Effective from: 14 June 2026
In accordance with the GDPR (EU) 2016/679
I. Data controller
- The data controller is: P.S.I. DIRECT s.r.o., Company ID (IČO): 01714236, registered seat at Na Rokytce 1032/24, Libeň, 180 00 Praha 8, Czech Republic, email: info@trendyev.eu (the “Controller”).
- The Controller has not appointed a Data Protection Officer (DPO). For data protection matters, please contact the Controller at the email above.
II. What personal data we process and why
| Purpose | Data categories | Legal basis | Retention |
|---|---|---|---|
| Order fulfilment and contract formation | Name, address, email, phone, payment details | Performance of a contract (Art. 6(1)(b) GDPR) | Duration of contract + 3 years |
| Accounting and tax obligations | Billing details, payment transactions | Legal obligation (Art. 6(1)(c) GDPR) | 10 years, per applicable accounting law |
| Customer account (registration) | Name, email, delivery address, order history | Performance of a contract (Art. 6(1)(b) GDPR) | Until account deletion + 1 year |
| Marketing communications (newsletter) | Email, name | Consent (Art. 6(1)(a) GDPR) | Until consent is withdrawn |
| Website operation and security | IP address, log data, cookies | Legitimate interest (Art. 6(1)(f) GDPR) | 90 days |
| Handling complaints or claims | Contact details, defect description, documents | Legal obligation / contract | Duration of complaint process + 4 years |
III. Recipients of personal data
- Personal data may be shared with trusted recipients — processors — who process it only on the Controller’s instructions:
- the payment gateway provider (payment processing),
- shipping/carrier companies (delivery),
- email marketing platform provider (newsletter),
- the shop’s technical operator — P.S.I. DIRECT s.r.o.,
- the Controller’s accountant / tax advisor.
- Personal data is not transferred to third countries outside the EEA without appropriate safeguards under Chapter V of the GDPR.
- Personal data is not sold or rented to third parties for marketing purposes.
IV. Your rights
- As a data subject, you have the following rights:
- Right of access — to find out what personal data we process about you (Art. 15 GDPR)
- Right to rectification — to request correction of inaccurate data (Art. 16 GDPR)
- Right to erasure — “right to be forgotten”, under the conditions of Art. 17 GDPR
- Right to restriction of processing — to temporarily limit processing (Art. 18 GDPR)
- Right to data portability — to receive your data in a machine-readable format (Art. 20 GDPR)
- Right to object — in particular to processing for direct marketing (Art. 21 GDPR)
- Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
- Submit requests by email to: info@trendyev.eu. We will respond within 30 days.
- You have the right to lodge a complaint with a supervisory authority — either the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz, or the data protection authority of your own EU country of residence, under Art. 77 GDPR.
V. Data security
We have implemented technical and organisational measures to protect personal data: encrypted transmission (HTTPS), access controls, regular backups, security updates, and contractual obligations on our processors.
VI. Cookies
Information about our use of cookies is set out in a separate document, our Cookie Policy.
VII. Updates to this document
This policy is effective from 14 June 2026. The Controller may update it; the current version is always available in the shop.