Skip to main content

Privacy Policy

Version 3.0 · effective from 21. 8. 2026

CONTROLLER OF PERSONAL DATA

The controller of personal data within the meaning of Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) is Amplla a.s., with its registered office at Poličská 1823, 539 01 Hlinsko, Czech Republic, company identification number 284 85 408.

Contact details: e-mail [email protected], telephone +420 739 017 120.

SCOPE OF THE PERSONAL DATA PROCESSED

Amplla a.s. processes personal data provided by the customer when placing an order and when registering a customer account, and where applicable for the purpose of taking part in company events or receiving commercial communications.

The data processed may include:

  • Ordinary personal data: first name and surname, e-mail address, telephone number, billing and delivery address, bank account number, and information about business dealings (orders, invoices, contact history).
  • Data from electronic access to the website: IP address, browser, device and operating system type, time and number of visits, and information from cookie files.
  • Special categories of personal data: none.

COOKIES

The website uses cookies, and where applicable third-party analytics and remarketing services.

Cookies that are strictly necessary for the website to work, and for the services you have asked for, are set without your consent. All other cookies — in particular analytics and remarketing cookies — are set only if you have given your consent beforehand, by a clear affirmative act. You can withdraw your consent at any time, as easily as you gave it, and you can also refuse or delete cookies in your browser settings. If you refuse cookies that are not strictly necessary, the website will still work, though some functions may be limited.

PURPOSE OF PROCESSING PERSONAL DATA

  1. Registering a customer account and providing information about orders. Legal basis: the customer's consent, which can be withdrawn at any time via the customer account.
  2. Sending commercial communications. Legal basis: legitimate interest (where a business relationship exists) or consent (where none exists). Can be withdrawn using the link in the footer of every communication, or via the contact details above.
  3. The controller's legitimate interest — in particular protecting the company's rights.
  4. Performance of the contract under Article 6(1)(b) GDPR.
  5. Legal obligations — accounting documents under the Czech VAT Act (No. 235/2004 Coll.), the Accounting Act (No. 563/1991 Coll.) and the Tax Code (No. 280/2009 Coll.).

SOURCES OF PERSONAL DATA

The controller processes personal data provided directly by the customer, or obtained in connection with fulfilling the order.

WITHDRAWING CONSENT

You can withdraw consent to the processing of personal data at any time, in whole or in part:

  • via the customer account on the website,
  • by e-mail to [email protected],
  • by written request to the company's registered office,
  • via the unsubscribe link in the footer of a commercial communication.

PROCESSORS AND DISCLOSURE OF DATA

The controller and main processor of personal data is Amplla a.s. The following companies, which provide necessary services, are also involved in the processing, each under a data processing agreement with Amplla a.s.:

  • Transport of goods: Smartex (Czech Republic, EU).
  • Payment gateway: Comgate Payments, a.s., Gočárova třída 1754/48b, 500 02 Hradec Králové, Czech Republic (EU).
  • Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (EU).
  • E-mail distribution: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
  • Analytics and remarketing services: Google Ireland Limited (Google Analytics 4, Google Ads) and Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (Meta Pixel/Conversions API). Your data may be transferred to the respective US parent company (Google LLC, Meta Platforms, Inc.); both companies self-certify under the EU-US Data Privacy Framework.

Amplla a.s. does not pass a customer's personal data to other parties except under the exceptions laid down by law (law enforcement authorities and the like).

CUSTOMERS' RIGHTS

Under the GDPR you have the right to:

  1. Access your personal data — confirmation of whether and what data we process about you, including the purpose, the categories, the recipients and the storage period.
  2. Erasure or rectification of your personal data — in particular where the data are no longer needed, where you withdraw consent, where you object, or where the data have been processed unlawfully.
  3. Restriction of processing — in the cases set out in Article 18 GDPR.
  4. Data portability — for processing based on consent or on a contract and carried out by automated means.
  5. Object to processing based on legitimate interest.

You also have the right to lodge a complaint with a supervisory authority if you believe your right to the protection of personal data has been infringed. Under Article 77 GDPR you may complain to the supervisory authority of the Member State where you are habitually resident, where you work, or where the alleged infringement took place. In Malta this is the Office of the Information and Data Protection Commissioner, Floor 2, Airways House, Triq il-Kbira, Tas-Sliema SLM 1549, Malta, telephone +356 2328 7100, e-mail [email protected], web idpc.org.mt. The supervisory authority of our country of establishment is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

PROCESSING PERIOD

  • Customer account and commercial communications: for as long as consent lasts, and it can be withdrawn at any time.
  • Legitimate interest: for as long as the legitimate interest lasts.
  • Performance of the contract: for the period necessary to perform the contractual obligations.
  • Legal obligations: for as long as the legal obligation lasts (accounting and tax documents).

SECURITY

Amplla a.s. has put in place appropriate technical, procedural and organisational measures to secure personal data; only authorised persons have access to it.

FINAL PROVISIONS

You agree to this policy by submitting an order or registering a customer account at eshop.amplla.com. The controller may change this policy; the current version is always published at eshop.amplla.com.

This policy applies from 23 August 2026.