Privacy Policy

1.1. This policy explains how we handle the personal data of visitors and customers of StartEshop.cz, that is in connection with browsing the sales page, ordering the digital product and communicating with us.

1.2. Controller:
QuantumTrail s.r.o.
Business ID: 22194509, VAT ID: CZ22194509
Registered address: Korunní 2569/108, Vinohrady, 101 00 Prague 10, Czech Republic. Registered in the Commercial Register kept by the Municipal Court in Prague, section C, file 411510.
E-mail: Vavra.88@email.cz

1.3. For anything concerning personal data you can reach us at the e-mail address above.

1.4. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and with the laws of the Czech Republic.

2.1. We process only the data you give us yourself, plus technical data that arises when you visit the website.

2.2. When you order the product:

• first name and surname
• e-mail address
• street and number, town and postcode
• phone number, if you fill it in
• company name and company registration numbers, if you buy as a business
• note to the order, if you fill it in
• data about the order itself, that is its number, the product ordered, the price, the status and the date it was fulfilled

2.3. When you use the chat on the sales page:

• the content of the messages you write in the chat and of the replies the assistant sends you
• the language of the conversation and the time of each message
• your IP address and basic technical data about your browser

2.4. When you simply browse the website:

• data stored in cookies and in your browser storage, described in more detail in article 6
• aggregated traffic statistics from which no individual person can be identified

2.5. We neither ask for nor need any special categories of data, such as data about health or beliefs. Please do not send them to us.

3.1. We process order data in order to accept the order, send you the payment details, deliver the product and provide support for it. The legal basis is performance of a contract under Article 6(1)(b) GDPR.

3.2. We also process billing data in order to meet our obligations under accounting and tax law. The legal basis is compliance with a legal obligation under Article 6(1)(c) GDPR.

3.3. We process the chat conversation and the technical data about it in order to answer questions, to be able to evidence how an order placed in the chat came about, and to protect the website against misuse. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. If an order arises in the chat, we then process it in the same way as an order from the form.

3.4. When you write to us by e-mail, we process the content of your message and your contact details so that we can reply. The legal basis is our legitimate interest in dealing with your enquiry under Article 6(1)(f) GDPR, and performance of a contract for questions about an order.

3.5. We load analytics and marketing tools only after you consent to them in the cookie bar. The legal basis is consent under Article 6(1)(a) GDPR.

4.1. You place the order through the form on the order page. At your request the assistant can also create it directly in the chat, but only after you confirm the details to it. Either way the same order record is created and the same confirmation e-mail is sent.

4.2. You pay the price by bank transfer. We send you the payment details by e-mail. You do not enter any payment card details on this website and we have no access to them.

4.3. Once the payment arrives we e-mail you a link to download the product and an install command. Both are tied to your order and have a limited validity. If they expire before you download the product, write to us and we will renew them.

4.4. We issue an accounting document for every order. The data on that document is kept for the period required by accounting and tax law.

4.5. Providing the data marked as required is a contractual requirement. Without it we cannot accept the order, issue the document or deliver the product.

5.1. The chat on the sales page answers using artificial intelligence. You are therefore communicating with an AI system, not with a person. We inform you of this in accordance with Article 50 of Regulation (EU) 2024/1689 on artificial intelligence.

5.2. The content of your messages is passed to the language model provider acting as our processor, solely so that a reply can be produced. We store the conversation so that we can evidence how it went and continue it with your next message.

5.3. Please do not write passwords, sensitive data or other people's data into the chat. To place an order, the contact and billing details the assistant asks for are enough.

5.4. The chat does not decide about your rights or obligations. It creates an order only after you confirm the details and your agreement with the terms and conditions, and it does not determine the price or the content of the order itself.

6.1. On your first visit a bar appears in which you decide about analytics and marketing cookies. Until you give consent, we do not load those tools.

The categories we use:

• Technical and necessary: they keep the pages running and remember your choice from the bar so that it does not ask again on every visit. This also includes a random identifier from which only an aggregate visit count is produced.
• Analytics: used to measure traffic so that we can improve the website. We load them only after you consent.
• Marketing: used to measure and target advertising. We load them only after you consent.

6.2. Aggregated traffic measurement that uses no cookies and works only with data from which no individual can be identified may run without consent.

6.3. You can change your consent at any time in the cookie settings in the page footer, or by clearing the data stored in your browser. We will ask for consent again after twelve months at the latest. You can also block cookies directly in your browser, but the website may then not work correctly.

7.1. We do not sell or publish personal data. We share it only to the extent necessary to run the website and fulfil the order, with the following categories of recipients:

Recipients of the data:

• the e-mail provider through which we send the order confirmation and the download link (Resend)
• the language model provider that processes chat messages (Anthropic)
• the provider of the server infrastructure the website and database run on
• an advertising platform, but only if you consent to marketing cookies (Google)
• our bank and the people handling our accounts, to the extent needed to process the payment and keep the books
• public authorities, where the law requires it

7.2. Some of these recipients may process data outside the European Union. Such transfers rely on the European Commission's standard contractual clauses under Article 46 GDPR, or on a European Commission adequacy decision under Article 45 GDPR.

8.1. We keep personal data for as long as is necessary for the given purpose and for the period of our statutory obligations.

8.2. For orders this means in particular the period for which accounting and tax documents must be kept, and the period during which claims under the contract can be raised.

8.3. Chat conversations and technical records are kept for as long as is necessary for the purpose for which they arose.

8.4. Cookies have their own lifetime according to their category, and we will ask for your choice again after twelve months at the latest.

9.1. We use appropriate technical and organisational measures so that no unauthorised person can reach the data. Communication with the website runs over the secure HTTPS protocol.

9.2. Order data is accessible to the controller and to the processors listed in article 7, and only to the extent needed for their tasks.

10.1. In relation to your personal data you have the following rights under the GDPR:

Overview of rights:

• the right of access to your data (Article 15 GDPR)
• the right to rectification of inaccurate data (Article 16 GDPR)
• the right to erasure (Article 17 GDPR)
• the right to restriction of processing (Article 18 GDPR)
• the right to data portability (Article 20 GDPR)
• the right to object to processing based on legitimate interest (Article 21 GDPR)
• the right to withdraw consent where processing is based on consent, without affecting the lawfulness of processing before the withdrawal (Article 7(3) GDPR)

10.2. You can exercise any of these rights in a message or through support at Vavra.88@email.cz. So that we do not disclose data to the wrong person, we may verify your identity, usually by asking you to send the request from the e-mail address given in the order. We cannot act on a request for erasure where the law requires us to keep the data, typically for accounting documents.

10.3. We do not carry out automated decision making or profiling that would have legal effects for you or similarly significantly affect you within the meaning of Article 22 GDPR.

10.4. You also have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.gov.cz.

11.1. This policy covers the StartEshop.cz website and the sale of the digital product. It does not govern data processing on the e-shops that customers run themselves on the purchased code; there the controller is the operator of that e-shop.

11.2. We may update this policy, for example if the tools we use or the law change. The version published on this page is the one that applies.

11.3. Contact for questions about personal data protection: Vavra.88@email.cz.