Privacy Policy

I. Basic Provisions

Privacy Policy. The data controller pursuant to Article 4, point 7 of Regulation (EU) 2016/679 (GDPR) is Sunamity, s.r.o., Company ID: 22046496, with its registered office at Korunní 2569/108, Vinohrady (Prague 10), 101 00 Prague.

Controller Contact Details

Korunní 2569/108, Vinohrady (Prague 10), 101 00 Prague email: privacy@sunamity.com

II. Sources and Categories of Processed Personal Data

The controller processes personal data provided through registrations, orders, or contact forms.

  • Identification data (e.g., first name, last name)
  • Contact information (e.g., email, phone)
  • Order data

III. Legal Basis and Purpose of Processing Personal Data

We process personal data on the following legal grounds:

  • performance of a contract between you and the controller (Article 6(1)(b) GDPR)
  • the legitimate interests of the controller (Article 6(1)(f) GDPR)
  • your consent for direct marketing purposes (Article 6(1)(a) GDPR)

The purposes of processing personal data are primarily:

  • processing your order and fulfilling contractual relationships
  • sending commercial communications and newsletters (newsletters are sent only with explicit consent)

IV. Data Retention Period

We retain personal data for as long as necessary to perform contractual obligations, but no longer than 15 years after the termination of the relationship. Data processed on the basis of consent for marketing is retained until the consent is withdrawn.

V. Recipients of Personal Data

Personal data may be disclosed to the following categories of recipients:

  • parties involved in order processing (e.g., logistics companies, carriers)
  • IT service providers
  • payment service providers (Stripe)
  • analytical service providers (Google Analytics)

Personal data is not transferred to third countries or international organizations unless explicitly stated.

VI. Your Rights

Under the GDPR, you have the right to:

  • access your personal data
  • request corrections of inaccurate data
  • request restrictions on processing
  • request deletion of personal data
  • object to processing
  • request data portability

You may withdraw your consent at email: privacy@sunamity.com. If you believe your rights have been violated, you have the right to file a complaint with the relevant data protection authority.

VII. Data Security Provisions

We implement appropriate technical and organizational measures to secure personal data against unauthorized access, loss, or misuse. For payment processing, we use the security standards of Stripe, and for website analytics, we use Google Analytics. Access is restricted to authorized personnel only.

VIII. Final Provisions

By placing an order, registering, or using our services, you confirm that you have read and fully accept these privacy policy terms. The controller reserves the right to change these terms at any time, with the updated version being published on the website or sent to you via email.

These terms take effect on the date of publication.