Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

If you have any questions about how we handle your data, please contact us using the details above.

2. What Data We Collect

We collect the following categories of personal data:

Account Information

Name, email address, phone number, delivery address

Payment Information

Payment card details (processed securely by our payment provider — we do not store full card numbers)

Rental History

Records of items you have rented, return dates, and deposit status

Communication Data

Messages and correspondence with our support team

Technical Data

IP address, browser type, device information, and cookies (see Section 7)

3. How We Use Your Data

We use your personal data for the following purposes:

• Processing and fulfilling your rental orders
• Managing your account and rental history
• Communicating with you about orders, returns, and support inquiries
• Sending rental reminders and return notifications
• Processing payments and managing deposits
• Improving our services and website experience
• Complying with legal obligations

We will only send you marketing communications if you have given explicit consent. You can opt out at any time.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

Contract Performance

Processing necessary to fulfill rental agreements (account management, order processing, delivery)

Consent

Marketing communications, non-essential cookies, newsletter subscriptions

Legitimate Interest

Fraud prevention, service improvement, website analytics

Legal Obligation

Tax records, legal compliance, dispute resolution

5. Data Sharing

We do not sell your personal data. We may share your data with the following categories of recipients:

Payment Processors

To securely process your payments (e.g., Stripe)

Delivery Partners

To deliver and collect rental items at your address

Hosting Providers

Cloud infrastructure for storing and processing data

All our partners are contractually bound to protect your data and process it only as instructed by us.

We do not transfer your data outside the European Economic Area (EEA) unless adequate safeguards are in place.

6. Cookies

We use cookies to ensure the proper functioning of our website and to improve your experience.

Essential Cookies

Required for the website to function (session, cart, language preferences). These cannot be disabled.

Analytics Cookies

Help us understand how visitors use our website. We use privacy-respecting analytics tools.

You can manage your cookie preferences through your browser settings.

7. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

• Account data: for as long as your account is active, plus 2 years after closure
• Rental history: 3 years after the last rental for warranty and dispute purposes
• Payment records: 10 years as required by Czech tax law
• Communication records: 2 years after the last interaction
• Analytics data: 26 months

After the retention period, your data is securely deleted or anonymized.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you

Right to Rectification

Request correction of inaccurate or incomplete data

Right to Erasure

Request deletion of your personal data (subject to legal retention requirements)

Right to Restriction

Request restriction of processing in certain circumstances

Right to Data Portability

Receive your data in a structured, machine-readable format

Right to Object

Object to processing based on legitimate interest or for direct marketing

Right to Withdraw Consent

Withdraw consent at any time for consent-based processing

To exercise any of these rights, please contact us at info@owlcat.club. We will respond within 30 days.

9. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to file a complaint with the Czech Data Protection Authority:

10. Changes to This Policy

We may update this privacy policy from time to time. Any significant changes will be communicated to you via email or a notice on our website.

We encourage you to review this policy periodically.