1. Who we are

This website, kramtana.cz, is operated by Kramtana s.r.o., which is the controller of your personal data.

Company: Kramtana s.r.o.
Company ID (IČO): 28534263
VAT number (DIČ): CZ28534263
Registered office: Pučova 707/39, Jinonice, 158 00 Prague 5, Czech Republic
Registered with the Municipal Court in Prague, Section C, Insert 148572
Contact for privacy matters: info@kramtana.cz

This policy explains what personal data we process when you visit the website or send us a request, and what rights you have under the General Data Protection Regulation (GDPR).

2. What data we collect

We collect only the data you give us and the technical data needed to deliver the website.

Data you send through the request form:
– your name
– your company name
– your email address
– your plant list and any other information you write in the form

Data you send by email:
If you write to us directly, we process your email address and the content of your message.

Technical data:
When you open the website, the hosting platform processes your IP address, browser type and the time of the request. This is needed to deliver the pages and to protect the website against attacks. We do not use this data to identify you.

We do not use analytics, advertising pixels or tracking tools, and we do not buy data about you from third parties.

3. Why we use your data and on what legal basis

– Answering your request and preparing a quote. Data: form and email data. Legal basis: steps taken at your request before entering into a contract, Article 6(1)(b) GDPR.
– Performing a contract, if you place an order. Data: form and email data, order details. Legal basis: performance of a contract, Article 6(1)(b) GDPR.
– Keeping accounting and tax records. Data: invoice and order data. Legal basis: legal obligation, Article 6(1)(c) GDPR.
– Delivering and securing the website. Data: technical data. Legal basis: our legitimate interest in a working and secure website, Article 6(1)(f) GDPR.

We do not use your data for marketing emails and we do not make automated decisions about you.

Providing your data is voluntary. Without a name, an email address and a plant list we cannot prepare a quote.

4. Who receives your data

We share your data only with the service providers we need to run the website and handle requests. They act on our instructions as processors.

– Tilda Publishing: website platform and hosting; stores requests sent through the form.
– DDoS-Guard: protection of the website platform against attacks; sets the security cookie described in section 7.
– Google Ireland Limited: Google Sheets, where form requests are saved.
– Our email hosting provider: receiving and storing email correspondence.

If an order follows, we may pass the data needed for delivery to the growers and carriers involved, and accounting data to our accountant.

We may disclose data to public authorities where the law requires it. We do not sell your data.

5. Transfers outside the European Economic Area

Some of our service providers may process data outside the European Economic Area, in particular Google in the United States.

Such transfers take place only with safeguards required by the GDPR: an adequacy decision of the European Commission, such as the EU–US Data Privacy Framework, or the European Commission's standard contractual clauses. You can ask us for more information about these safeguards at info@kramtana.cz.

6. How long we keep your data

– Requests that do not lead to an order are deleted 12 months after we receive them.
– If you place an order, we keep contract, invoice and delivery records for the period required by Czech accounting and tax law.
– Technical data is kept by the hosting platform only for as long as needed to deliver and secure the website.

After these periods the data is deleted or anonymised.

7. Cookies and similar technologies

This website uses only technologies that are strictly necessary. They do not require consent, so we do not show a cookie banner. No cookies are set when you simply browse the website.

When you send the request form, one security cookie named "__ddg1_" is set by DDoS-Guard, the attack-protection service used by the website platform. It only helps to tell real visitors from automated attacks and is not used for tracking. It is set on the platform's own domain (tildacdn) and is stored for about 12 months. Your browser also keeps one session storage entry named "visited". It is a technical marker set by the website platform, contains no identifier, and is deleted when you close the tab.

We do not use analytics, advertising or social media cookies. If this changes, we will update this policy and ask for your consent first.

You can clear cookies and browser storage at any time in your browser settings. The website will still work.

8. Your rights

Under the GDPR you have the right to:
– ask whether we process your data and receive a copy of it
– have inaccurate data corrected
– have your data deleted where we no longer need it or have no legal ground to keep it
– ask us to restrict processing
– receive the data you gave us in a commonly used format
– object to processing based on our legitimate interest

To use any of these rights, write to info@kramtana.cz. We reply within one month. Using your rights is free of charge.

Complaints:
If you believe we process your data unlawfully, you can lodge a complaint with the Czech data protection authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz. You may also contact the authority in the EU country where you