eMineralogy.com ("we", "us", or "our"), based in Prague, Czech Republic, is committed to protecting your privacy and ensuring the secure processing of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Czech laws.
1. Data controller
Data Controller:
- eMineralogy.com
- Prague, Czech Republic
- Email: info@emineralogy.com
2. Information we collect
We may collect and process the following categories of personal data:
- Contact details (name, email address, phone number, billing and shipping address)
- Account registration information (username, password)
- Order and transaction data (products purchased, order value, payment method, delivery details)
- Communication data (emails, support requests, feedback)
- Technical data (IP address, browser type, device type, operating system, referring URLs)
- Usage data (pages viewed, interactions on the site)
We may also collect information via cookies and similar technologies (see Section 5).
3. Legal basis for processing
We process your personal data based on the following legal grounds:
- Performance of a contract: To process and deliver your orders and manage payments
- Consent: When you subscribe to our newsletter or agree to non-essential cookies
- Legal obligation: To comply with legal and accounting requirements
- Legitimate interest: To enhance our website, prevent fraud, and provide effective customer support
4. How we use your information
Your data is used to:
- Process orders and manage your customer account
- Deliver purchased products and services
- Provide customer support and respond to inquiries
- Send order confirmations and updates
- Deliver marketing communications (with your consent)
- Improve our website and services
- Ensure security and prevent fraud or abuse
5. Cookies and tracking technologies
We use cookies to enhance your browsing experience. Types of cookies we use include:
- Essential cookies: Necessary for core website functionality
- Analytical cookies: Help us understand how visitors interact with our site
When you first visit our site, you will be asked to consent to the use of non-essential cookies. You can manage or withdraw your preferences at any time via your browser settings or through our cookie banner.
6. Data sharing and processors
We may share your personal data with trusted third-party service providers for specific purposes, including:
- Payment processors (e.g., PayPal, Stripe)
- Shipping carriers (e.g. DHL, FedEx, PPL)
- Email marketing platforms (e.g., Mailchimp)
- Analytics providers (e.g., Google Analytics)
These third parties are only given access to data necessary to perform their services and are bound by confidentiality and data protection obligations.
7. International data transfers
If personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as:
- European Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
8. Data retention
We retain personal data only as long as necessary for:
- Fulfilling the purposes described in this policy
- Meeting legal, tax, and regulatory requirements (e.g., retaining invoices for 10 years)
- Resolving disputes and enforcing agreements
9. Your rights under GDPR
You have the following rights under GDPR:
- Right of access: To obtain a copy of your personal data
- Right to rectification: To correct inaccurate or incomplete data
- Right to erasure: To request deletion of your personal data
- Right to restrict processing: To limit how your data is used
- Right to object: To object to certain uses of your data
- Right to data portability: To receive your data in a portable format
- Right to withdraw consent: At any time where processing is based on consent
To exercise any of these rights, contact us using the contact details in Section 1.
10. Data security
We implement appropriate technical and organizational measures to secure your personal data. These include:
- SSL encryption
- Secure servers
- Access controls
While we strive to protect your personal data, please note that no method of online transmission or storage is 100% secure.
11. Supervisory authority
You have the right to lodge a complaint with the Czech Data Protection Authority:
Úřad pro ochranu osobních údajů (Office for Personal Data Protection)
Website: https://www.uoou.cz
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.
13. Contact
For any questions, comments, or concerns regarding this Privacy Policy, please contact us through our contact page.
Last Updated: 1/4/2025