Privacy Policy

Privacy and Personal Data Protection Principles for the Top Trendy Web Store & Mobile App

The protection of your personal data and privacy is of utmost importance to us. In this document, we explain how ToanThang s.r.o., operator of the Top-Trendy.cz e-shop and the Top Trendy mobile app (collectively "Services"), processes and protects personal data of customers, visitors, and users.

We process personal data in strict compliance with applicable legislation, particularly Regulation (EU) 2016/679 (GDPR), Act No. 110/2019 Coll. on personal data processing, and Google Play Privacy Policy requirements.

1. DATA CONTROLLER

The Data Controller is:

ToanThang s.r.o.
Company ID: 05841267
Tax ID: CZ05841267

Registered Office:
Na Schodech 1618/3
Ústí nad Labem-centrum
400 01, Ústí nad Labem
Czechia

Contact Details:
E-mail: kontakt@top-trendy.cz
Phone: +420 608 802 206
Website: https://www.top-trendy.cz

Registered in the Commercial Register maintained by the Regional Court in Ústí nad Labem, Section C, File 39114.
The Controller has not appointed a Data Protection Officer (DPO).

2. CATEGORIES OF PERSONAL DATA PROCESSED

Depending on how you use our web store and mobile app, we process the following categories of data:

– Identification Data: Name and surname.
– Contact Data: Billing and delivery addresses, e-mail address, telephone number.
– Purchase & Order Data: Order history, ordered products, pricing, delivery and payment methods.
– Billing & Accounting Data: Data required for tax invoices and statutory accounting duties.
– Claims & Service Data: Records related to 14-day returns, 24-month statutory warranty claims, and customer service interactions.
– Technical & Network Data: IP address, device type, operating system, network details, cookies (website).
– Mobile Advertising Identifiers (Mobile App Only): Google Advertising ID (AD_ID) for ad campaign attribution—strictly based on explicit user consent in accordance with GDPR.

*Note:* Payment card details are never stored by ToanThang s.r.o.. Online transactions are securely processed by authorized payment gateway operators.

3. PURPOSES AND LEGAL BASES OF PROCESSING

A) Order Fulfillment & Contract Execution

– Receipt, confirmation, and dispatch of orders.
– Parcel delivery via selected courier partners.
– Payment processing and customer communications.
– Processing returns, exchanges, and warranty claims.
*Legal basis:* Performance of a contract under Art. 6(1)(b) GDPR.

B) Compliance with Legal Obligations

– Bookkeeping and tax compliance (VAT Act, Accounting Act).
– Consumer protection compliance.
*Legal basis:* Legal obligation under Art. 6(1)(c) GDPR.

C) Legitimate Interests

– Protection of legal claims and debt recovery.
– Maintaining IT security and stability of the platform and APIs.
– Fraud prevention.
*Legal basis:* Legitimate interest under Art. 6(1)(f) GDPR.

D) Marketing and Analytics

– Sending newsletters and updates (with one-click unsubscribe).
– Conversion measurement and ad optimization (Meta Ads, Google Ads).
*Legal basis:* Explicit consent under Art. 6(1)(a) GDPR, or legitimate interest for existing customers.

4. MOBILE APPLICATION & ADVERTISING IDENTIFIERS (GOOGLE PLAY POLICY)

The official Top Trendy Android mobile app complies with Google Play user privacy policies:

1. User Consent (GDPR Consent Dialog): On first launch, users are presented with clear choices: "Accept All" or "Necessary Only".
2. Google Advertising ID (AD_ID): If consent is granted, the app may process the AD_ID for marketing attribution. If "Necessary Only" is selected, AD_ID collection is strictly disabled.
3. Changing Preferences: You can review or modify your privacy choices anytime in the app under: Profile ➔ Privacy & Ads Settings (GDPR).

5. PAYMENT SERVICES

For online transactions, payment details are processed by licensed payment gateways (GoPay, Apple Pay, Google Pay). ToanThang s.r.o. does not have access to full card numbers.

6. SHIPPING & LOGISTICS

Delivery information (name, address, phone, email) is provided to contracted parcel couriers:
– Packeta (Packeta s.r.o. / Zásilkovna)
– Contracted courier services selected by the customer.
Carriers process this data exclusively for delivery and SMS/email tracking notifications.

7. DATA PROCESSORS & RECIPIENTS

Personal data may be shared with trusted third parties:
– IT infrastructure, hosting, and API server providers.
– Logistics and shipping couriers.
– Payment gateway providers.
– Accounting and legal advisors.
– Marketing/analytics platforms: Meta Platforms Ireland Ltd. & Google Ireland Ltd.
– Public authorities when required by law.

8. TRANSFERS OUTSIDE EU / EEA

Data is primarily stored on servers located within the European Union. International transfers comply with GDPR Chapter V (EU Standard Contractual Clauses or Data Privacy Framework).

9. RETENTION PERIODS

– Order & Contract Data: Kept during contract duration and applicable statutory limitation periods (typically 3–5 years).
– Tax & Accounting Invoices: Kept for up to 10 years as mandated by tax law.
– Consent-based Marketing: Kept until consent is revoked.

10. YOUR RIGHTS UNDER GDPR

– Right to access your data (Art. 15 GDPR).
– Right to rectification (Art. 16 GDPR).
– Right to erasure / Right to be forgotten (Art. 17 GDPR).
– Right to restriction of processing (Art. 18 GDPR).
– Right to data portability (Art. 20 GDPR).
– Right to object (Art. 21 GDPR).
– Right to withdraw consent at any time.

11. ACCOUNT & DATA DELETION REQUEST (GOOGLE PLAY POLICY)

Users of our app and website can request complete account and data deletion via:

1. Directly in the Android App: In the *Profile* tab by selecting "Request Account & Data Deletion".
2. Online Web Form: Visit our official page at:
👉 https://www.top-trendy.cz/odstraneni-udaju
3. Via Email: Send an email to kontakt@top-trendy.cz with subject "Request for Personal Data Deletion".

Non-statutory personal data will be irrevocably deleted within 30 days.

12. RIGHT TO LODGE A COMPLAINT

You have the right to contact the supervisory authority:
Office for Personal Data Protection (ÚOOÚ)
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
Website: https://www.uoou.cz

13. DATA SECURITY

All communications between the mobile app, web store, and API are encrypted via HTTPS (TLS/SSL). Servers and databases are protected by multi-level security and firewalls.

14. CONTACT FOR PRIVACY MATTERS

For inquiries regarding data protection:
ToanThang s.r.o.
Na Schodech 1618/3, 400 01, Ústí nad Labem, Czechia
E-mail: kontakt@top-trendy.cz
Phone: +420 608 802 206