Privacy Policy

This Privacy Policy explains how E-Moto Park processes the personal data of customers and visitors of the website e-motopark.com (including its English version at e-motopark.com/en/), customers of our shop and rental service in Návsí, Czech Republic, and customers of our workshop. It tells you what data we collect, why, who we share it with, how long we keep it and what rights you have.

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on the processing of personal data.

This Privacy Policy is effective from 23 September 2026 and supplements our Terms and Conditions.

1. Who is the controller of your data

The controller of your personal data is:

  • Radim Karczmarzyk, sole trader, trading as E-Moto Park
  • Registered office: Guty 178, 739 55 Třinec, Czech Republic
  • Company ID (IČO): 09428062, VAT ID (DIČ): CZ9301125394
  • Place of business (shop, rental, workshop, in-person pickup): E-Moto Park, Návsí 181, 739 92 Návsí, Czech Republic
  • E-mail: [email protected]
  • Phone: +420 721 625 601

We have not appointed a data protection officer because we are not legally required to. Please send any questions about personal data to the e-mail address or phone number above.

2. What data we process, why and for how long

2.1 Processing your order and performing the purchase contract

When you buy from us (through the e-shop, by e-mail, by phone or in the shop), we process the data needed to conclude and perform the contract.

  • Data: name and surname, billing and delivery address, e-mail, phone number, company ID and VAT ID for business customers, contents of the order, price, chosen payment and delivery method, order and invoice number, order note, communication about the order. For orders placed through the website we also store the IP address and browser information of the device the order was sent from.
  • Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Without this data we cannot accept the order or deliver the goods.
  • Retention: for the time needed to process the order and then for the duration of the statutory liability for defects and limitation periods. Tax documents and the related order records are kept for 10 years from the end of the tax period in which the order was placed, as required by the Czech VAT Act.

2.2 Customer account

You can create a customer account on the website to track your orders and avoid re-entering your address.

  • Data: e-mail, password (stored only in encrypted form), name, addresses, order history, date of registration and last login.
  • Legal basis: performance of the account agreement (Art. 6(1)(b) GDPR). Creating an account is voluntary; you can also buy without one.
  • Retention: until you cancel the account. You can ask for cancellation at any time by e-mail. We may cancel an account that has not been used for more than 5 years after notifying you first. Data about completed orders is kept as described in section 2.1.

2.3 Payments

Depending on the payment method you choose, we pass some data to our payment partners.

  • Bank transfer and QR payment: when you pay to our account at Česká spořitelna, we see your account number, the account holder’s name and the payment reference. This data becomes part of our accounting records.
  • Online card payment (GoPay): payments are processed by GoPay s.r.o. You enter your card details directly in the GoPay payment gateway; we have no access to them. GoPay receives from us the order number, amount, currency and the payer’s contact details (name, e-mail and, where applicable, phone number and address) and processes them as an independent controller under its own rules available at gopay.com.
  • ESSOX instalments and split payment: if you choose financing, you are redirected to the online application of ESSOX s.r.o. You provide the application, identity documents and bank account details directly to ESSOX, which assesses them as an independent controller and decides on the loan itself. We pass ESSOX the order identification, goods and price, and ESSOX tells us whether the application was approved. Details of ESSOX’s processing are available at essox.cz.
  • Cash on delivery and payment in the shop: for cash on delivery we pass the carrier the amount to collect. For cash or card payment in the shop we process only the data on the payment receipt.
  • Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with accounting and tax obligations (Art. 6(1)(c) GDPR).
  • Retention: payment records are kept for 10 years under the Czech VAT Act and the Accounting Act.

2.4 Delivery and in-person pickup

To deliver the goods we pass the carrier your name, phone number, e-mail, delivery address or chosen pickup point, the weight and dimensions of the parcel and, for cash on delivery, the amount to collect. The carrier may use this data to keep you informed about the delivery status.

  • Carriers: Zásilkovna s.r.o. (Packeta), including the foreign delivery partners Packeta uses for deliveries to other EU countries, General Logistics Systems Czech Republic s.r.o. (GLS), or another carrier shown for the delivery method you choose in the order.
  • In-person pickup: when you collect goods at our premises, we check that they are handed over to the person who placed the order or someone authorised by them.
  • Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Retention: parcel and tracking data is kept while the order is being processed and then as part of the order record described in section 2.1.

2.5 Accounting, tax and other legal obligations

As a business we are required to keep accounts, issue tax documents and retain them. For business customers who provide a company ID we verify the details in the Czech public register ARES, and for VAT payers from other EU countries in the VIES system.

  • Data: billing details, data about the order, payments, refunds and complaints.
  • Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR), in particular under the Czech VAT Act, the Accounting Act and the Tax Code.
  • Retention: 10 years from the end of the tax period for tax documents, 5 years for other accounting records.

2.6 Complaints, withdrawal from the contract and returns

If you make a warranty claim, withdraw from the contract or return goods, we process the data needed to handle the case and to prove that we acted correctly.

  • Data: order identification, contact details, description of the defect, photos or videos you send us, bank account number for the refund, the course and outcome of the claim. To withdraw from the contract you can use the online form on the website, which sends you a secure link after you enter your order number and e-mail. The procedure is described on the page Information on Withdrawal from the Contract.
  • Legal basis: performance of a contract and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR) and our legitimate interest in protecting legal claims (Art. 6(1)(f) GDPR).
  • Retention: while the case is being handled and then for the limitation period, usually 3 years after the case is closed. Refund records are kept for 10 years as part of our accounting.

2.7 Electric motorcycle rental

You can send a rental booking through the form on the website or arrange it by phone. When the motorcycle is handed over, we sign a rental agreement and take a refundable deposit.

  • Booking data: name and surname, home address, date of birth, e-mail, phone number, number and type of motorcycles, number of helmets rented, pickup and return dates, your message.
  • Rental agreement data: the booking data, details of the rented motorcycle and accessories, its condition at handover and return, the amount and settlement of the deposit, any damage.
  • Why we need it: to confirm the booking, to know who rented which motorcycle, and to have a record in case of damage or non-return. We need the date of birth to verify your age.
  • Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in protecting our property and legal claims (Art. 6(1)(f) GDPR).
  • Retention: booking data and the rental agreement are kept for 3 years from the rental date (the general limitation period for possible claims for damage or non-payment); records of rental and deposit payments are kept for 10 years under tax law.

2.8 Workshop and tuning

When we service or modify your motorcycle, we process the data needed to receive, repair and return it.

  • Data: name, phone number, e-mail, identification of the motorcycle, description of the fault or requested modification, work carried out, parts used and price.
  • Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations when issuing the invoice (Art. 6(1)(c) GDPR).
  • Retention: job sheets for 3 years after the job is completed, tax documents for 10 years.

2.9 Enquiries, contact forms, e-mail and phone

When you contact us through the product enquiry form, by e-mail or by phone, we process your contact details and the content of your enquiry so that we can reply.

  • Data: name and surname, e-mail, phone number where provided, the content of your message and our reply.
  • Legal basis: our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR). If the enquiry is aimed at concluding a contract, it is a pre-contractual step under Art. 6(1)(b) GDPR.
  • Retention: 1 year after the enquiry is resolved, after which the messages are deleted. If the enquiry turns into an order or a complaint, the retention periods for that purpose apply.

We protect the forms on the website against spam with the Akismet service (Automattic Inc.) and a hidden control field. Akismet receives the content of the submitted form and technical data about the sender to assess whether it is spam.

2.10 Gift vouchers

When you buy a gift voucher, in addition to the order data we process the recipient’s name and e-mail and the text of your dedication, if you fill them in. We use this data only to deliver the voucher and record its redemption. The legal basis is performance of a contract; the retention period is the same as in section 2.1.

2.11 Website operation, security and fraud prevention

When you visit the website, we process technical data needed for its operation and security.

  • Data: IP address, date and time of access, pages visited, browser and device type, error messages and, for orders, information about how you reached the website (traffic source, UTM parameters) where your cookie settings allow it.
  • Legal basis: our legitimate interest in operating the website securely, detecting attacks and fraudulent orders, and understanding where our customers come from (Art. 6(1)(f) GDPR).
  • Retention: technical logs for no more than 12 months, records of sent system e-mails for no more than 90 days. Traffic source data stored with an order is kept together with the order.

The website is operated with the help of Cloudflare services (protection against attacks, faster loading, DNS and e-mail routing), which process your IP address on every access.

2.12 Statistics, advertising measurement and marketing (cookies)

With the consent you give us in the cookie banner, we use tools to measure website traffic and advertising performance. The detailed list of cookies is in our Cookie Policy. You can change or withdraw your consent at any time by clicking “Manage consent” in the website footer.

  • Google Analytics 4 (Google Ireland Limited): statistics about traffic, on-site behaviour and purchases.
  • Google Ads (Google Ireland Limited): conversion measurement and remarketing. When you complete an order, we may pass Google the contact details from the order in hashed form, i.e. not directly readable by Google, to attribute the purchase to an ad more accurately (so-called enhanced conversions).
  • Microsoft Clarity (Microsoft Ireland Operations Limited): anonymised recordings of on-page interaction and heatmaps that help us improve the website.
  • Google Tag Manager: a tool for managing the measurement codes above. It does not store data by itself.
  • Legal basis: your consent (Art. 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll., on electronic communications). Without consent these tools store no identifiers on your device. In that case Google may receive only anonymous technical signals without cookies (so-called consent mode), which cannot be linked to a specific person.
  • Retention: according to the individual cookies listed in the Cookie Policy, no longer than 2 years.

Technical cookies necessary for the e-shop to work (cart, login, language and currency choice, storing your consent settings) are used without consent on the basis of our legitimate interest in operating the website.

2.13 Third-party content and social networks

  • Google reviews: we display public Google reviews of our business on the website through the Trustindex service (Trustindex.io Kft.). The reviews remain under the control of Google and their authors; we do not edit them.
  • Videos and posts: some pages embed YouTube videos and Instagram posts. These services load only after you consent to the relevant cookie category and receive your IP address when loaded.
  • Our profiles on Facebook, Instagram and YouTube: when you interact with them (comment, message, follow), your data is processed primarily by the operator of the network under its own policy. For our Facebook and Instagram pages Meta provides us with aggregated statistics (Page Insights) from which individuals cannot be identified.

2.14 Protection of legal claims

We may use data from any of the purposes above to defend ourselves against claims or to assert our own claims, on the basis of our legitimate interest (Art. 6(1)(f) GDPR), for the duration of the limitation periods and any proceedings.

3. Where we get the data from

We obtain most data directly from you when you order, register, book or contact us. We also receive:

  • delivery status information from carriers,
  • the result of a payment or financing application from GoPay and ESSOX,
  • details of business customers buying under a company ID from the public registers ARES and VIES,
  • public reviews of our business from Google.

4. Who we share data with

We share your data only to the extent necessary for the given purpose, with these recipients:

  • Carriers: Zásilkovna s.r.o. (and its foreign delivery partners), General Logistics Systems Czech Republic s.r.o., or another carrier chosen in the order.
  • Payment partners: GoPay s.r.o., ESSOX s.r.o., Česká spořitelna, a.s. (our bank).
  • Invoicing and accounting: Fakturoid s.r.o. (invoicing), our external accountant and tax adviser.
  • Website operation and IT: web hosting provider, Cloudflare, Inc., e-mail service provider (Google), external website and online marketing administrator, backup services. These partners process data as processors on our instructions under a data processing agreement.
  • Measurement and advertising: Google Ireland Limited and Microsoft Ireland Operations Limited, only with your cookie consent.
  • Anti-spam: Automattic Inc. (Akismet).
  • Public authorities: the tax office, courts, the Czech Police, the Czech Trade Inspection Authority and other authorities where the law requires it or where it is necessary to protect our rights.

Carriers, payment partners and ESSOX process data as independent controllers under their own privacy policies referred to above.

5. Transfers outside the European Union

We store and process data mainly in the European Union. Some suppliers (Google, Microsoft, Cloudflare, Automattic) may also process part of the data on servers in the United States. In that case the transfer is covered by a European Commission adequacy decision (the EU-US Data Privacy Framework, for suppliers certified under it) or by standard contractual clauses approved by the European Commission. We will provide a copy of the safeguards used on request.

6. How long we keep data

As a rule we keep data only for as long as necessary for the purpose for which we obtained it and for as long as the law requires. The specific periods are given for each purpose in section 2. The longest period, 10 years, results from the obligation to retain tax documents. After the periods expire we delete or anonymise the data.

7. Your rights

In connection with the processing of your personal data you have the following rights:

  • Right of access: you can ask us to confirm whether we process your data and to provide a copy of it.
  • Right to rectification: we will correct or complete inaccurate or incomplete data at your request. You can edit the data in your customer account yourself.
  • Right to erasure: if you ask for erasure, we will delete the data unless we need it to perform a contract, comply with a legal obligation (for example retaining tax documents) or protect legal claims.
  • Right to restriction of processing: in the cases set out in the GDPR (for example if you contest the accuracy of the data) we will only store the data for the necessary time and not otherwise use it.
  • Right to data portability: we will provide the data you gave us and that we process automatically on the basis of a contract or consent in a machine-readable format.
  • Right to object: you can object to processing based on legitimate interest; we will assess whether our interest prevails and, if not, stop the processing.
  • Right to withdraw consent: you can withdraw cookie consent via “Manage consent” in the website footer and any other consent by e-mailing us. Withdrawal does not affect the lawfulness of processing before it.
  • Right to lodge a complaint: if you believe we process your data unlawfully, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, www.uoou.gov.cz, e-mail [email protected], or with the supervisory authority in your own EU country. We would appreciate it if you contacted us first.

You can exercise your rights by e-mail at [email protected], by post to the address of our place of business or in person at the shop. To avoid disclosing data to the wrong person, we may ask you to verify your identity. We will respond no later than one month after receiving your request; in complex cases we may extend this by a further two months and will let you know. Exercising your rights is free of charge. We keep records of how a request was handled for 3 years so that we can prove it was dealt with.

8. Data security

We protect data with technical and organisational measures appropriate to the risks. The website runs exclusively over an encrypted HTTPS connection, access to the e-shop administration is password-protected and limited to the people who need it for their work, data is backed up regularly, and payment details are processed exclusively by licensed payment partners. Paper documents (rental agreements, job sheets) are kept in locked premises.

9. Automated decision-making and children

We do not make any decisions based solely on automated processing that would have legal effects on you. Financing applications are assessed by ESSOX under its own rules, about which it informs you during the application.

Our e-shop and rental service are intended for persons over 18 years of age. Do not create a customer account or make a booking if you are under 16. Rentals of children’s motorcycles are concluded exclusively with a parent or legal guardian.

10. Changes to this policy

We may update this policy, for example when we start using a new tool or when the law changes. The current version is always available on this page with its effective date. We will inform registered customers of material changes by e-mail.