Telegram involves Telegram, and choosing Zásilkovna involves Packeta and its delivery partners. Authorised accounting/legal advisers and public authorities may receive data where required. Full payment-card details are entered with the payment provider, not stored in Crypolink's database. Depending on their role, recipients act as processors or independent controllers.
4. Retention
Account and settings data are retained while the account and service exist. After termination, retention is limited to outstanding orders, complaints, legally required records and establishing or defending claims during applicable limitation periods; ongoing disputes may extend this. Accounting retention depends on the document type and applicable accounting/tax laws. Technical and delivery logs are retained only as needed for security, delivery evidence and troubleshooting. Consent-based data cease to be used for that purpose after withdrawal. Backup copies expire under the normal backup cycle and are not used for ordinary operations.
5. International services
Foreign payment or communication services may process data outside the EEA. Transfers arranged by the operator require an adequacy decision or appropriate GDPR safeguards, such as standard contractual clauses; information on the recipient and safeguards is available by email. Telegram is optional and has its own privacy terms; it can be disconnected. Do not put unnecessary sensitive information in price alerts.
6. Rights
Subject to GDPR conditions, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. You may object to direct marketing at any time and withdraw consent without affecting earlier lawful processing. Requests are normally handled within one month; any lawful extension will be explained. Identity checks must be proportionate. Complaints may be submitted to the Czech Office for Personal Data Protection, uoou.gov.cz, or your competent local authority. Without necessary data we may be unable to supply the relevant service or deliver goods; optional channels are not required for an account. We do not use automated decision-making with legal or similarly significant effects; automatic price-condition evaluation performs the alert you configure.
7. Cookies and advertising
Technical cookies support sessions, login and shop preferences: PHPSESSID for the session, userLogin for remembered login and EshopOrderBy for product sorting. Logout or browser settings can remove login cookies; removing other cookies may reset preferences. Optional analytics and advertising tracking must not start without required consent. Advertising within Free alerts is not consent to sharing data with advertisers or a separate newsletter. Marketing objections can be sent to the contact email. External pickup maps and payment forms process technical data when those functions are used, subject to their operators' information.
External font
The website loads a font through Google Fonts. Loading it may disclose your IP address and technical request information to Google. This is a separate external request, not an essential cookie. The jQuery library is also loaded from code.jquery.com; its provider/CDN receives the IP address and technical request information.
