Privacy Policy

Principles of Personal Data Processing

The controller of personal data provided for the purpose of fulfilling the contract is the seller.
Identification and contact details of the controller
Torriacars s.r.o.
Nádražní 12, Žandov, 47107
Company ID: 28723163
VAT ID: CZ28723163
Phone: +420 734 653 280
Email: info@sixtol.com
Contact address: Nádražní 12, Žandov, 47107

Purpose of processing, scope of personal data, and legal basis for processing
The buyer acknowledges that for the purpose of concluding the purchase contract, its subsequent fulfillment (order processing, warehousing, and delivery of goods), and any potential warranty claims, the controller will process and store personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and Council, the General Data Protection Regulation (GDPR), to the following extent: name, surname, address, email, and telephone number.
The legal basis for processing personal data is in accordance with Article 6(1)(b) of the GDPR, the performance of the contract to which the buyer is a party.

Categories of recipients/recipients of personal data
The controller undertakes not to provide the buyer's personal data to other entities, except the following processors/controllers:
a) the contracted carrier chosen by the buyer in the order form for the purpose of delivering the goods, whereby the data will be provided to the following extent: name, surname, address, email, telephone number;
b) the operator of the Heureka.cz portal for the purpose of generating and sending satisfaction surveys within the "Verified by Customers" program, which the online store participates in. The legal basis for processing is, in this case, in accordance with Article 6(1)(f) of the GDPR, the legitimate interest of the controller, which consists in determining the buyer's satisfaction with the purchase. Survey emails are sent to all buyers who have not opted out of receiving commercial communications under Section 7(3) of the Act on Certain Information Society Services (Act No. 480/2004 Coll.), and they are carried out after every purchase made in the e-shop. The operator of Heureka.cz is authorized to use the provided email address solely for the purpose of generating and sending the satisfaction survey in accordance with the Terms of the "Verified by Customers" program available here: sluzby.heureka.cz/napoveda/podminky-a-dulezite-dokumenty/. The buyer can object to receiving survey emails at any time by using the unsubscribe link in the survey email. In case of an objection, the survey will no longer be sent to the buyer;
c) the operator of the Zbozi.cz portal, Seznam.cz, a.s., for the purpose of generating and sending satisfaction surveys after the purchase. The legal basis for processing is, in this case, in accordance with Article 6(1)(f) of the GDPR, the legitimate interest of the controller, which consists in determining the buyer's satisfaction with their purchase. Survey emails are sent to all buyers who have not opted out of receiving commercial communications under Section 7(3) of the Act on Certain Information Society Services (Act No. 480/2004 Coll.), and they are carried out after every purchase made in the e-shop. The operator of Zbozi.cz is authorized to use the provided email address solely for generating and sending satisfaction surveys in accordance with the Terms available here: https://napoveda.zbozi.cz/vzor-dohody-o-zpracovani-osobnich-udaju/. The buyer can object to receiving survey emails at any time by using the unsubscribe link in the survey email. In case of an objection, the survey will no longer be sent to the buyer;
d) the card issuer in the case of payment by card, for the purpose of a possible TRA (Transaction Risk Analysis) exception, which allows for a simplified purchase process, and based on the seller's legitimate interest in processing the transaction. The data may be provided in the following extent: name, surname, email, telephone number, billing address, delivery address.

Retention Period
Personal data will be retained by the controller for the time necessary to fulfill the contract (order processing, warehousing, and delivery of goods) and further for the duration of the statutory warranty (24 months from the receipt of the goods) or for the duration of any contractual warranty provided.
The buyer acknowledges that the controller is obliged, under Section 31 of the Accounting Act (Act No. 593/1991 Coll.), to retain accounting documents and records (invoices) for a period of 5 years, starting from the end of the accounting period to which they relate (this means that if you purchase goods in 2023, the invoice must be kept until the end of 2028). The controller is also obliged under Section 47 of the Tax Administration Act (Act No. 337/1992 Coll.) to retain the invoice for 3 years from the end of the tax period in which the tax liability related to the invoice arose (this means that if you purchase goods in 2023, the invoice must be retained for tax purposes until the end of 2026). The invoice contains the following personal data: name, surname, and address.
In the case that the seller is a VAT payer, the buyer also acknowledges that the controller is obliged, under Section 35 of the Value Added Tax Act (Act No. 235/2004 Coll.), to retain tax documents for 10 years from the end of the tax period in which the transaction took place (this means that if you purchase goods in 2023, the invoice must be kept until the end of 2033). The tax document contains the following personal data: name, surname, and address.

Buyer’s Rights in Relation to Personal Data
The buyer further acknowledges that under Articles 15 to 21 of the GDPR, they have the right:
a) to access personal data, which includes the right to obtain confirmation from the controller as to whether their personal data is being processed, and if so, the right to access that data and the information specified in Article 15 of the GDPR;
b) to rectify inaccurate personal data concerning them, and considering the purposes of the processing, the buyer has the right to complete incomplete personal data, including by providing a supplementary statement under Article 16 of the GDPR;
c) to erasure ("right to be forgotten"), which means that the controller will erase personal data concerning the buyer without undue delay once it is no longer necessary for the purposes of fulfilling the contract, provided there is no other legal basis for their further processing;
d) to restrict the processing of personal data in the cases outlined in Article 18 of the GDPR;
e) to data portability under the conditions specified in Article 20 of the GDPR;
f) to object to the processing of personal data under Article 21 of the GDPR.
The controller will provide the buyer with information on the measures taken in response to their request within one month of receiving the request.
In case of doubts about the processing of personal data, the buyer has the right to contact the Office for Personal Data Protection, which is the supervisory authority in this area, and file a complaint with it.
Personal data will be retained by the controller for the time necessary to fulfill the contract (order processing, warehousing, and delivery of goods) and further for the duration of the statutory warranty (24 months from the receipt of the goods) or for the duration of any contractual warranty provided.

Over 4 000 products in stock
High-quality products
Strong international presence
Official vendor for Amazon
Over 80 sales partners