Effective from: November 24, 2025
1. Introductory provisions
1.1. This Personal Data Processing Policy (hereinafter referred to as the "Policy") provides information on how Splim bikes s.r.o., ID No. 224 94 863, with its registered office at Veselá 30, 58301 Sedletín, Czech Republic, e-mail: info@splim.bike (hereinafter referred to as the "Controller"), processes the personal data of natural persons in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and related legal regulations of the Czech Republic.
1.2. The Controller operates an online store at https://splim.bike/ and, in connection with this operation, collects and processes the personal data of its customers, potential customers, and persons who have expressed interest in its products.
2. Scope of personal data processed
The Controller may process the following data in particular:
first and last name
e-mail address
telephone number
postal address (street, city, postal code, country)
billing information (company name, ID number, VAT number)
order and payment history
IP address and web behavior data (via cookies and Google Analytics)
information voluntarily provided in communication with the Administrator
3. Purposes and legal basis for processing
3.1. Performance of a contract and measures prior to its conclusion
The Controller processes personal data for the following purposes: - order processing, delivery of goods, billing and communication with the customer, bookkeeping and tax records.
Legal basis: Article 6(1)(b) and (c) of the GDPR (performance of a contract and legal obligation).
3.2. Marketing and communication with potential customers
The controller collects emails via a waitlist on the website and during personal contact (e.g., trade fairs) for the purposes of: sending information about the launch of pre-sales, sending commercial communications and news about SPLIM products.
Legal basis: Article 6(1)(a) of the GDPR – consent to the processing of personal data.
Consent can be revoked at any time by clicking on the link in the email or by sending a request to info@splim.bike.
3.3. Contacting test prototype donors
The controller may contact donors who have received a test prototype in order to obtain feedback on the testing and functionality of the SPLIM product.
Legal basis: Article 6(1)(f) of the GDPR – the controller's legitimate interest in improving the product and development processes.
Contact is one-time, voluntary, and not of a marketing nature.
3.4. Website analytics and operation
The controller uses the Google Analytics tool to measure website traffic and analyze its performance.
Legal basis: Article 6(1)(f) of the GDPR – legitimate interest in improving website functionality.
3.5. Legitimate interest of the Controller
Processing necessary for the protection of the rights and legal claims of the Controller, e.g. in the enforcement of claims or in the event of an inspection by public authorities.
4. Recipients of personal data (processors)
The controller may only transfer personal data to trusted processors with whom it has concluded personal data processing agreements:
PayU Czech Republic, s.r.o. – payment intermediation
Zaslat s.r.o. and contractual carriers – transport of goods
Fio banka, a.s. – payment processing
Wise Payments Ltd. – international payments
iÚčto.cz s.r.o. – accounting services
Mailerlite UAB – email marketing (waitlist, newsletter)
Nethost s.r.o. – web hosting and website administration
Microsoft Ireland Operations Ltd. – MS 365 (data storage, email)
Google Ireland Ltd. – Google Analytics
All of the above processors process data in accordance with the GDPR. Transfer outside the EU takes place only on the basis of standard contractual clauses ensuring an adequate level of protection.
5. Retention period for personal data
Purpose of processing | Retention period |
Orders and accounting | 10 years since the conclusion of the contract |
Marketing targeted at new customers (waitlist, trade fairs, public events) | Until consent is revoked or max. 10 years from the last interaction |
Feedback from supporters who received the test prototype | Max. 10 years from feedback evaluation |
Web analytics (cookies) | Depending on user settings, max. 26 months |
6. Rights of data subjects
The data subject has the following rights vis-à-vis the Controller: the right to access personal data, the right to correct inaccurate or incomplete data, the right to erasure ("to be forgotten"), the right to restrict processing, the right to data portability to another controller, the right to object to processing based on legitimate interest, the right to withdraw consent to the processing of personal data.
These rights can be exercised by emailing info@splim.bike. The Controller will respond without undue delay, within 30 days at the latest.
If the data subject believes that their data is being processed in violation of the law, they have the right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).
7. Personal data security
The controller has taken technical and organizational measures to ensure the protection of personal data against unauthorized access, loss, destruction, or misuse. All access to the systems is password-protected, and data is backed up using Microsoft OneDrive.
8. Cookies
The website https://splim.bike/ uses cookies. These files can be used to measure traffic and the effectiveness of advertisements (Google Analytics, Meta Pixel) and to ensure the basic functions of the website.
When visiting the website for the first time, users are shown a cookie bar allowing them to grant or refuse consent to analytical cookies. Users can change their consent at any time via their browser settings.
9. Final provisions
9.1. These Principles may be updated by the Administrator. The new version is always published on the website https://splim.bike/.
