Privacy Policy

1. Why we issue this Policy

The protection of Your personal data is important to us. At SANITINO s.r.o. (hereinafter “SANITINO”), we undertake to protect the personal data provided by You and to process it in accordance with this Personal Data Processing Policy (hereinafter the “Policy”) (SANITINO has its registered office at Moravská 1259, 570 01 Litomyšl, Company ID No.: 275 45 423, and is registered in the Commercial Register under file No. C 25189 maintained by the Regional Court in Hradec Králové).

In this Policy, You will learn:

• who is responsible for processing personal data;
• the purposes for which we process personal data;
• the categories of personal data we process;
• why and for how long we process personal data;
• with whom we share personal data;
• what rights You have; and
• how You can contact us.

2. Key terms and information

Personal data is any information relating to a specific individual that makes it possible to identify that individual directly or indirectly. This may include, for example, a first name, surname, e-mail address, telephone number or payment details. It also includes technical data, such as an IP address or a cookie, if such data may lead to the identification of a user.

A data subject is any individual whose personal data we collect and process, typically a customer. If we process Your personal data, You are the data subject. For simplicity, we will refer to the data subject as “ You ” below.

A controller is the person or entity that decides why and how personal data is processed and is responsible for that processing. Unless otherwise stated in this Policy or in the terms and conditions of a specific service, SANITINO is the controller of Your personal data.

A processor is a person or entity that processes personal data for the Controller on the basis of the Controller’s instructions.

Processing of personal data means any operation performed on Your data, whether automatically or manually. Put simply, if SANITINO obtains Your data and works with it in any way (for example, stores it in a database, uses it to send an e-mail or transfers it to another entity), this constitutes the processing of personal data.

3. Purposes for which we process personal data

We process Your personal data for the following purposes and retain it for the periods specified below. We also indicate whether providing the data is a contractual or statutory requirement and the consequences of not providing it.

3.1. Performance of the purchase contract

3.1.1. Purpose of processing

We process Your personal data in order to enter into and perform the purchase contract. This allows us to sell goods to You and provide related services. This applies whether or not You are a registered customer. Your personal data is processed, for example, when You make a purchase, receive a payment confirmation or submit a warranty claim.

Processing the data is also necessary for compliance with our legal obligations, for example for accounting and tax purposes.

3.1.2. Personal data we process

If You purchase any goods from our e-shop, we process:

Personal data	Legal basis	Retention period	Consequences of not providing the data
First name, surname, business name, delivery address, billing address, registered office, Company ID No., VAT ID No.	Performance of a contract: for the delivery of goods; for invoicing purposes.	Until Your order has been completed and for a further 3 years for the handling of complaints, warranty claims or other legal claims. If a commercial guarantee applies to the purchased goods, at least for the duration of that guarantee.	Providing these data is a contractual requirement. Without them, we cannot enter into a contract with You.
First name, surname, business name, delivery address, billing address, registered office, Company ID No., VAT ID No.	Compliance with legal obligations, in particular tax and accounting regulations.	For the period required by law.	Providing these data is a statutory requirement.
E-mail address	Performance of a contract: to send an order confirmation; to send a payment confirmation; to handle any warranty claims; to send shipping details; to communicate about the order.	For the duration of processing Your order and for a further 3 years for the handling of complaints, warranty claims or other legal claims.	Providing this information is a contractual requirement. Without it, we cannot enter into a contract with You.
Telephone number	Performance of a contract: to send a notification when the goods are being delivered; to communicate about the order.	For the duration of the delivery of the goods and subsequently for 3 years.	Providing this information is a contractual requirement. Without it, we cannot enter into a contract with You.
Your payment details according to the selected payment method	Performance of a contract and compliance with legal obligations.	Personal data processed for the purpose of making a payment is retained only for the period necessary to execute and settle the payment transaction. Data processed through a payment gateway provider (e.g. payment card details) is processed directly by that provider in accordance with its terms and conditions. SANITINO does not have full access to this data. Data relating to a completed payment transaction (e.g. payment identifier, amount, transaction date and payment method) may be retained for the duration of the contractual relationship and subsequently for the period required by law.	Providing these data is both a contractual and statutory requirement. Without them, we cannot enter into a contract with You.
IP address	Performance of a contract: to ensure the correct and secure operation of the e-shop; to communicate with the payment intermediary.	For 180 days from the purchase in order to ensure system security and record redirects from the payment gateway.	Providing this information is a contractual requirement. Without it, we cannot enter into a contract with You (enable an online purchase).

3.2. Managing a user account

3.2.1. Purpose of processing

We process Your personal data in order to create and manage Your user account on our e-shop. The account allows You to shop conveniently, in particular by pre-filling the information required to complete a purchase and by making it easier for You to access information about Your purchases and payments.

3.2.2. Personal data we process

If You create a user account with us, we process:

Personal data	Legal basis	Retention period	Consequences of not providing the data
First name, surname, company, delivery address or registered office, Company ID No., VAT ID No., billing address, telephone number	Performance of a contract: to pre-fill information when completing a purchase.	We will stop processing these data immediately after You send us a request to cancel Your user account, but no later than 3 years after Your last activity in Your account.	Providing these data is a contractual requirement. Without them, we cannot provide the relevant service (maintain a user account).
E-mail address	Performance of a contract: to send e-mails necessary for managing Your account; to pre-fill information when completing a purchase.	We will stop processing this information immediately after You send us a request to cancel Your user account, but no later than 3 years after Your last activity in Your account.	Providing this information is a contractual requirement. Without it, we cannot provide the relevant service.
IP address	Performance of a contract: to ensure the correct operation of the user interface within the e-shop.	This information is retained for no longer than necessary, and in any event for no more than 90 days after it is recorded, unless special circumstances require a longer retention period.	Processing the IP address is necessary for the performance of the contract for maintaining a user account and for ensuring the security of the service. If this information were not processed, SANITINO would not be able to operate the user account.

3.3. Handling requests and enquiries

3.3.1. Purpose of processing

We process Your personal data in order to operate a functional communication system that enables us to maintain the necessary contact with You. This occurs when You contact us, for example, for technical advice, an individual price quotation, information about the status of Your order or the expected delivery date.

3.3.2. Personal data we process

If You contact us with an enquiry or request, we process the following data:

Personal data	Legal basis	Retention period	Consequences of not providing the data
Data You provide to us as part of Your enquiry or request, typically Your first name, surname, e-mail address or telephone number	Legitimate interest in ensuring the proper, efficient and secure handling of requests and enquiries from persons who contact us.	We will stop processing these data immediately after the request has been handled, and in any event no later than 3 years thereafter.	Processing is necessary so that we can assess and handle requests and enquiries and document how they were handled. Providing data for this purpose is a contractual requirement.

3.4. Managing reviews

3.4.1. Purpose of processing

We process Your personal data to enable registered customers to publish and manage product reviews, primarily to verify that a review was submitted by an authorised user (a customer who made a purchase). We also process it when handling reports of illegal or otherwise objectionable content, communicating with the person who submitted the review or report, and protecting our rights and the rights of third parties (for example, when resolving disputes).

3.4.2. Personal data we process:

Personal data	Legal basis	Retention period	Consequences of not providing the data
Data about the registered user (in particular first name and surname), data about the completed purchase, personal data contained in the review, and technical data (e.g. IP address, date and time the review was submitted)	Legitimate interest in facilitating reviews of the goods we offer.	For as long as the review is published on the SANITINO e-shop.	Without providing these data, it is not technically possible to submit a review. The public part of the review includes the first name and surname. However, the review may also be published without these data by selecting the relevant option.
First name, surname, e-mail address, technical data (e.g. IP address, date and time a report of illegal content was submitted)	Compliance with the legal obligation to provide a mechanism for receiving and handling reports of illegal content.	For the period necessary to process and handle the report of illegal content and subsequently for at least 3 years.	If certain data (first name, surname, e-mail address) is not provided, we will accept Your report, but we will not be able to inform You how it was handled.

3.5. Improving customer service

3.5.1. Purpose of processing

We process recordings of calls made to our telephone helpline in order to provide the highest standard of customer service and improve the customer experience. We use these recordings to assess and improve the quality of customer service. We may also use them to create a database of the most common customer issues and requests and to provide customers with the necessary information in advance on our e-shop.

3.5.2. Personal data we process:

Personal data	Legal basis	Retention period	Consequences of not providing the data
Recording of calls to the helpline, telephone number	Consent.	For a maximum of 12 months from the date of the call, unless a longer processing period is specified in an individual case due to the legitimate handling of a warranty claim or another related request.	You will always be informed at the beginning of the call that the call may be recorded. If You do not consent to the recording of the call, telephone customer service cannot be used; in that case, You may contact us in another way, for example by e-mail.

3.6. Sending marketing communications

3.6.1. Purpose of processing

We process Your personal data in order to send You marketing offers for goods and services similar to those You have purchased from us and to determine Your satisfaction with Your purchase. If You shop with us while logged in to Your account, we may send You an e-mail reminding You about an abandoned basket or about the products and product categories You viewed most recently.

We use external processors to send questionnaires, evaluate Your feedback and analyse our market position. For these purposes, we may provide them with information about the goods purchased and Your e-mail address.

3.6.2. Personal data we process:

Personal data	Legal basis	Retention period	Consequences of not providing the data
First name, surname, e-mail address, information about the goods purchased.	Legitimate interest determining satisfaction with the purchase; informing customers about goods and services related to their previous purchase and offering them other relevant products and services.	For this purpose, Your personal data may be processed until You unsubscribe from marketing communications using the link included in each e-mail.	If You opt out of receiving marketing communications, we will no longer send them to You. Providing personal data for the purpose of sending marketing communications is neither a statutory nor a contractual requirement. Providing the data is voluntary.
First name, surname, e-mail address, data about goods and product categories viewed, and goods added to the basket – applies only to registered customers .	Legitimate interest informing customers about an incomplete purchase process; offering similar goods in which the customer has shown an interest.	For this purpose, Your personal data may be processed until You unsubscribe from these marketing communications using the link included in each e-mail.	If You opt out of receiving these marketing communications, we will no longer send them to You. Providing personal data for the purpose of sending marketing communications is neither a statutory nor a contractual requirement. Providing the data is voluntary.

3.7. Sending newsletters

3.7.1. Purpose of processing

We process Your personal data in order to send newsletters, in particular information about discounts, seasonal or special promotions, news concerning our services, and information about our products and related services.

3.7.2. Personal data we process:

Personal data	Legal basis	Retention period	Consequences of not providing the data
E-mail address	Consent.	For this purpose, Your personal data may be processed until consent is withdrawn. At the same time, we regularly evaluate the activity of newsletter recipients (e.g. whether e-mails are opened or links are clicked). If we find that You have not been active for 180 days, we will ask You to confirm that You wish to continue receiving the newsletter. If You do not respond to this request, we will remove You from the recipient database.	If You do not give us consent or withdraw it, we cannot provide the service (sending newsletters) to You. Providing personal data for the purpose of sending newsletters is neither a statutory nor a contractual requirement. Providing the data is voluntary.

3.8. Enforcing rights or defending claims in the event of a dispute

3.8.1. Purpose of processing

We process Your personal data in order to enforce our rights or defend ourselves in the event of a dispute.

3.8.2. Personal data we process

In such a case, we may process personal data relating to the individual case, for example:

Personal data	Legal basis	Retention period	Consequences of not providing the data
First name, surname, company, residential or registered office address, Company ID No., VAT ID No., billing address, e-mail address, payment details	Legitimate interest: to enforce rights or defend claims in the event of a dispute.	For the duration of the dispute and the applicable limitation period, typically for 10 years after the dispute has been finally concluded.	Providing these data is a contractual requirement. Without them, we cannot provide the relevant service.

3.9. Processing access data when visiting the e-shop

3.9.1. Purpose of processing

We process Your personal data in order to maintain technological security. Server log files are created and stored for this purpose.

3.9.2. Personal data we process

Personal data	Legal basis	Retention period	Consequences of not providing the data
Name of the website visited, version/type of browser used, Your operating system, the previously visited website (referring URL), time of the server request, volume of data transferred, and hostname of the accessing computer (IP address)	Legitimate interest: to maintain security; to enforce rights or defend claims in the event of a dispute.	Server log files are retained for 90 days. If the data needs to be retained for longer, for example as evidence in a dispute, the files will be deleted once the incident has been fully resolved. As a rule, these data do not allow a specific person to be identified directly; however, an IP address is considered personal data under certain circumstances.	Processing these data is necessary for the secure and functional operation of the e-shop. Without processing them, access to the e-shop could not be provided. However, You may restrict certain technical data through Your device settings.

SANITINO may also process personal data through cookies; more information is available in the Cookie Policy .

4. Who has access to Your personal data

Your personal data is accessible only to persons or companies that need it for a specific purpose, to our business partners that provide transport services, or to other external processors that assist us with IT services and administration. A list of these recipients is provided below. We may also transfer Your data in accordance with applicable law, for example in response to requests from public authorities.

We ensure that Your personal data is shared only to the extent strictly necessary and exclusively with entities that provide appropriate guarantees for the protection of the data and its processing in accordance with applicable law.

In the course of our business relationships, Your personal data may be shared with or made available to third parties that may also be located outside the European Economic Area (EEA), i.e. in third countries. Any transfer to a third country will take place only in accordance with applicable data protection law and, in particular, subject to guarantees of an adequate level of data protection. This means that Your data will be transferred only where there is an adequacy decision of the European Commission (Article 45 GDPR), appropriate safeguards are provided for the protection of Your personal data (Article 46 GDPR), or a statutory derogation applies (Article 49 GDPR). Appropriate safeguards within the meaning of Article 46 GDPR include the standard data protection clauses published by the European Commission.

Please contact us for more information about transfers of data outside the EEA.

5. Your rights and other important information

5.1. Right of access

You have the right to request information about the personal data we process about You, how we use it and why we process it. If You request this information, we will provide You with a copy of the data we hold without undue delay. This right helps You maintain control over how Your data is processed and ensure that it is accurate and up to date.

Example: To find out what personal data we hold about You, You can view it directly in Your user account. If You have not created an account or some information is not available in the account, You can contact us and we will provide You with an overview of all the data we process.

5.2. Right to rectification

If You believe that the personal data we process about You is inaccurate, outdated or incomplete, You have the right to request that it be corrected or supplemented.

Example: If, for example, You have changed Your surname or telephone number, You can update it directly in the settings of Your user account. To correct other data, You can contact us and we will provide You with an overview of all the data we process.

5.3. Right to erasure

You have the right to request the erasure of Your personal data. However, this right does not apply in every situation, and in some cases there may be reasons why we cannot erase the data.

If You request the erasure of Your personal data, we will erase it where (i) it is no longer necessary for the purposes for which it was collected or otherwise processed; (ii) You have withdrawn consent to the processing, the personal data was processed on the basis of consent, and there is no other legal basis for the processing; (iii) You object to the processing and there are no overriding legitimate grounds for processing Your personal data; (iv) the processing is unlawful; or (v) the legal obligation to process the data under European Union or national law no longer applies.

Example: If You are no longer interested in maintaining an account, You can ask us to delete the personal data we have collected about You, such as Your contact details. Please bear in mind, however, that we will need to continue processing certain data, such as payment information, because we are required to retain it for accounting and tax purposes.

5.4. Right to restriction of processing

Until we resolve any disputed issues concerning the processing of Your personal data, You may request that the processing of Your personal data be restricted. Where processing has been restricted, Your personal data may, with the exception of storage, be processed only with Your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another person, or for reasons of important public interest of the European Union or a Member State.

5.5. Right to data portability

You have the right to receive personal data concerning You that (i) You have provided to us, (ii) is processed on the basis of consent or a contract, and (iii) is processed by automated means, in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller. However, we will not be able to comply where exercising this right would adversely affect the rights and freedoms of others.

5.6. Right to object

You have the right to object to the processing of Your personal data where it is processed on the basis of the public interest or our legitimate interests, including profiling. If You object, we will stop processing Your data unless there are compelling grounds for continuing the processing. You also have the right to object at any time to processing for direct marketing purposes. If You object, the personal data will no longer be processed for that purpose.

5.7. Right to withdraw consent

Where we process Your personal data on the basis of consent, You have the right to withdraw that consent at any time. Once we receive Your withdrawal, we will no longer process Your data for the relevant purpose. Withdrawal does not affect the lawfulness of processing based on consent given before its withdrawal.

5.8. Right to lodge a complaint

Our activities are supervised by the Office for Personal Data Protection, with which You may lodge a complaint if You are dissatisfied. You may send Your complaint to:

Office for Personal Data Protection
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
E-mail: posta@uoou.gov.cz
Website: www.uoou.gov.cz

6. How to exercise Your rights and contact SANITINO

As a rule, we handle Your requests free of charge because it is important to us that You have a clear overview of how Your personal data is processed. However, in the case of repeated or manifestly unfounded requests to exercise the rights listed above, we may charge a reasonable fee for handling the request or refuse to act on it. We would inform You of such a decision and the reasons for it.

To exercise any of the rights listed above, please contact us:

1. at the e-mail address: info@sanitino.dk;
2. via a data box message sent to data box ID: kxs5aca;
3. at Moravská 1259, 570 01 Litomyšl.

We will need to verify that You are in fact the person to whom the request relates. We will choose a method that is appropriate and as little burdensome as possible.

We recommend that Your request bear an advanced electronic signature or an officially certified signature. However, if we have doubts about Your identity, we may request additional information to verify it.

We will respond to Your questions or requests without undue delay (no later than within one month, although the period may be extended in justified cases).

7. Validity and effective date

This Policy was issued on: 19 May 2026
This Policy is effective from: 10 September 2026

When this Policy takes effect, its previous version ceases to be effective.

 

 

 

Additional recipients of personal data

Personal data may be transferred to public authorities or SANITINO’s contractual partners.

1. Public authorities

SANITINO discloses personal data to public authorities only on the instructions of data subjects and in cases where required by law, or in order to protect the legitimate interests of SANITINO or the legitimate interests of third parties.

2. Contractual partners

SANITINO may also transfer personal data to contractual partners where this is appropriate and proportionate to the purpose of the processing.

1. Providers of customer communication services

SANITINO shares personal data with certain partners that help SANITINO communicate with customers, for example by distributing newsletters or operating the telephone helpline. The data shared may include first name and surname, e-mail address, business name, Company ID No./VAT ID No., telephone number, billing/correspondence address, or order details.

Targito.com s.r.o.
Jungmannovo náměstí 753/18
110 00 Praha 1
Czech Republic
Company ID No.: 28445937
VAT ID No.: CZ28445937

Daktela s.r.o.
Pod Krejcárkem 975
130 00 Praha 3
Czech Republic
Company ID No.: 27232263
VAT ID No.: CZ27232263

2. Carriers

SANITINO shares personal data with carriers so that all orders can be delivered properly. The data shared may include first name and surname, e-mail address, business name, Company ID No./VAT ID No., telephone number, billing/correspondence address, or order details.

UNITED PARCEL SERVICE CZECH REPUBLIC, s.r.o.
Ke kopanině 1049
252 67 Tuchoměřice
Czech Republic
Company ID No.: 25684094
VAT ID No.: CZ25684094

General Logistics Systems Czech Republic s.r.o.
Průmyslová 5619/1
586 01 Jihlava
Czech Republic
Company ID No.: 26087961
VAT ID No.: CZ26087961

PPL CZ s.r.o./DHL
Březhradská 199/2a
503 32 Hradec Králové
Czech Republic
Company ID No.: 25194798
VAT ID No.: CZ25194798

Direct Parcel Distribution CZ s.r.o.
Modletice 135
251 01 Modletice
Czech Republic
Company ID No.: 61329266
VAT ID No.: CZ61329266

DACHSER Czech Republic a.s.
Huťská 272,
272 01 Kladno
Czech Republic
Company ID No.: 27090833
VAT ID No.: CZ27090833

TOPTRANS EU, a.s., organizační složka
Opravářská 944/2
102 00 Praha 10 – Hostivař
Czech Republic
Company ID No.: 28202376
VAT ID No.: CZ28202376

Raben Logistics Czech s.r.o.
Komerční 535
251 01 Nupaky
Czech Republic
Company ID No.: 24705128
VAT ID No.: 24705128

Kuehne + Nagel, spol. s r.o.
Bucharova 2657/12, Stodůlky (Praha 13)
158 00 Praha
Czech Republic
Company ID No.: 45787115
VAT ID No.: CZ45787115

Geis CZ s.r.o.
Zemská 211
337 01 Ejpovice
Czech Republic
Company ID No.: 44567359
VAT ID No.: CZ44567359

3. Payment service providers

SANITINO shares personal data with payment service providers for the purpose of processing payments. The data shared may include first name and surname, e-mail address, business name, Company ID No./VAT ID No., telephone number, billing/correspondence address, payment card number or bank account number.

PayPal Holdings, Inc.
2211 N 1st St
SAN JOSE, CA
95131-2021
USA
+1.408.9671000

Trust Pay, a.s.
Za kasárňou 1
831 03 Bratislava
Slovakia
VAT ID No.: SK2022928215

4. Providers of technical services related to the e-shop

SANITINO also shares personal data with providers of technical services related to the e-shop. The data shared may include first name and surname, e-mail address, business name, Company ID No./VAT ID No., telephone number, billing/correspondence address, details of purchased products, IP address or bank account number.

Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA
Tax No. 91-1144442

Etnetera a.s.
Jankovcova 1037/49
170 00 Praha 7
Czech Republic
Company ID No.: 25103814
VAT ID No.: CZ25103814

5. Other contractual partners

Císek, advokátní kancelář s.r.o.
Jana Babáka 2733/11
612 00 Brno
Czech Republic
Company ID No.: 09761098
VAT ID No.: CZ09761098

We may occasionally also disclose Your personal data to other contractual partners where this is appropriate and proportionate to the purpose of the processing.