Privacy policy

Yggne The Label s.r.o., a company with its registered office at Na pomezí 1347/30, Košíře, 150 00 Prague 5, Company ID No.: 21786186, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 406497 (hereinafter referred to as the “Company”), protects all processed personal data as strictly confidential and handles it in accordance with applicable personal data protection laws.

The Company is, within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679), the controller of your personal data, i.e. it collects, stores and uses (and otherwise processes) your personal data for the performance of its business activities (the specific purposes for which personal data are processed are defined in more detail below).

This Personal Data Processing Policy applies to:

  • the processing of personal data by the Company during the performance of contracts with business partners,
  • the processing of personal data of customers and users of the e-shop,
  • the processing of personal data of job applicants,
  • the processing of personal data for the purpose of sending commercial communications and targeting advertising.

The Privacy Policy describes the purposes of personal data processing and the methods of processing, provides information on the individual categories of personal data processed, their possible recipients, the period of storage of personal data, and your rights in relation to personal data protection.

PURPOSES OF PERSONAL DATA PROCESSING

Your personal data may be processed by the Company for the following purposes:

  • Performance of a contract (in particular the performance of contracts with the Company's business partners and e-shop users);
  • Fulfilment of legal obligations (in particular obligations under accounting and tax legislation);
  • Protection of the legitimate interests of the controller (protection of the rights and legally protected interests of the Company, such as protection of the Company's website and network against misuse);
  • Effective communication and management of the e-shop (in particular to save your preferences and time when creating a new order, etc.);
  • Handling requests received via email or the info line;
  • Sending commercial communications (newsletters) and targeting advertising.

PROCESSED PERSONAL DATA

The Company is authorised to process the following personal data according to the purpose of processing:

Data subjects' data Purposes of processing
First name and surname Performance of a contract, compliance with legal obligations, protection of the legitimate interests of the controller, handling of requests sent via email or the information line, effective communication and management of the e-shop, sending commercial communications and targeting advertising
Contact address Performance of a contract, compliance with legal obligations, protection of the legitimate interests of the controller
Email Performance of a contract, compliance with legal obligations, protection of the legitimate interests of the controller, handling of requests sent via email or helpline, effective communication and management of the e-shop, sending commercial communications and targeting advertising
Telephone Performance of a contract, compliance with legal obligations, protection of the legitimate interests of the controller, effective communication and management of the e-shop
Account number Performance of a contract, compliance with legal obligations, protection of the legitimate interests of the controller
Company ID Performance of a contract, fulfilment of legal obligations, protection of the legitimate interests of the controller
Content of communication (including requests, complaints, etc.) Performance of the contract, protection of the legitimate interests of the controller.

Personal data is processed both manually and automatically. Automated processing of personal data takes place for the purposes of contract performance, in particular to ensure internal processes within the Company that are necessary for the production, distribution and delivery of goods and the provision of related services.

Automated processing of personal data also takes place in cases where consent has been given to send marketing communications and target advertising.

PROCESSING OF PERSONAL DATA BASED ON CONSENT

If you grant the Company consent to process your personal data for the purposes of sending commercial communications and targeting advertising, you acknowledge that the provision of consent is voluntary and that consent may be revoked at any time.

Consent is granted for a period of 10 years or until revoked.

RECIPIENTS OF PERSONAL DATA

Within the Company, your personal data is only made available to authorised employees or individual personal data processors contractually agreed by the Company, or other controllers.

However, this is always only to the extent necessary to fulfil the individual purposes of processing and on the basis of the appropriate legal title for the processing of personal data.

These include, for example, processors or controllers involved in the delivery of goods/services, the execution of payments, the provision of services in connection with the operation of the e-shop, or the provision of marketing services.

The current list of recipients of the Company's personal data is available upon request by emailing info@yggne.com.

In cases specified by law, the Company is entitled or obliged to transfer certain personal data on the basis of applicable legal regulations, for example to law enforcement authorities or other public authorities.

PERSONAL DATA OF THIRD PARTIES

Personal data of third parties, which means personal data of employees of the Company's business partners, carriers and other natural persons involved in cooperation with the Company, or other data that the Company receives from a business partner in connection with the conclusion or performance of a contract, will be processed in accordance with applicable legal regulations in the area of personal data protection.

The Company will use this personal data for the purpose of performing contracts with business partners.

The business partner hereby acknowledges that the Company will process the personal data of third parties for the duration of the contractual relationship and further for the period specified by special legal regulations, if any.

It will then be stored for a longer period if there is a justified need to store the data in connection with a specific case.

The business partner is obliged to properly instruct its employees and other natural persons involved on the business partner's side in cooperation with the Company about the processing of personal data by the Company.

PERSONAL DATA RETENTION PERIOD

We process and store your personal data for the time necessary to ensure all rights and obligations arising from the relevant contractual relationship and further for the period during which the Company is obliged, as a personal data controller, to store personal data in accordance with generally binding legal regulations, or for which you have given us your consent to process.

In other cases, the processing period is determined by the purpose of the processing, to which it must be proportionate, or is specified by legal regulations in the area of personal data protection.

We process personal data according to the purpose of their processing for the period specified below:

Purpose of processing Retention period
Performance of a contract for the duration of the contract and for 10 years after the termination of the contract
Compliance with legal obligations for the period specified by the relevant legal regulation
Protection of the legitimate interests of the controller for a maximum of 3 years from the start of data processing, unless otherwise specified by special legal regulations, or if, in a justified case, there is a need to store the data for a longer period in connection with a specific case
Handling your requests received via email or the information line for the time necessary to process the relevant request
Effective communication and management of the e-shop for a maximum of 5 years from the start of data processing, or until you withdraw your consent to processing
Sending commercial communications for the duration of the consent to receive commercial communications and targeted advertising, or until the consent to processing is revoked, or in accordance with the relevant legal regulations*
Measures prior to concluding a contract During contract negotiations (during the selection process)

* The Company is entitled to process your email address within the meaning of Section 7(3) of Act No. 480/2004 Coll., on certain information society services and on amendments to certain acts (Act on Certain Information Society Services), as amended, for the purpose of sending commercial communication relating to its own products or services (e.g. in the form of a newsletter) if you have not refused to receive such communications.

RIGHTS OF DATA SUBJECTS

As a data subject, you have the following rights under the law, which you may exercise at any time.

These are the right (i) to access personal data, (ii) to correct inaccurate or false personal data, (iii) to delete personal data if it is no longer necessary for the purposes for which it was collected or otherwise processed, or if it is found to have been processed unlawfully, (iv) to restrict the processing of personal data, (v) to data portability, and (vi) the right to object, after which the processing of your personal data will be terminated, unless it is proven that there are serious legitimate reasons for processing that outweigh the interests or rights and freedoms of the data subject, in particular if the reason is the possible enforcement of legal claims.

You also have the option of contacting the Office for Personal Data Protection (www.uoou.cz), where you can file a complaint.

Right of access to personal data: if you want to know whether the Company processes your personal data, you have the right to obtain information about whether your personal data is being processed and, if so, you also have the right to access your personal data.

Right to rectify inaccurate and false personal data: if you believe that the Company is processing inaccurate or false personal data about you, you have the right to request its rectification. The Company will make the rectification without undue delay, taking into account technical possibilities.

Right to erasure: if you request erasure, the Company will erase your personal data if (i) it is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) the processing is unlawful, (iii) you object to the processing and there are no overriding legitimate grounds for the processing, or (iv) the processing is not required by law.

Right to restriction of processing: if you are not interested in erasure, but only in temporarily restricting the processing of your personal data, you may request that the Company restrict the processing of your personal data.

Right to data portability: if you want the Company to transfer your personal data, which it processes on the basis of your consent or on the basis of a contract, to a third party, you may exercise your right to data portability. If the exercise of this right could adversely affect the rights and freedoms of third parties, the Company will not be able to comply with your request.

Right to object: you have the right to object to the processing of personal data that is processed for the purposes of protecting the legitimate interests of the Company. If the Company fails to demonstrate that there is a compelling legitimate reason for the processing that outweighs your interests or rights and freedoms, it will terminate the processing on the basis of your objection without undue delay.

If the main substance of your objection is directed against the sending of commercial communications and targeted advertising, please use the link at the end of the last commercial communication (newsletter) you received from us to unsubscribe from commercial communications and the processing of personal data for this purpose.

In the event of repeated or manifestly unfounded requests to exercise the above rights, we shall be entitled to charge a reasonable fee for exercising the right in question or to refuse to exercise it. We would inform you of such a procedure.

To exercise your rights, please contact us by letter to the Company's registered office or by email to info@yggne.com. The Company reserves the right to verify the identity of the applicant for the rights in question in an appropriate manner.

This Personal Data Processing Policy is effective from 1 December 2025.