Privacy Policy

• Basic Information
• Type of Data Processed
• Versions for Mobile Phones and Mobile Apps
• Why We Collect and Process Your Personal Information
• Legal Grounds for Processing of Personal Data
• Transfer of Personal Data to Third Parties
• What Is the Period for Processing Your Personal Data?
• Personal Data Security
• Password Security
• Personal Data of Children Younger Than 16 Years of Age
• What Are Your Rights Related to Personal Data Protection

Basic Information

Personal Data Controller

Alza.cz a.s. is registered at the office at Prague 7, Jankovcova 1522/53, postcode 170 00, company identification No. 27082440, incorporated in the Companies Register kept by the Municipal Court in Prague, Section B, Insert 8573, as a data controller shall process your personal data.

Type of Data Processed

Personal Data Provided By You

We process personal data provided by you.

Personal Data Obtained Other Than Directly from You

As part of joint marketing campaigns organised together with our business partners, we are entitled to process your personal data and we may combine them for the purposes of campaigns or of due performance of the agreement, as the case may be.

In the event that your personal data is disclosed to a third party, we shall inform you in advance including informing you of the identity of such third party. If anyone discloses your personal data to us, you will have to be informed as well.

Personal Data of Third Persons Provided by You

In the event you provide us personal data of third persons, you are obliged to inform the person concerned and procure his/her consent to this Personal Data Protection Policy.

Personal Data Processed Automatically

When you visit our website, we may collect certain information such the IP address, date and time of the visit to our website, information about your Internet browser, operation system or language settings. We may also process information about your conduct on our website, such as links opened or goods displayed.

If you access our website from your mobile phone or a similar device or through one of our mobile applications, we can process information about your mobile device as well (mobile phone details, records of any application crash etc.).

Cookies

We process cookies automatically. Personalisation and targeted advertising can be disabled anytime in Privacy settings.

To change your cookie settings (except for technical cookies), click here.

Your consent to the processing of cookies applies to websites for which Alza.cz a.s. is the controller of these data and which have the “alza” domain root. This includes, in particular, the websites alza.cz, alza.sk, alza.at, alza.de, alza.hu and other related subdomains.

Camera Systems In Our Stores

We automatically process camera recordings at our premises, including our self-service boxes, the so-called AlzaBoxes.

Our stores and our self-service boxes, the so-called AlzaBoxes, are monitored by camera systems with online transmission and recording. Only image is recorded (no sound). The stores are equipped with cameras for the sake of prevention and also of investigation of potential illegal activities. The camera systems are operated by us, Alza.cz a.s.

Mobile Version

If you access our website from a phone, tablet or similar device, you access the version optimised for such devices. Your personal data is processed similarly to the computer access.

You can also download the Alza application (e.g. Alza.cz, Alza.sk etc.), which will make your shopping easier, or Alza Media, which is designed for your electronic content purchased in our online store.

If you grant the app location permission, we can use the location of your device to provide you better user comfort and relevant offers of goods and services (e.g. we can show you the closest Alza store). We may also use the data collected to send you customised newsletters. If you are not comfortable with this, you can easily unsubscribe (see here). The personalised content may be similarly displayed on our website. In this case as well, you have the option to raise an objection to such processing (see Contacts page > Other > Personal Data > Raise an Objection).

Why We Collect and Process Your Personal Data

Your personal data is processed for the following reasons:

• Purchase of goods and services: the primary purpose of processing your data is due dispatch and delivery of your order. If a problem occurs, we know who to contact from the data you provided.
• Customer care: if you address us with a question/issue, we have to process your personal data in order to answer/resolve it. The data may be transferred to third parties in certain cases (e.g. delivery company or service centre).
• User account: thanks to the personal data entered in your user profile, you will be able to use a number of functions (e.g. we can easily inform you via your telephone number about the delivery time of your order, and it also serves for secure access to your user account). You can change the entered details at any time, except for the e-mail address that serves for signing into your user account.
• Student’s program: If you are a registered Alza user and an ISIC / ITIC card holder, you can register in the Alza student program. In this case, we will store your name, surname and ISIC / ITIC card number and with each purchase, we will verify the validity of the card in the ISIC database. You can end this processing any time by removing the card from your user account, however in such a case you will be also deregistered from the Alza student program. However, even after removing the card from the user account, we will keep the information that the specific goods were purchased with a student discount in our internal systems.
• Marketing:
  • Electronic marketing: e-mail commercial communication is sent to you upon your consent. You can easily unsubscribe from our newsletters by adjusting your user profile settings, using our contact form, or calling our hotline at +44 (0)203 514 4411 (when prompted by the robot, please choose "other" as the reason for the call). In case you create more user profiles in which you enter the same contact details, (e.g. you have several accounts for different e-mail addresses, but the telephone number is the same in all the accounts), an automatic sign-off from commercial communication cannot be effected for all the user accounts due to technical reasons. You have to contact us by phone or through the contact form so that all your user accounts may be unsubscribed.
  • Telemarketing: marketing calls are made in order to offer you goods and services and related marketing communication. The legal grounds for the processing of your telephone number is either with your consent or at least our legitimate interest in the conventional direct marketing. You are entitled to raise an objection to such processing (see Contact us > Other > Personal data > Raising objection) on our website.
  • You can receive a phone call either from our call centre colleague or our robot.
  • Push notifications: the Alza or AlzaMedia mobile application sends so-called push notifications, i.e. short messages to your phone. You can easily adjust the receiving of these notifications in your phone settings.
  • Marketing competitions: in some cases, the winner may be photographed or recorded mainly for the reason of transparency of our marketing competitions. Such processing of personal data is made on the grounds of our legitimate interest, which consists in the enhancement of credibility of the competitions for other competitors and increasing attractiveness of the competitions. You are entitled to raise an objection to such processing (see Contact us > Other > Personal data > Raising objection) on our website.
  • Retargeting: In some cases we use retargeting techniques, and you have the right to refuse retargeting by clicking this link and selecting the appropriate option.
• Improvement of services: we are able to offer relevant goods thanks to the history of your orders and conduct on the website (e.g. accessories to the product purchased). Therefore we display such products that are intended just for you and correspond to your needs and interests. In order to optimise web features, we can also use tools testing different variants (A/B testing), such as Google Analytics, Facebook Analytics etc.
• Customer reviews of goods and services: after you purchase products or services from us, your may be asked to evaluate them. You may also post a review on your own initiative.
• Call center: If you contact us through our call center (hotline), your phone call may be recorded following prior notification. These recordings are used to ensure the quality control of services provided by our employees, to verify and retain the content of contracts concluded over the phone, and to protect the legitimate interests of Alza or third parties, particularly in cases of fraudulent conduct.
• Assertion of rights and legal claims and inspection by public authorities: we can also process your personal data in order to assert our rights and legal claims (e.g. in the event that we have an overdue invoice in your name or to prove delivery of ordered goods, to share basic purchase information with the original gift voucher purchaser, or to provide relevant data to a representative of a legal entity, e.g., for tax documents issued to such a legal entity or basic information about accounts opened in the name of the respective legal entity). We may also process your data for inspections by public authorities and other serious reasons.

Legal Grounds for Processing of Personal Data

Conclusion and Performance of Agreement

A large part of your personal data are needed by us in order to conclude the purchase agreement or another contract for goods and services you intend to purchase. After the agreement is concluded, we process your personal data in order to duly deliver the purchased goods, or to render the purchased services. We have to process contact, billing, and delivery details in particular due to the above-mentioned legal grounds. Due to the above-mentioned legal grounds, we have to process in particular contact, billing and delivery details, or your ISIC / ITIC card number, if you are a member of Alza student program.

Legitimate Interest

We also use your personal data to provide you the relevant content, which may be of interest to you. On the grounds of legitimate interest, we process particular personal data, which is processed automatically, and cookies.

We may also send you commercial communication such as e-mails, text messages and so-called push notifications via mobile applications, or call you on the same legal grounds. Processing of personal data related to monitoring via camera systems in our stores is based on the above legal grounds as well.

Due to the protection against illegal distribution and disclosure of the electronic book you purchased (or other electronic content), your first name, surname and address are displayed in the electronic book.

In order to prove who was the receiver of the goods purchased with the One Third service or provided via Alza NEO, we may take a photo of the person in question when handing them over.

If you are listed as a so-called authorised person of our entrepreneur customer, your orders and other actions will be attributed to this entrepreneur customer. If you do not consent, please fill in an e-mail address other than the one listed with the authorised person of this company customer when making your order. Alternatively, you can request to be deleted as an authorised person of this entrepreneur customer. For entrepreneur customer or company representatives, we may also share tax documents issued in the name of the corporate customer or basic information about user accounts associated with the identification number or business name of such customer for the purpose of fraud prevention.

In case we process your personal data on these legal grounds, you are entitled to raise an objection to such processing (see Contact us > Other > Personal data > Raising objection) on our website.

Consent

For the purposes of e-mail marketing and telemarketing, we process your personal data upon your consent. If you do not grant your consent and you are our customer, we can send you commercial newsletter (or give you telemarketing calls) even without your consent. In any case, you are entitled to reject such marketing communication simply by (a) adjusting you user profile settings, (b) using our contact form, or c) calling our hotline at +44 (0)203 514 4411 (when prompted by the robot, please choose "other" as the reason for the call).

We also ask for your consent if we need to verify your ability to pay for the goods delivered to you without your paying the full purchase price in advance (e.g. the One Third service, when you pay 1/3 of the purchase price upon collecting the goods and the remaining 2/3 within 3 months, or the service Alza NEO, when we loan you the selected device).

We also ask for your consent when, in cooperation with Home Credit, we display an estimate of the amount that Home Credit could lend you for your purchases on installments. If you wish to withdraw your consent, please let us know at [email protected] or call our customer service line. You can find the full text of the consent here.

We also ask for your consent when you sign, for example, the receipt of a claim using the Signosoft s.r.o. signpad, ID No.: 24307190. If you do not agree with the biometric signature using the signpad, you can sign the relevant document in the wet ink.

If you grant your consent to the personal data processing, you are entitled to withdraw it at any time through our contact form (see Contact us > Other > Personal data > Other).

Transfer of Personal Data to Third Parties

Your personal data is transferred to third parties in the following cases:

• Delivery of goods: the carrier would never be able to deliver the goods ordered unless we transfer the information on where and to whom the goods should be delivered. This data is transferred to the carrier as entered in the order. Such data includes in particular your first name and surname, delivery address, e-mail address, telephone number where the carrier may contact you, and the amount to be paid on delivery, as the case may be. The carrier is only entitled to process the personal data we transfer for the purposes of delivery; the carrier must delete the personal data promptly afterwards.
• Send it by AlzaBox service: As part of the Send it by AlzaBox service, we transmit to the recipient of the parcel the data about the sender of the parcel, namely the name and surname of the sender. In the context of solving shipping errors (shipment damage), we can pass on the information shared by the recipient to the sender and vice versa (e.g. contact details of the sender to the recipient, photos of the shipment taken by the recipient to the sender etc.). If the transport is provided by a carrier, we provide the carrier with the data necessary for delivery (in particular the name, surname and telephone number of the recipient).
• Alza gift vouchers: in justified cases, we may share basic information about purchases made using Alza gift vouchers (e.g., the name of the purchaser, the goods purchased, the address where the goods were picked up) with the original purchaser of the voucher. The reason for such sharing is primarily to prevent and investigate fraud, e.g. when the original purchaser claims that the voucher cannot be used (it looks like it has been used), even though they have not used it themselves.
• Electronic content and and third-party gift vouchers: if you purchase a subscription to electronic content (magazines and other), as well as if you purchase gift vouchers for goods and services of third parties, we transfer your personal information to the relevant publisher or seller, which is listed in the product description. Your personal data is subsequently processed by the publisher or seller in accordance with the applicable legislation and its privacy policy (e.g. if the publisher is Burda Praha s.r.o., company identification No. 152 73 598, your data becomes subject to their privacy policy).
• Delivery of goods stored for us by a contractual partner: if you order goods which are stored by our contractual partner, we have to transfer your personal data to this contractual partner who shall complete the order. Such data include sin particular your first name and surname, delivery address, e-mail address, telephone number where the carrier may contact you, and the amount to be paid on delivery, as the case may be. The contractual partner has to transfer the data to the carrier that shall deliver the goods; otherwise the carrier would not be able to make the delivery. The contractual partner that stores the goods for us and the carrier are only entitled to process the personal data we transfer to them for the purposes of the goods storage/delivery; they must delete the personal data promptly afterwards.
• Payment Cards: Our company does not possess the details of payment cards used by you. The details of your payment cards are only available to the secure payment gateway Adyen and the relevant bank.
• If you have your payment card stored to speed up further purchases in our online shop, we only have basic information such as the first and last digits of the card. If you wish to delete this data, go to the user profile settings and delete the payment card information (Account Settings > Payment Cards > Remove).
• Cryptocurrency payment: if you choose cryptocurrency payment, we may share information about you and your purchase, such as the amount to be paid or your email address, to the cryptocurrency payment gateway.

• One Third Service: If you make a purchase using the One Third service, you will receive the goods before you pay us the full purchase price. Therefore, in this case, we verify your ability to pay the remaining part of the purchase price. For this purpose, we may pass on your personal data to Nikita Engine s.r.o. (Company ID No. 04180054), GEOAPPLY s.r.o. (Company ID No. 03477258), Intrum Czech, s.r.o. (Company ID No. 27221971), CRIF – Czech Credit Bureau, a.s. (Company ID No. 26212242), and CRIF – Registr platebních informací s.r.o. (Company ID No. 05775809).
  If you do not pay the remaining part of the purchase price properly and on time, we may pass on your personal data and information about the claim to databases maintained by Intrum Czech, s.r.o. (Company ID No. 27221971) and LogiCall Česká republika, s.r.o. (Company ID No. 26849551), or to the CRIBIS system operated by CRIF – Czech Credit Bureau, a.s. (Company ID No. 26212242), or to the REPI system operated by CRIF – Registr platebních informací s.r.o. (Company ID No. 05775809). Please note that in the REPI system, personal data are collected for the purpose of enabling users to share information about the creditworthiness, payment discipline, and trustworthiness of their clients (more at www.repi.cz).
• Student’s program: If you have registered in the Alza student program, we verify the validity of your ISIC/ITIC card with each purchase in the ISIC database, ie in the database of company GTS ALIVE s.r.o., IČO 26193272. Transferred data include only your name, surname and card number, details of your purchase are not shared with the company GTS ALIVE s.r.o.
• Alza NEO Service: As part of the rental service, we will provide you with a device (e.g. phone, tablet, laptop) for temporary use against a regular fee, without you paying the purchase price of the device. Therefore, we verify your ability to pay the regular rental fees. For this purpose, we may pass on your personal data to Nikita Engine s.r.o. (Company ID No. 04180054), GEOAPPLY s.r.o. (Company ID No. 03477258), Intrum Czech, s.r.o. (Company ID No. 27221971), CRIF – Czech Credit Bureau, a.s. (Company ID No. 26212242), and CRIF – Registr platebních informací s.r.o. (Company ID No. 05775809).
  If you do not pay the regular monthly membership fees for the rented product properly and on time, we may pass on your personal data and information about the claim to databases maintained by Intrum Czech, s.r.o. (Company ID No. 27221971) and LogiCall Česká republika, s.r.o. (Company ID No. 26849551), or to the CRIBIS system operated by CRIF – Czech Credit Bureau, a.s. (Company ID No. 26212242), or to the REPI system operated by CRIF – Registr platebních informací s.r.o. (Company ID No. 05775809). Please note that in the REPI system, personal data are collected for the purpose of enabling users to share information about the creditworthiness, payment discipline, and trustworthiness of their clients (more at www.repi.cz)
• Extended Due Date in the Alza for Business Program: For the purpose of verifying your creditworthiness, we may pass on your personal data to Bisnode Česká republika, a.s. (Company ID No. 63078201), CRIF – Czech Credit Bureau, a.s. (Company ID No. 26212242), Nikita Engine s.r.o. (Company ID No. 04180054), GEOAPPLY s.r.o. (Company ID No. 03477258), and Intrum Czech, s.r.o. (Company ID No. 27221971). 
• Get the best Internet and TV prices at your address: The service is provided by a third party – the company Porovnejsito.cz s.r.o., Company ID No: 06523072, to which your personal data will be transferred for the purpose of providing the service. Only the personal data you fill in the form requesting this service (name, address, e-mail address and telephone number) shall be transferred. The terms and conditions of processing personal data of the company Porovnejsito.cz can be found here
• Bank ID verification: to simplify access to some of our services, such as One Third Service or Alza NEO, or to verify your age when purchasing alcohol or other age-restricted goods or services, we offer you the possibility to verify your identity using the BankID service. In this case, your personal information is transmitted to the identification service provider, Bank Identity, Inc., ID No. 09513817, and your bank.
• Purchase from Alza via Aukro.cz: If you have a registered account with us and you also purchase from us on the Aukro.cz portal, your data will be reflected in the order via the Aukro.cz portal as part of the service improvement.
• Commercial Communication: in case we send you commercial communication (e.g. via e-mail or text message) or if we use telemarketing, we may use a third party to distribute the messages or make phone calls. Such third party is bound by the obligation of confidentiality and is not allowed to use your personal data for any other purpose.
• Satisfaction surveys: In order to improve the quality of our services, we use satisfaction surveys distributed by our contractual partner ROUCEK Group s.r.o., ID No. 01451561 ([email protected]). For this purpose, we provide this partner with your personal data (in particular your name and email address).
• Reviews of products or services via Heureka.cz or Zboží.cz: In case we send you questionnaires about purchase review, your data (e-mail address, information about purchased goods/services) may be shared with the operator of the Heureka.cz portal (Heureka Group a.s.), or the operator of the Zboží.cz portal (Seznam.cz, a.s.).
• Exercise of rights and legal claims, public authorities: To exercise our rights and legal claims (e.g. in the event that we have an overdue invoice in your name - if you do not pay for the rental of the device in the AlzaNEO program, if you do not pay the remaining part of the purchase price in the Third Party program, if you do not pay for the goods you have received or if you otherwise enrich yourself at the expense of Alza), we may transfer your personal data to (i) collection agencies that assist us in collecting debts, (ii) companies that are interested in purchasing Alza's claim against you, (iii) the company that will purchase such claim (in the case of an assignment of claim), (iv) an attorney, or (v) a public authority. If we are obliged to transfer your personal data by virtue of law or upon a request by a public authority (e.g. Czech Police), we have to comply.
• Fraud prevention and investigation: in order to simplify the investigation of fraudulent behavior, in particular behavior related to vouchers for purchases in our e-shop (gift vouchers) or the false entry of a legal entity identification number or other identification data in the billing information or user account, we may disclose your personal data to the original purchaser of the voucher or the relevant legal entity or its representative.
• Camera records – area surrounding AlzaBox: Alza enables delivery to AlzaBoxes to selected contractual partners. In order to protect the property rights of these contractual partners, Alza may provide the partners with camera footage of the AlzaBox surroundings.
• Complaints: to expedite and to process your complaint more efficiently, the service centre may need additional information about the fault, its manifestations or other relevant information. For this purpose, we forward to the service centre (to which we send the product you have complained about) the information you have provided in the complaint (i.e. mainly your name, address, telephone number, email).
• Insurance Claim Reporting: For the purpose of duly reporting and subsequently handling an insurance claim, we transfer your personal data to Česká podnikatelská pojišťovna, a.s., Vienna Insurance Group (Company ID No. 63998530) and RG Consulting s.r.o. (RENOMIA) (Company ID No. 25901591). However, if you concluded your insurance contract by 30 September 2016, we will transfer your personal data to BNP Paribas Cardif Pojišťovna, a.s. (Company ID No. 25080954).
• Non-Profit Organizations within the Constellation of Help Project: After you make a contribution to a selected project, the non-profit organization of your choice will receive the donation. This results in the conclusion of a donation agreement between you and the chosen non-profit organization. We transfer your personal data to that non-profit organization so that it can properly account for the donation and issue you with a donation confirmation that can be applied in your tax return for deduction purposes. The transfer of your personal data is therefore necessary for the conclusion and performance of the donation agreement with the respective non-profit organization.

• Companies in the Group: your personal data may be shared on the legal grounds of legitimate interest with subsidiaries of Alza.cz a.s., registered office at Prague 7, Jankovcova 1522/53, postcode 170 00, company identification No. 27082440, incorporated in the Companies Register kept by the Municipal Court in Prague, Section B, Insert 8573, namely with:
  • Alza.sk s. r. o., company identification No. 36 562 939, with its registered office at Karadžičova 8, Bratislava - mestská časť Ružinov, postcode 821 08 incorporated in the Companies Register kept by the Municipal Court in Bratislava III;
  • Alza.at GmbH, incorporated at the Provincial Court in Wien, file No. 468821v, with its registered office at: Favoritenstraße 21, 1040 Wien;
  • Alza.de GmbH, incorporated at the District Court in Munich, file No. HRB 227361, with its registered office at Geigerstr. 2, Munich, Germany;
  • Alza.hu Kft, reg. No. 01-09-286873, with its registered office at 1137 Budapest, Róbert Károly krt 54-58;
• whereas you are entitled to raise an objection thereto through our contact form (Other > Personal data).

What Is the Period for Processing Your Personal Data?

We shall process your personal data for the entire duration of the contractual relationship between you and us.

In case your personal data processing is based on consent, your personal data shall be, in general, processed for 7 years or until such consent is withdrawn.

In case you subscribe to commercial communication, your personal data shall be processed for 7 years or until you express your disapproval of such communication. You can easily express your disapproval by adjusting your user profile settings, using our contact form, or calling our hotline at +44 (0)203 514 4411 (when prompted by the robot, please choose "other" as the reason for the call).

Please note that the personal data necessary for the due rendering of services or for the fulfillment of all our duties, ensuing either from the contract between us or from generally binding legal regulations have to be processed regardless of whether you granted your consent for the period set out in the relevant legal regulations and in compliance therewith (e.g. tax documents must be processed for at least 10 years).

The data obtained through the user account or in a similar way are processed for the period of using our services and then usually for 5 years after cancellation. Basic identification data and the information why the user account was cancelled or information which is a part of operational advance deposits are usually stored for the relevant period.

Cookies: Cookies reflecting user behavior are deleted after 30 days, with older data being available only in anonymized form within Google Analytics.

The recordings of phone calls from and to the call center are archived for a short period, not exceeding 1 year, unless it is necessary for us to store them for a longer period due to a legitimate interest (e.g. suspicion of data misuse, fraud etc.).

The camera records are usually stored for 90 days. If illegal conduct occurs in the monitored area, we can call the police and give the records to the relevant authority (police, court etc.). In such case, the records are not deleted after 90 days; we keep them for the sake of evidence until the issue is finally decided.

CCTV footage records at AlzaBoxes are normally stored for 21 days.

Personal Data Security

Your personal data is safe with us. We have adopted adequate technical and organisational measures in order to prevent unauthorised access and misuse of your personal data.

At Alza we are concerned about the protection of your personal data. Therefore we regularly check and improve our security. All communication between your device and our web servers is encrypted. Logins are hashed and your data is only stored on servers in secure data centers with limited, carefully controlled and audited access.

We try to use such safety measures that provide sufficient security based on state-of-the-art technology. The safety measures adopted are regularly updated.

This is why we use 2-step verification when you sign in to your user account.

Password Security

We do not have your passwords saved to our system or any database. We work with special calculated hash keys generated by the BCRYPT hash function with work factor/cost 12. This hash function is currently the most powerful and safest to use.

Personal Data of Children Younger Than 16 Years of Age

Our on-line store is not intended for children under 16. A person under 16 is allowed to use our on-line store only upon consent of his or her parent or guardian.

What Are Your Rights Related to Personal Data Protection?

In relation to your personal data, you have in particular the right to withdraw your consent to the processing of your personal data at any time, the right to correct or supplement your personal data, the right to request restriction of processing, the right to raise an objection to or a complaint of the processing of your personal data, the right to access your personal data, the right to request the transfer of your personal data, the right to be informed of a breach of security of your personal data and, under certain conditions, the right to the deletion of certain personal data we process about you ("the right to be forgotten").

Changes and Amendments

You control your personal data mainly through your user account (My Alza > Account Settings > My account). Here you can delete or change the basic information about yourself and change the settings concerning commercial communication (or unsubscribe), etc.

You can also contact us through the our contact form (section Personal Data, subsection Other).

Correction

In case you believe that your personal data has been processed incorrectly, you can contact us through the contact form. However, it will be faster and more efficient for you to correct the personal data by yourself in your user profile.

Pursuant to the amendment to Act No. 235/2004 Coll., On Value Added Tax, it is not possible to change data in an already issued invoice as of 1 January 2013. The invoice details can only be changed if you have not yet received and paid for the goods.

Access (Portability)

You can ask us to send you an overview of your personal data. If you have an account with us, please log in and proceed as follows: My Alza > Account Settings > My Account > Basic Information. Then click the button that says "Request my personal data". If you do not have your user account with us, please contact us using this contact form.

You also have the right to access the following information concerning your personal data:

• What are the purposes of processing your personal information
• What are the categories of the affected personal data
• Who, besides us, are the recipient of your personal data
• What is the planned period of storage of your personal data
• Whether you have the right to claim the correction or deletion, restriction of personal data processing or to raise an objection to such processing
• Information on the source of the personal data in case we did not obtain them from you.

Deletion

You may also claim the deletion of your personal data (this shall not apply to data in documents that are subject to the obligation of archiving under the law (e.g. invoices or credit notes). In case we need your personal data to determine, execute or defend our legal claims, your request may be rejected (e.g. if we have an overdue invoice in your name or if the complaint procedure is in progress).

Please note that the essential details of your payment card are not stored by our company; they are stored at the payment gateway. Therefore, we are not able to delete such data; you have to address the payment gateway which mediated the payment (see section Transfer of personal data to third parties > Payment Cards > More information). Only in case you choose to store your payment card with us, we will keep basic information about your card within our company (see section What Personal Data We Process > Personal Data You Provide to Us > More information).

You are entitled to the deletion of data in the following cases:

1. The personal data is not needed for the purposes for which it was being processed
2. You have withdrawn your consent under which the data was processed and there is no further legal grounds for being processed
3. You have objected to the processing of personal data and you believe that after assessing your objection, it will become clear that your interest in the particular situation prevails over ours
4. The personal data has been processed unlawfully
5. The deletion obligation is stipulated by a special legal regulation
6. The personal data concerns a person under 16

How to exercise your right to deletion? If you have an account with us, please log in and proceed as follows: My Alza > Account Settings > My Account > Basic Information. Then click on the button with the text "Request for deletion of personal data" and follow the displayed instructions. If you do not have a user account with us, please contact us using this contact form.

Raising an Objection

Certain personal data is processed on the grounds of our legitimate interest (see section “Legal grounds for processing of personal data”). In case you have concrete reasons, you are entitled to raise an objection to the processing of this personal data. The objection can be raised through the contact form.

Restriction of Processing

In case (a) you deny the accuracy of your personal data, (b) your personal data is processed unlawfully, (c) we do not need your personal data for processing purposes, but it is needed to determine, execute or defend your legal claims, or (d) you raised an objection under the preceding paragraph, you shall be entitled to us restricting the processing of your personal data.

In such cases, we may process your personal data only upon your consent (except for the storage or backup of the personal data concerned).

Lodging a Complaint

If you believe that your personal data has been processed unlawfully, you are entitled to lodge a complaint at the Office for Personal Data Protection. However, we will appreciate if you address us first and we can try to resolve your concerns. You can always easily contact us through our contact form (Personal data > Other) or through our hotline at the number +44 (0)203 514 4411.

This Privacy Policy is valid and effective from January 7, 2026 and it is available in electronic form at www.alza.cz. If you use the mobile application, you can find it in the "Contact Us" section.