Privacy Policy

The security of your personal data is a priority for us, as well as the timely and reliable delivery of parcels. We are careful about what happens to your data. Below we describe how we process personal data in our company.

1. Who are we and how can you contact us?

This website is operated by Foxdeli s.r.o., company ID: 08744360, with registered office at Inovační 122, 25241 Zlatníky-Hodkovice, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 324446. Our company is both a personal data controller and a personal data processor.

You can write us an e-mail to: info@foxdeli.com, contact the customer chat on the website: https://www.foxdeli.com/, or send us a letter to Křižíkova 710/30, Karlín, 186 00, Prague 8.

You can exercise all of your rights as described below by contacting the above contacts.

2. What personal data do we process and why?

1. As a data processor, we process personal data about you in the following cases:

1.1 You are a customer of one of our partners who uses the web interface located at www.foxdeli.com

As part of our activity we are very often processors of personal data, which means that one of our partners (e-shops) using our web interface located on the www.foxdeli.com website has given us your personal data in order to facilitate communication between them and you, or to enable the management of shipments, etc. In this case, you should also refer to the privacy policy of the e-shop from which you ordered the goods.

In the cases described above, we process the following personal data of customers of our partners (e-shops):

name, surname, delivery address, e-mail address, telephone number,

and we process them for the following purposes, for the periods and for the legal reasons set out below:

a) Fulfillment of the contract

We process the personal data of our partners' customers for the purpose of fulfilling our obligations arising from our contractual relations with our partners (e-shops) using the web interface located on the www.foxdeli.com website under the terms and conditions specified in the personal data processing agreement. We always process the personal data of such customers only for the time necessary for the delivery of the parcel, and the personal data will always be deleted after the expiry of the processing period, no later than 3 years after the completion of the delivery process.
The legal basis is the fulfillment of the contract.

2. As a data controller, we process personal data about you in the following cases:

2.1 You are a job applicant

In the case of job applicants, we process the following personal data:

name and surname, place of residence, permanent address, delivery address, date of birth, educational qualifications, health status (employee's medical fitness as part of a pre-employment medical examination), photographic record (photograph on CV), personal email address, personal telephone number,

and we process them for the following purposes, for the periods and for the legal reasons set out below:

b) Conclusion of the employment contract

We process your personal data for the purpose of negotiating the conclusion of an employment contract and fulfilling our obligations in the field of employment law (e.g. initial medical examination) and after the end of the selection procedure for a maximum period of 6 months (due to a potential re-selection procedure for the position you have requested), after which the personal data will always be deleted.
The legal basis is the necessity of processing personal data for the implementation of the measures taken prior to the conclusion of the contract.

2.2 You are our employee

In the case of employees, we process the following personal data:

name and surname, place of residence, permanent address, delivery address, date of birth, birth number, bank account number, personal status (information on number of children, information on spouse), educational attainment, name and code of health insurance company, insurance number, health status (employee's medical fitness), photographic record (photograph published on our website and photograph on CV), personal and work email address, personal and work telephone number, signature,

and we process them for the following purposes, for the periods and for the legal reasons set out below:

c) Conclusion and fulfillment of the employment contract

We process your personal data for the purpose of concluding and fulfilling the employment contract and fulfilling our obligations in the field of employment law and related obligations for the entire duration of the employment contract, as well as for the protection of rights related to the contract or pre-contractual liability, or for the recovery of claims, including the assignment of claims to other entities for recovery, for a period of 4 years due to the statutory limitation period for the exercise of our rights, whereby the relevant personal data will always be deleted after the expiry of the processing period.
The legal basis is the necessity of the processing of personal data for the performance of the contract.

d) Accounting and tax purposes, payroll and archiving

We process employees' personal data for the purpose of fulfilling our obligations in the field of accounting, taxation and payroll (processing of wages and social security and health insurance contributions), archiving and record-keeping for a maximum period of 30 years, after which the relevant personal data will always be deleted.
The legal basis for this is the necessity of the processing in order to fulfill the legal obligations imposed on us by law.

e) Provision of information to law enforcement and other public authorities

We also process personal data by transferring it to law enforcement authorities and other public authorities in cases specified by law, for the period of time specified by law.
The legal basis for this is the necessity of the processing to fulfill the legal obligations imposed on us by law.

f) Company PR

We may process your photo in the interest of our public presentation and in the interest of improving communication with our customers and partners for the duration of the contractual relationship, after which the photo will always be deleted.
The legal basis is legitimate interest.

2.3 You are a prospective supplier (physical person entrepreneur)

In the case of a prospective supplier, we process the following personal data:

name and surname, registered office, registration number, e-mail address and telephone number,

and we process them for the following purposes, for the periods and for the legal reasons set out below:

a) Conclusion of the supply contract

We process your personal data for the purpose of negotiating the conclusion of a supply contract and after the end of this negotiation for a maximum period of 1 year (for the purpose of potential future cooperation), after which the personal data will always be deleted.
The legal basis is the necessity of processing personal data for the implementation of the measures taken prior to the conclusion of the contract.

2.4 You are our supplier (physical person entrepreneur)

In the case of suppliers, we process the following personal data:

name and surname, registered office, registration number, e-mail address and telephone number, photo, signature,

and we process them for the following purposes, for the periods and for the legal reasons set out below:

a) Fulfillment and conclusion of the supply contract

We process your personal data for the purpose of concluding and fulfilling the supply contract, for the entire duration of the supply contract, and for the purpose of protecting the rights related to the concluded supply contract or pre-contractual liability, or for the recovery of claims, including the assignment of claims to other entities for recovery, for a period of 4 years due to the limitation period for the exercise of our rights, whereby the relevant personal data will always be deleted after the expiry of the processing period.
The legal basis is the necessity of the processing of personal data for the performance of a contract or the implementation of measures taken prior to the conclusion of the contract.

b) Accounting, tax and archiving purposes

We process the personal data of suppliers for the purpose of fulfilling our obligations in the field of accounting, tax, archiving and record-keeping for a maximum period of 10 years from the calendar year following the performance, unless a longer period is required by applicable law, after which the relevant personal data will always be deleted.
The legal basis for this is the necessity of the processing to fulfill the legal obligations imposed on us by law.

c) Provision of information to law enforcement and other public authorities

d) Company PR

2.5 You are a visitor to our website

If you are a visitor to our website, we may collect information for statistical purposes, in particular information about the type of device from which you visit our website, the screen resolution, the internet browser and operating system you use, your language settings, the time you view our website, the amount of time you spend on it, your behavior on it, the sections that interest you, etc. We process this information in order to improve the quality and level of our website, but we also respect your privacy, so we process it anonymously, without the possibility of associating it with a specific person.

We use Google Analytics to analyze traffic, where we have set up an anonymised version, i.e. without the possibility of collecting IP addresses or other personal data. We then use the information obtained through Google Analytics for remarketing using Google Adwords. We process the collected anonymised data for a maximum of 14 months. More information about Google Analytics can be found on the operator's website https://www.google.com/analytics/ and here https://cs.wikipedia.org/wiki/Google_Analytics.

We use the HotJar analytics tool to anonymously analyze user behavior on our Website, which uses cookies to map your movements on our Website so that we can find and correct errors in our user interface. We process the collected anonymised data for a maximum period of (14 months). For more information, please visit the provider's website at https://www.hotjar.com.

Our website may also use the Sklik service operated by Seznam.cz, a.s., but even in this case we have no way of identifying you. For more information, please visit: https://napoveda.sklik.cz/pravidla/smluvni-podminky/ and https://o.seznam.cz/ochrana-udaju/.

We also automatically process so-called cookies. If you would like to learn more about cookies, please click https://www.foxdeli.com/cookies.

2.6 You use the chat on our website

We also have a customized chatbot on our website that can recognize whether you are a first-time or registered user. We process this information in order to improve the quality and level of our chatbot, but we also respect your privacy, so we process it as anonymised without the possibility of associating it with a specific individual.

For the sake of our customers, we store the conversations you have with us via chat on our website. However, we do not retain any of your details unless you type them into the text of the chat yourself. If you type personal data into the chat yourself, we will keep it for as long as necessary, up to a maximum of 3 years, after which it will always be deleted

2.7 Contacting us

If you contact us yourself by email, via our website or our chatbot, we process most of your:

first name last name, phone and e-mail,

and we process it for the following purposes, for the periods and for the legal reasons set out below

a) answering your questions

If you ask us anything, we will answer your query as part of our customer service and we process the above data for the necessary period of time, for a maximum of 1 year, after which the personal data will always be deleted.
The legal basis for this is the implementation of measures taken prior to the conclusion of the contract at your request.

2.8 You are an associate of our company

We process the following personal data about the members of our company:

name and surname, place of residence, permanent residence, date of birth, birth number, place of birth, telephone number, e-mail address and signature,

and we process it for the following purposes, for the period of time set out below and for the legal reasons set out below:

a) Corporate governance

We process the personal data of the shareholders of our company for the purpose of managing corporate affairs, i.e. in particular convening general meetings, drawing up minutes of meetings, keeping a list of shareholders, etc., for the entire period of ownership of the shareholder's share in our company and for the period of time strictly necessary, no longer than 10 years after the termination of the shareholder's share in the company, unless a longer processing period is required by applicable law, whereby the relevant personal data will always be deleted after the processing period has expired.
The legal basis is the necessity of the processing to fulfill the legal obligations imposed on us by law.

b) Accounting, tax and archiving purposes

We process the personal data of our company's shareholders for the purpose of fulfilling our accounting, tax, archiving and record-keeping obligations for a maximum period of 10 years from the calendar year following the provision of services, unless a longer period is required by applicable law, after which the relevant personal data will always be deleted.
The legal basis for this is the necessity of the processing to fulfill the legal obligations imposed on us by law.

c) Provision of information to law enforcement and other public authorities

2.9 You are the managing director of our company

We process the following personal data about the managing director of our company:

name and surname, place of residence, permanent residence, date of birth, birth number, place of birth, photographic record, telephone number, e-mail address (private and business) and signature,

and we process them for the following purposes, for the periods and for the legal reasons set out below:

a) Conclusion and fulfillment of the performance contract

We process the personal data of the managing director of our company for the purpose of concluding and fulfilling the contract of office for the entire duration of the contract of office, and for the purpose of protecting the rights related to the contract, for a period of 4 years due to the limitation period for exercising the rights, whereby the relevant personal data will always be deleted after the expiry of the processing period.
The legal basis is the necessity of the processing of personal data for the fulfillment of the contract.

b) Corporate governance

We process the personal data of the managing director of our company for the purpose of administering corporate affairs, i.e. in particular convening general meetings, drawing up minutes of meetings, etc., for the entire duration of the performance of the function, and the relevant personal data will always be deleted after the expiry of the processing period.
The legal basis for this is the necessity of the processing to fulfill the legal obligations imposed on us by law.

c) Accounting, tax and archiving purposes

We process the personal data of the managing director of our company for the purpose of fulfilling our obligations in the field of accounting, taxation, archiving and record-keeping for a maximum period of 10 years from the calendar year following the provision of services, unless a longer period is required by applicable law, after which the relevant personal data will always be deleted.
The legal basis for this is the necessity of the processing to fulfill the legal obligations imposed on us by law.

d) Provision of information to law enforcement and other public authorities

3. Who has access to your personal data?

Your personal data will be processed for us by the processors listed below who provide us with the services listed below in order to improve the quality of our services and to carry out certain activities:

legal services

Mgr. Daniel Macek, registration number ČAK: 13995

accounting and administrative services

P&N Holding s.r.o., ID No.: 247 80 723

cloud services

Google Ireland Limited, reg. no. 368047
Amazon Web Services EMEA SARL, reg. no. B186284, data storage located in Frankfurt am Main

IT services (programming and server management)

Filip Jůza, 05194971
Jakub Vavřík, 76162265

chat operator on the website:

Intercom R&D Unlimited Company, reg. no. 538158

marketing services

Google Ireland Limited, reg. no. 368047 (Google Analytics)
Hotjar Ltd., Reg. No. C65490 (Hotjar)
Seznam.cz, a.s., ID No.: 26168685
PIPEDRIVE IRELAND LIMITED, reg. no. 651858

delivery services

Zásilkovna s.r.o., ID No.: 28408306
Czech Post, s.p., ID No.: 47114983
PPL CZ s.r.o., ID: 25194798
Slovak Post, a.s., ID No.: 36631124
General Logistics Systems Czech Republic s.r.o., ID No.: 26087961
Geis CZ s.r.o., ID No.: 44567359
WE|DO CZ s.r.o., ID No.: 08313628
DHL Express (Czech Republic) s.r.o., 25683446
MESSENGER a.s., ID No.: 27575896
FROGMAN s.r.o., ID No.: 49434624
Direct Parcel Distribution s.r.o., ID No.: 61329266
JAPO - transport s.r.o., ID No.: 26298295
TOPTRANS EU, a.s. ID No.: 28202376

However, please note that due to the changing nature of some service providers, it is not possible to list all current and future processors of personal data by name. Therefore, the above list of processors may change over time.

4. What rights do you have in relation to your personal data?

1. Right to request access to your personal data

At any time, you can ask us to confirm whether or not your personal data are processed and, if so, for what purposes, to what extent, to whom they are disclosed, how long we will process them, whether you have the right to rectification, erasure, restriction of processing or to object, where we obtained the personal data and whether automated decision-making, including possible profiling, is taking place on the basis of the processing of your personal data.

You also have the right to obtain a copy of your personal data, the first provision of which is free of charge, and we may charge a reasonable administrative fee of CZK 100 for further provision.

2. Right to rectification and completion

You can ask us to correct or complete your personal data at any time if it is inaccurate or incomplete.

3. Right to erasure

We must delete your personal data if:

are no longer necessary for the purposes for which they were collected or otherwise processed;
processing is unlawful;
you object to the processing and there are no overriding legitimate grounds for the processing;
we are legally obliged to do so, or
you withdraw your consent to processing.

4. Right to restriction of processing

Until we have resolved any disputed issues regarding the processing of your personal data, we may not process your personal data other than to store it and, where appropriate, use it only with your consent or for the establishment, exercise or defense of legal claims.

5. Right to object

You can object to the processing of your personal data if you believe that we are processing your data beyond the lawful scope for direct marketing purposes or for legitimate interest.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. If you object to the processing on the grounds of legitimate interest, we will evaluate this objection and then inform you whether we have complied with it and will no longer process your data, or that the objection was not justified and the processing will continue. In any case, processing will be restricted until the objection is resolved.

6. Right to portability

You have the right to obtain personal data relating to you which are processed by automated means and on the basis of consent or contract, in a structured, commonly used and machine-readable format, and to have that personal data transmitted directly to another controller.

7. Right to lodge a complaint

If you believe that we are in any way violating the rules on the processing of personal data, you have the right to file a complaint with the Data Protection Authority.

5. Is your personal data safe with us?

We do our best to keep your data secure against misuse. As part of our activities, we will continue to do everything in our power to prevent such a security incident from occurring, in particular by ensuring that our employees are trained and that we only use reliable technical solutions at all times.

However, there is always some risk that your personal data could be leaked or misused or lost. If, despite our best efforts, a security incident should occur and such incident could pose a high risk to your rights and freedoms, we will promptly notify you of such incident by providing you with an email address and by posting such information on our website, including any necessary details.

6. Supervisory Authority

Our activities are also supervised by the Office for Personal Data Protection, to which you can file a complaint in case of dissatisfaction. You can find out more on its website (www.uoou.cz).

7. Contact

If you have a comment or complaint regarding data protection or a query about the person responsible for data protection in our company or if you exercise any of your rights, please contact us by e-mail at info@foxdeli.com - we will respond to your questions or comments as soon as possible, but no later than within 30 days.

8. Changes to the Policy

Our privacy policy may be changed from time to time. We will not restrict your rights under this Privacy Policy without your express consent. We will post any changes to this Privacy Policy on our website. If there are significant changes, we will notify you by email. We will keep versions of this privacy policy on file for you to access in the future.

9. Effective date

This Privacy Policy will take effect from April 1, 2023.