This privacy policy explains how E-VOLTIVA CZ sro processes the personal data of visitors and customers of the REN Solar online store at https://rensolar.eu , persons who contact us, and participants in our partner program.
When processing personal data, we proceed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act No. 110/2019 Coll., on the processing of personal data, and other relevant legal regulations. These principles fulfill the information obligation; reading them, using the website, or submitting an order does not in itself constitute consent to the processing of personal data. We require consent separately only for processing that requires it.
The controller of personal data, which determines the purposes and means of their processing, is:
E-VOLTIVA CZ sro , ID number: 17746523
Registered office: Kloboukova 1231/75, Chodov, 148 00 Prague 4, Czech Republic
Entry in the Commercial Register: Municipal Court in Prague, Section C, File 414204
E-mail for personal data protection and exercise of rights: rensolar@rensolar.eu
Website: https://rensolar.eu
The designation "REN Solar" in these policies refers to the e-shop operated by E-VOLTIVA CZ sro; "we" or "administrator" refers to this company.
Personal data is information about an identified or identifiable natural person. We only process data necessary for a specific purpose, in particular:
Identification and contact information: name and surname, billing and delivery address, e-mail and telephone number; for entrepreneurs also business name, company ID and, if applicable, VAT number.
Data on orders, payments and contract performance: ordered goods or services, price, selected shipping and payment, transaction status and identification, data required for refunds, invoices, complaints, withdrawal from the contract and related communications.
Customer or partner account data: registration and login details, saved addresses, order history and account settings; in the case of a partner program, also the partner identifier, commission data and data required for their payment.
Content of communication: data provided in the contact form, email, inquiry or other request and information necessary to process it.
Technical data: IP address, access time, requested page, browser and device data, and logs of errors or security events. The scope of other website behavior data depends on your consent to the optional tools described in section 4.
Data about your choices: granting and withdrawing consent, setting cookies, subscribing to and unsubscribing from commercial communications, and records of the exercise of your rights.
We collect data directly from you in particular when you make a purchase, register or communicate with us and when you use the website. We also collect information about payment and delivery from the relevant payment and transport providers. We may obtain the contact details of the recipient of the shipment or the customer representative from the ordering party or the represented organisation. We may verify business identification data in public registers.
If you provide data of another person, please only provide the data required for the order and inform the person concerned of these principles. This does not affect our own information obligation under Article 14 GDPR. If we obtain the data otherwise than directly from the person concerned, we will provide the requested information to the person concerned within the statutory period, usually no later than one month, upon first communication or upon first disclosure of the data to another recipient, whichever comes first, unless a statutory exception applies.
Please do not send us health information or other sensitive information in regular forms unless it is necessary for a specific request. Do not send us passwords or credit card security codes.
We process identification, contact, order and payment data for the purpose of accepting and processing an order, concluding a contract, delivery, communicating about the order and settling payments. The legal basis is the performance of a contract or taking measures prior to its conclusion at your request pursuant to Article 6(1)(b) GDPR. We use the same legal basis for the establishment and management of a customer account that you request, to the extent necessary for the provision of this service.
If you are acting on behalf of a legal entity, we process your work contact details based on a legitimate interest pursuant to Article 6(1)(f) GDPR for the conclusion and performance of a contract with the represented organization.
We handle inquiries aimed at concluding a contract on the basis of Article 6(1)(b) GDPR. For other routine inquiries, the legal basis is our legitimate interest in receiving answers and providing customer support pursuant to Article 6(1)(f) GDPR. We do not require consent to marketing to handle routine inquiries.
We process personal data to the extent necessary to fulfill the obligations set forth in particular by Act No. 563/1991 Coll., on accounting, Act No. 235/2004 Coll., on value added tax, Act No. 634/1992 Coll., on consumer protection, and Act No. 89/2012 Coll., the Civil Code. The legal basis is Article 6, paragraph 1, letter c) of the GDPR. Depending on the nature of the request, the performance of the contract pursuant to Article 6, paragraph 1, letter b) of the GDPR will also apply when handling a complaint or withdrawal.
We retain documents to the extent necessary and reasonable for the establishment, exercise or defence of legal claims and process technical records to protect accounts, prevent fraud, detect incidents and ensure the availability of the website. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interests are the protection of rights and property, customer safety and the secure operation of the e-shop. Before using this reason, we assess its necessity and impact on your rights; it does not serve as a general authorisation for marketing tracking.
Consent-based subscription: if you subscribe to our newsletter, we process your electronic contact for sending offers and information about our goods and services based on your consent pursuant to Article 6(1)(a) of the GDPR and Section 7(2) of Act No. 480/2004 Coll., on certain information society services. Consent is voluntary and is not a condition for purchase.
Offers to our own customers: if we obtain your electronic contact in connection with a sale, we may use it for offers of our own similar products or services under the conditions of Section 7(3) of Act No. 480/2004 Coll., unless you have refused this use. You must be able to refuse it simply and free of charge when obtaining the contact and in each message. The legal basis for processing is our legitimate interest in direct marketing pursuant to Article 6(1)(f) GDPR. Sending an inquiry or placing an incomplete order does not make you a customer for this purpose.
You can unsubscribe at any time free of charge via the unsubscribe link in each message or by sending a message to rensolar@rensolar.eu . You can object to direct marketing at any time; we will then no longer process your data for this purpose. This also applies to related profiling.
Service messages necessary for order processing or account security may be sent even after you have opted out of marketing; they do not serve to circumvent your opt-out of advertising communications.
If you sign up for the partner program, we process the data necessary for managing the partner account, recording and paying out commissions and communicating about cooperation on the basis of Article 6(1)(b) GDPR. For contact persons of legal entities, the legitimate interest applies according to Article 6(1)(f) GDPR. We fulfill accounting and tax obligations according to Article 6(1)(c) GDPR. Tracking visitors via partner cookies is governed by the consent rules in Section 4; the contract with the partner itself does not replace the visitor's consent.
Data marked as mandatory for an order or account is required to conclude or perform the relevant contract; without it, we may not be able to process the order or set up an account. Some billing data is required by law. Other data and consents are voluntary. Opting out of marketing or optional cookies does not prevent a purchase. If you do not provide the data necessary to answer a question, we may not be able to process it.
Cookies are small files stored in the browser. Local storage, tracking pixels and other technologies can function in a similar way. The rules under Section 89(3) of Act No. 127/2005 Coll., on electronic communications, also apply to other storage of information in the terminal device or access to it, not only to files called "cookies".
Necessary technologies: only technologies necessary solely for the transmission of a message over electronic communications networks or necessary for the provision of a service that you explicitly request, such as shopping cart, login and session security, may be used without consent. If we process personal data, the legal basis is, depending on the specific purpose, the performance of a contract or a legitimate interest in the secure functioning of the website.
Analytical technologies: used to measure website traffic and usage. For this purpose, Google Analytics 4 is included on the website. We base the storage and reading of optional identifiers and related processing of personal data for our analytics on your prior consent pursuant to Section 89(3) of the aforementioned Act and Article 6(1)(a) of the GDPR.
Advertising technology: used to evaluate advertising and display relevant offers. The website includes Meta Pixel. We base advertising tracking, audience creation and related profiling for our advertising purposes on your prior consent pursuant to Art. 6 (1) (a) GDPR; for storing data on the device and accessing it, Section 89 (3) of the aforementioned Act also applies.
Partner and other functional technologies: if they follow a partner's recommendations or provide additional functionality that is not necessary for the service you requested, they are also subject to prior consent. Simply labeling a cookie as "functional" does not exempt it from the consent requirement.
Optional technologies should only be activated after you have given your consent. Silence, continuing to browse, pre-ticked boxes or standard browser settings do not replace consent. Consent must be as easy to refuse as it is to give and to revoke. Revocation does not affect the lawfulness of processing carried out before its revocation.
Analytics and advertising tools may work with browser identifiers, device data, pages visited, and website events. For advertising tools, the data may be linked to data the provider already has, such as a user account with their service. The extent depends on the specific tool, settings, and your choices.
For Google services, further information is available in the Google Privacy Policy ; for Meta services, inthe Meta Privacy Policy . This information supplements the description of our own processing, but does not replace it.
Cookies can also be deleted or blocked in your browser. Blocking essential cookies may, for example, limit login or shopping cart functionality. Deleting cookies in itself may not revoke consent or remove data that has already been transmitted to providers; please also use the consent controls or contact us.
We make data available only to the extent necessary for the described purposes and on the appropriate legal basis. Depending on the services used, these are mainly the following categories of recipients:
Hosting, e-shop management, storage and communication providers who provide technical operation, maintenance, security and message delivery.
Carriers and payment service providers according to your chosen method of transport and payment; carriers receive the necessary identification and contact details for delivery. On the website we offer, among other things, TOPTRANS transport. The current method of transport and payment is stated when ordering.
Accountants, tax and legal advisors , if their involvement is necessary to fulfill our obligations or protect our rights.
Providers of mailing, analytical and advertising services to the extent appropriate to the relevant legal basis and your choices. For Google Analytics and Meta Pixel, it is also necessary to take into account further processing carried out by the service provider.
Public authorities and other authorized persons , if disclosure is required by law or is necessary for the exercise or defense of a specific legal claim.
If a supplier processes personal data on our behalf, we enter into an agreement with them pursuant to Article 28 GDPR. Some recipients, such as banks or carriers, may act as separate controllers for their own legal and contractual purposes. The role of the recipient is determined by the specific activity, not just by the designation in the contract.
This policy does not authorize unlimited sharing of data with business partners or use of data for any new purposes. We will inform you in advance of any further processing and provide an adequate legal basis.
When using foreign providers, in particular analytical, advertising or cloud services, data may be transferred outside the European Economic Area, for example to the USA, including remote support access from a third country. Such transfer must have, in addition to the legal basis for processing, an appropriate mechanism according to Chapter V of the GDPR.
We will also provide you with information about the guarantees used and how to obtain a copy of them at rensolar@rensolar.eu . Mere use of the website or familiarization with these policies does not constitute consent to transfer to third countries.
We determine the retention period individually based on the purpose and legal obligations. Longer retention of some documents does not justify keeping all data in an active customer or marketing profile.
Orders and contractual performance: for the period necessary to process the order and fulfill the related contractual obligations. After that, we only retain the data necessary for legal archiving or the protection of specific legal claims.
Accounting and tax documents: accounting documents are generally valid for 5 years from the end of the accounting period to which they relate, pursuant to Section 31 of Act No. 563/1991 Coll.; tax documents for VAT purposes are valid for 10 years from the end of the tax period in which the performance was made, pursuant to Section 35 of Act No. 235/2004 Coll. The longer relevant period applies to documents subject to both obligations. We assess the legal grounds for extension, for example pursuant to Section 32 of the Accounting Act, according to the specific situation.
Customer and partner account: for the duration of the relevant service until the account is cancelled or the contractual relationship is terminated. Cancelling an account does not terminate the obligation to retain selected accounting documents or the grounds for protecting legal claims. The rules for cancelling inactive accounts are listed below.
Inquiries and requests: for the duration of their processing and negotiation of a possible contract. After this need has ended, we will delete the data unless it is included in the contractual documentation or limited retention is justified for a specific claim.
Protection of legal claims: necessary documents for the period during which a specific claim can be asserted, taking into account the running of the limitation period, usually the three-year general limitation period according to Section 629, paragraph 1 of the Civil Code. Its beginning is not automatically identical to the date of the order. If a dispute or other proceedings are ongoing, we retain the relevant documents for the period necessary for its termination and settlement. This is not a blanket ten-year archiving of all customer data.
Commercial communications: for consent until its withdrawal, the end of the period for which it was granted, or the termination of the given purpose, whichever comes first. For customer marketing until refusal or objection, at most for a reasonable period from the last purchase specified below. After you unsubscribe, we may leave a minimal record of refusal to prevent re-inclusion in the mailing list; we do not use it for advertising.
Documents on consents and exercise of rights: to the extent necessary to demonstrate compliance with legal obligations and possible defense of claims. The mere retention of evidence does not constitute authorization to continue processing after the withdrawal of consent.
Technical records, cookies and analytical data: according to the specific purpose and deadlines added below and in Section 4. Records related to a specific incident may be kept separately for the time necessary to resolve it and protect rights.
After the relevant period, we will delete or irreversibly anonymize the data. In backups, deletion may take place within the specified cycle; data designated for deletion may not be returned from the backup to normal processing without re-applying deletion.
Under the conditions set out in the GDPR, you have the following rights in particular:
Right of access under Article 15 GDPR: to find out whether we are processing your personal data, to obtain information about the processing and a copy of your personal data.
Right to rectification pursuant to Article 16 GDPR: to request the correction of inaccurate and completion of incomplete data.
Right to erasure pursuant to Article 17 GDPR: to request the erasure of data where one of the legitimate grounds is met. Erasure may not be possible in particular for data required to comply with a legal obligation or to establish, exercise or defend legal claims.
Right to restriction of processing pursuant to Article 18 GDPR: for example, in the event of a dispute over the accuracy of the data or while a legitimate objection is being assessed.
Right to data portability according to Art. 20 GDPR: to receive the data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller, if the processing is based on consent or a contract and is carried out by automated means. If technically feasible, direct transmission can be requested.
Right to withdraw consent: at any time and as easily as you gave it; withdrawal does not affect the lawfulness of previous processing.
You may object at any time to processing based on legitimate interest pursuant to Article 6(1)(f) GDPR on grounds relating to your particular situation. We will no longer process the data unless we demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
You may object at any time and without giving any reasons to processing for direct marketing purposes, including related profiling. In such a case, we will cease processing for this purpose.
Write to rensolar@rensolar.eu or to the address of the controller's registered office specified in Part 1. Please indicate what the request concerns. If we have reasonable doubts about the identity of the applicant, we may only request additional information necessary to verify it.
We will inform you of the measures taken on the basis of the request without undue delay, at the latest within one month of receipt. If necessary, given the complexity and number of requests, the deadline may be extended by a further two months; we will inform you of the extension and the reasons for it within the first month. If we do not grant the request, we will inform you of the reasons and the possibilities of defence within the same basic deadline.
Processing is generally free of charge. Only in the case of manifestly unfounded or disproportionate requests, in particular repeated ones, can a reasonable fee be requested or the request be refused under the conditions of Article 12(5) GDPR; we must document these circumstances.
If you believe that we are processing your data unlawfully, you may file a complaint with the Office for Personal Data Protection , Pplk. Sochora 27, 170 00 Prague 7, https://uoou.gov.cz , or with another competent supervisory authority pursuant to Article 77 of the GDPR. Prior contact with our company is not a condition for filing a complaint. The right to judicial protection and possible compensation for damage under the terms of the GDPR is also preserved.
The advertising tools described in Section 4 may, based on consent, evaluate the interests of visitors and create advertising audiences. Such profiling should be distinguished from decision-making based solely on automated processing that produces legal or similarly significant effects on a person within the meaning of Article 22 GDPR.
We take technical and organizational measures appropriate to the risks of processing pursuant to Article 32 GDPR. Their purpose is to protect personal data against unauthorized access, alteration, loss or disclosure. We limit access to data to persons who need it for the relevant activity and are obliged to protect the confidentiality of the data. We continuously evaluate the level of security and the measures taken.
If a personal data breach occurs, we proceed in accordance with Articles 33 and 34 of the GDPR, including the potential obligation to report the breach to the supervisory authority and inform the affected persons.
If an information society service is offered directly to a child and the processing is based on his or her consent, in the Czech Republic the child may give this consent independently from the age of 15 pursuant to Section 7 of Act No. 110/2019 Coll. For a younger child, consent or approval of consent by a person exercising parental responsibility and adequate verification of this fact are required under the conditions of Article 8 of the GDPR.
This limit applies to the consent given; it does not establish a general prohibition on processing data of persons under the age of 15 and does not itself decide on the capacity of a minor to conclude a purchase contract. If you become aware of possible unauthorized processing of a child's data, please contact us.
The website may contain links to other websites. Once you have accessed them, the processing carried out by their operators is subject to their own policies. Embedded elements, such as maps or social media content, may, on the other hand, transmit technical data to a third party when they are loaded on our website. We also assess the necessary legal basis and any consent for these elements; the mere reference to external policies does not replace our obligations.
We update the policy when processing or legal requirements change. The current wording and the date of the update are available on this page. We will inform you of material changes in an appropriate and understandable manner. If the processing is to be extended to a new purpose, we will provide the necessary information before it begins and ensure an adequate legal basis. If the change requires new consent, we will request it separately; updating the policy itself or continuing to use the website does not replace it.
Please send questions about personal data protection and requests to exercise your rights to rensolar@rensolar.eu or in writing to E-VOLTIVA CZ sro, Kloboukova 1231/75, Chodov, 148 00 Prague 4, Czech Republic.