Privacy Policy

of BOLL GEAR s.r.o., Petrohradská 216/3, 101 00 Praha 10 – Vršovice, Czech Republic (as of December 2024).

In the following Privacy Policy, we inform you about the processing of personal data carried out by BOLL GEAR s.r.o., Petrohradská 216/3, 101 00 Praha 10 – Vršovice, Czech Republic ( „BOLL GEAR“ and/or „Controller“) in accordance with the GDPR. Our Privacy Policy applies to the following websites, applications and further services and performances (hereinafter jointly referred to as „Services“): www.bollgear.com.

Please read our Privacy Policy carefully. If you have any questions or comments about our Privacy Policy, please contact us at info@boll.cz

1. Name and Contact details of the Controller

This Privacy Policy applies to the data processing by the 

BOLL GEAR s. r. o.
Petrohradská 216/3
101 00 Praha 10 - Vršovice
tel.: +420 267 184 639
e-mail: info@boll.cz

VAT: CZ25671286

Website: www.bollgear.com 

2. Contact Details of the Data Protection Officer

You can contact the Data Protection Officer of the Controller at 

BOLL GEAR s. r. o.
Petrohradská 216/3
101 00 Praha 10 - Vršovice
tel.: +420 267 184 639
e-mail: info@boll.cz

VAT: CZ25671286

Website: www.bollgear.com 

3. Purposes of the Data Processing, Legal Bases and Legitimate Interests pursued by the Controller or a Third Party, as well as Categories of Recipients

3.1. Access to our Websites/Applications

3.1.1. Log-Files

Each time Services are accessed, information is sent by the respective Internet browser of your respective end device to the server of our service and temporarily stored in Log-Files. The data records stored in the Log-Files contain the following data: Date and time of the request, name of the requested page, IP address of the requesting device, device type, cfRayId, referrer URL (origin URL from which you came to our Service), the amount of data transferred, loading time, product and version information of the browser used in each case, as well as the name of the provider of your Internet access. We process the Log-Files in order to be able to provide our Services reliably and securely. 
Insofar as we process personal data (e.g. the IP address) in this context, the legal basis for this is Art. 6 (1) f) GDPR. Our legitimate interest results from the

  • Ensuring a smooth connection establishment,
  • Ensuring a comfortable use of our Services,
  • Evaluation of system security and stability.

A direct conclusion on your identity is not possible on the basis of the information and will not be drawn by us. The information is stored and automatically deleted after the aforementioned purposes have been achieved. The standard periods for deletion are based on the criterion of necessity.

Insofar as we use cookies or similar technologies in connection with the processing of Log-Files described above, this is absolutely necessary in order to provide the Services requested by you. We may use these cookies without your consent on the basis of Section 25 (2) No. 2 Telecommunications Digital Services Data Protection Act (“TDDDG”). 

3.1.2. Cookies and Tracking

General Information

In our Services, we and our Partners use Cookies or similar technologies (together also referred to as„Cookies“). Cookies are small text files that can be stored on your end device (laptop, tablet, smartphone or similar) when you visit and/or use our Services. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. Information is stored in the Cookie that is related to the specific end device used. This does not mean, however, that we can gain direct knowledge of your identity and/or draw conclusions about your person. 

Some of the Cookies used are deleted again after the end of the browser session (so-called session Cookies). Such Cookies allow us, for example, to improve the security of our Services by preventing bot attacks.

Other Cookies remain on your terminal device and allow us to recognize your terminal device on your next visit (so-called persistent or session-spanning Cookies). These Cookies are used, for example, to show you ads and content in our Services that are tailored to you personally.

Consent to the Use of Cookies

We use most Cookies based on your consent. We ask you for this consent in our Consent Management Plattform ( „CMP“ and/or “Preference Center”). There, it is described as "store and/or retrieve information on your device". If you give your consent, this is the legal basis for the use of Cookies (Section 25 (1) TDDDG in conjunction with Article 6 (1) a) GDPR). We store the decision made by you in this respect as to whether you wish to give consent in order to be able to implement it accordingly. An exception to this consent requirement only applies to Cookies that are absolutely necessary for the provision of a Service expressly requested by you. We may use these Cookies without your consent on the basis of Section 25 (2) No. 2 TDDDG. 

Consent to the Processing of your Data based on Cookies

In our CMP we also ask you - if necessary - for your consent to the processing of your data based on these Cookies. In doing so, we request consent not only for us, but also for the processing of such data by our Partner .

In our CMP you will find detailed information about the purposes for which we and our Partners would like to process your data based on your consent, as well as a list of our Partners with further information about the data processing they would like to carry out based on your consent. Partners with further information on the data processing they wish to carry out on the basis of your consent.

The decision you make in the CMP whether or to what extent you want to give consent to the processing of your data based on Cookies, we store it under a so-called Consent ID (e.g. d13b5c50-6x7a-4d7b-9962-3846c8abba), which you can also find at the end of ourPrivacy Policy to be able to implement it accordingly. This pseudonymous Consent ID is generated individually for you as a website user in order to provide legal proof of the settings you have made in our CMP and the consents given/extracted therein with details of the time (date, time). You can check the Consent ID at any time in our CMPunder the section "Privacy Preference Center".

The legal basis for any data processing that takes place is Art. 6 (1) f) GDPR. We have a legitimate interest in processing your decision to grant consent, so that we do not have to ask you again each time you access our Services whether you wish to grant your consent. 

If you have given your consent to the processing of your data, Art. 6 (1) a) GDPR is the legal basis for this data processing.

Reference to the Right of Withdrawal 

You can revoke your consent(s) in whole or in part at any time with effect for the future by changing your settings in our CMP here and clicking on "Confirm My Choices" or by clicking on "Reject All". You can also always find our CMP at the bottom of the page under the link "Preference Center (Consent Management)". Your revocation does not change the legality of the data processing carried out on the basis of the consent(s) until revocation.

3.2. Establishment, Execution and/or Termination of a Contract

3.2.1. Data Processing upon Conclusion of the Contract

If you register with one of our Services and/or enter into another contract with us (e.g. buy a product from us), we process the data required for the establishment, performance and/or termination of the contract. This includes:

  • Salutation
  • First name, last name
  • Invoice and delivery address
  • Email address
  • Billing and payment information
  • Date of birth
  • Phone number
  • Information about orders placed
  • Store settings

The legal basis for this is Art. 6 b) GDPR, i.e. you provide us with the information on the basis of the respective contractual relationship (e.g. management of the customer/user account, processing of a purchase contract) between you and us. We are also obliged to process your email address in the event of a purchase via our websites/apps due to legal requirements, to send an electronic order confirmation (Art. 6 para. 1 c) GDPR).

We store the data collected for the processing of the contract - unless we use it for our own marketing purposes - for the duration of the respective contract and until the expiry of the respective statutory or possible contractual warranty and guarantee rights and applicable limitation periods. After expiry of this period, we retain the information required by commercial and tax law relating to the contractual relationship for the periods specified by law. For this period, the data will be processed again solely in the event of an audit by the tax authorities. Further information on this can be found inSection 6. Legal basis for this further data processing is Art. 6 para. 1 c) GDPR as well as Art. 6 para. 1 f) GDPR. We have a legitimate interest in the assertion, exercise or defense of legal claims.

Furthermore, the following data processing is required for the execution of a purchase contract via our Services:

Payment data will be passed on to payment service providers commissioned by us to process the payment(s). We pass on details of the delivery address to logistics and shipping partners commissioned by us so that the order can be delivered. To ensure that the goods are delivered according to your wishes, we may transmit your email address and, if necessary, the telephone number to the logistics and / or shipping partners contracted by us, which take over the delivery. If necessary, they will contact you in advance of the delivery to coordinate the details of the delivery with you. The respective data will be transmitted solely for the respective purpose and will not be used for other purposes after delivery and will be deleted after expiration of existing commercial and tax retention obligations.

3.2.2. Use of Data for Fraud Prevention Purposes

The information you provide in the context of an order may be used to check whether an atypical order transaction has occurred (e.g. simultaneous ordering of a large number of goods to the same address using different customer accounts). In principle, we have a legitimate interest in carrying out such a check. The legal basis for this data processing is Art. 6 (1) f) GDPR.

3.2.3. Transmission of Data to Transport/Shipping Partners

For the purpose of delivery of ordered goods, we work together with logistics service providers/transport companies and/or shipping partners: The following data may be transmitted to them for the purpose of delivery of the ordered goods or for the purpose of shipment notification: First name, last name, postal address and, if applicable, the email address and, if applicable, the telephone number. The legal basis for this data processing is Art. 6 para. 1 b) GDPR.

3.2.4. Transmission of Data to Partner Companies

Through our Services, you have the opportunity to take advantage of offers from third-party companies. In these cases, you may conclude a contract directly with one of our Partner Companies, to whom the data required for the execution of the contract (e.g. first name, last name, billing and delivery address, email address, billing and payment data, date of birth, phone number) will be transmitted. Such advantage offers of our Partner Companies are recognizable and marked as partner offers. The legal basis for this data processing is Art. 6 para. 1 b) GDPR.

3.3. Data Processing for Advertising Purposes

3.3.1. Postal Advertising

In principle, we have a legitimate interest in using certain information for marketing purposes in order to be able to make you relevant offers. We process the following information for postal advertising for our own marketing purposes as well as for marketing purposes of third parties: first name, last name, postal address, year of birth.

We are also entitled to store further personal information collected about you in compliance with the legal requirements for our own marketing purposes and for the marketing purposes of third parties. The aim is to send you advertising that is geared solely to your actual or perceived needs/interests and accordingly not to bother you with advertising that is not relevant to you.

A transfer of the stored data to third parties does not take place. Furthermore, BOLL GEAR pseudonymizes/anonymizes personal data collected about you for the purpose of using the pseudonymized/anonymized data for its own marketing purposes as well as for marketing purposes of third parties (advertisers).

The legal basis for the processing of personal data for marketing purposes (postal advertising) is Art. 6 (1) f) GDPR. We and the third parties with whom we cooperate have a legitimate interest in sending you postal advertising (tailored to your needs/interests), insofar as this is in accordance with the legal requirements for direct advertising.

Reference to the Right of Objection
You can object to the use of your personal information for the aforementioned marketing purposes at any time free of charge with effect for the future at info@boll.cz.

If you object, your data will be blocked for further data processing for advertising purposes. We would like to point out that in exceptional cases, advertising material may still be sent temporarily after receipt of your objection. This is technically due to the necessary lead time within the selection process and does not mean that we have not implemented your objection.

3.3.2. Newsletter

As part of our Services, we offer you the opportunity to register for our newsletter. In order to be able to ensure that no mistakes have been made when entering the email address, we use the so-called double opt-in procedure (DOI procedure): After you have entered your email address in the registration field and given your consent to receive our newsletter, we will send you a confirmation link to the email address you provided. Only when you click on this confirmation link will your email address be added to our distribution list for sending our newsletter. The legal basis for this processing is Art. 6 (1) a) GDPR.

Reference to the Right of withdrawal
You can withdraw your consent at any time with effect for the future by sending a message to info@boll.cz or the unsubscribe option at the end of each newsletter. 



3.3.3. Product Recommendations by Email

As an existing customer, you will regularly receive product recommendations from us via email. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. Here, we use the email address provided by you in the context of the purchase to advertise our own goods and / or services that are similar to those that you have purchased from us based on an order already placed. The legal basis for this data processing is Art. 6 para. 1 f) GDPR. We have a legitimate interest in sending you product recommendations by email, insofar as this is in accordance with the legal requirements for direct advertising.

Reference to the Right of withdrawal
You can object to our product recommendations at any time free of charge with effect for the future by sending a message to info@boll.cz or at the end of each product recommendation email.



3.4. Personal User Experience

We and our Partners would like to offer you as personal a user experience as possible on our Services. In our CMP we therefore ask you for your consent for the processing purposes described in the following Sections 3.4.1 to 3.4.4. The legal basis for the data processing described in these sections is Art. 6 (1) a) GDPR.

In addition, we process your data in order to be able to provide our Services securely and reliably and in the form requested by you. You can find more information on this in Section 3.5.1 The legal basis for the data processing described there is Art. 6 (1) f) GDPR. We have a legitimate interest in offering our Services securely and reliably, as well as providing Services that you expressly request (e.g. our basket-function).

3.4.1. Identification on Third Party Pages

For certain Services, we need to be able to assign users on our own or on third party pages, e.g. to be able to show you ads for our products on third party pages. For this purpose, we or our Partners assign a pseudonymous ID. In addition, we and our Partners can assign you on third party pages with the help of your pseudonymous email address or telephone number.

You can find out which information we or the respective Partners would like to use on the basis of your consent in the Partner list.

The legal basis for the data processing is Art. 6 para. 1 a) GDPR.

3.4.2. Personalized Ads and Content

In order to provide you with the full BOLL GEAR experience, we and our Partners use certain information (e.g., browser information, click path, date and time of visit, geographic location, IP address, usage data, websites visited) with your consent to present you with ads and content tailored to you in our online store and on third party pages, which may be based on your preferences or recently viewed products, for example.

You can find out which information we or the respective Partners would like to use on the basis of your consent in the Partner list.

The legal basis for the data processing is Art. 6 para. 1 a) GDPR.

3.5. Contacting

You have the possibility to contact us in several ways. By email, by phone, by chat or by mail. When you contact us, we use the personal data that you voluntarily provide to us in this context solely for the purpose of contacting you and processing your request.

The legal basis for this data processing is Art. 6 para. 1 a), Art. 6 para. 1 b), Art. 6 para. 1 c) GDPR and Art. 6 para. 1 f) GDPR. We have a legitimate interest in answering inquiries from our users that are of a general nature and not directly related to a contractual relationship.

3.6. Payments Methods

We process your payment information for the purpose of payment processing, e.g. when you purchase or use a product and/or Service via www.bollgear.com. Depending on the payment method, we forward your payment information to third parties (e.g. in the case of card payments to your card payment provider).

The legal basis for this data processing is Art. 6 para. 1 a), Art. 6 para. 1 b), GDPR and Art. 6 para. 1 f) GDPR.

4. No Requirement to provide Data

In principle, you are not obliged to provide us with your personal data. However, the use of certain areas of our Services may require the provision of personal data, in particular the purchase of goods. If you do not wish to provide us with the necessary data, you will unfortunately not be able to use the corresponding areas of the Services.

5. Recipients of Personal Data

5.1. Transmission of Data to Third Parties

We will only disclose your data to third parties outside of BOLL GEAR if this is legally permissible (e.g., because we or the third party have a legitimate interest in the disclosure, we are legally obligated to disclose the data, or based on your consent).

In addition to the third parties named in our Privacy Policy and in our CMP by name, we may disclose personal data to a third party in particular if,

  • if we are obliged to do so by law or by enforceable official or court order in an individual case (vis-à-vis public authorities);
  • in connection with legal disputes (vis-à-vis courts or our lawyers) or audits (vis-à-vis auditors);
  • when we work with tax consultants;
  • in connection with possible criminal acts to the competent investigative authorities;
  • in the event of sale of the business (to the acquirer).

Insofar as we pass on your data to third parties on the basis of your consent, the explanation can also be given when consent is obtained.

5.2. Transmission to Processors

In the course of processing your data, we use so-called Processors in some areas. A Processor is a natural or legal person who processes personal data on our behalf and on the basis of our instructions, whereby we remain responsible for the data processing. Processors do not use the data for their own purposes, but carry out data processing exclusively for the Controller.

Insofar as the Processors are not already named in this Privacy Policy, these are in particular the following categories of Processors:

  • IT service provider (sending emails and newsletters),
  • Call center (answering customer inquiries)

6. Storage Period and Data Deletion

BOLL GEAR stores personal data only as long as it is necessary for the purposes stated in this Privacy Policy, in particular for the fulfillment of our contractual and legal obligations. If necessary, we will also store your personal data for further purposes, if or as long as the further storage for certain purposes is permitted by law.

If you close your customer account/user account, we will delete all stored personal information. If complete deletion is not possible or not required for legal reasons, we will block this information.

7. Recipients outside the EEA

We also share personal data with third parties or Processors located in countries outside the European Economic Area( "EEA“). In this case, we ensure that the recipient either has an adequate level of data protection or has your express consent before transferring the data. 

An adequate level of data protection exists, for example, if the European Commission has adopted an adequacy decision for the respective country (Art. 45 GDPR). For the U.S., the European Commission has adopted the decision that an adequate level of data protection exists there, provided that the data recipient participates in the EU-U.S. Data Privacy Framework (DPF) and has a current certification for this. If the recipients of your personal data are located in the U.S. and participate in the DPF, we therefore rely on this adequacy decision (Article 45 GDPR). 

Alternatively, we establish an adequate level of data protection by agreeing with recipients on the so-called EU standard contractual clauses of the European Commission (Art. 46 GDPR). In this case, we conduct transfer impact assessments and agree with the recipient or, if necessary, implement additional protective measures. Specifically, we agree Module 1 of the EU Standard Contractual Clauses with recipients who are (independent) controllers and Module 2 of the EU Standard Contractual Clauses with recipients who act as our Processors.

These are third parties or Processors in the following countries: USA (we rely in this respect on the "DPF"), UK (we rely in this respect on the European Commission adequacy decision" available here India and Singapore. For data transfers to India and Singapore, we have ensured an adequate level of data protection by concluding EU standard contractual clauses and conducting a transfer impact assessment.

You can obtain a copy of the specifically agreed regulations for ensuring the appropriate level of data protection from us. Please contact us at customerservice@aboutyou.com or the contact information listed in
Section 2. 

8. Your Rights

8.1. Overview

In addition to the right to revoke your consent given to us, you are entitled to the following further rights if the respective legal requirements are met:

  • the right of access about your personal data stored by us (Art. 15 GDPR), in particular you can request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data, if it has not been collected directly from you;
  • the right to have inaccurate data corrected or to have incomplete data completed (Art. 16 GDPR), 
  • the right to have your data stored by us deleted (Art. 17 GDPR), insofar as the applicable prerequisites for this are fulfilled and, in particular, no legal or contractual retention periods or other legal obligations or rights to further storage are to be observed by us,
  • the right to restrict the processing of your data (Art. 18 GDPR), insofar as the accuracy of the data is disputed by you (for a period that allows us to verify the accuracy of the personal data); the processing is unlawful, but you object to its erasure; we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR (as long as it has not yet been determined whether our legitimate reasons outweigh yours),
  • the right to data portability pursuant to Art. 20 GDPR, i.e. the right, in the event of processing based on your consent (Art. 6 (1) a) GDPR) or for the performance of a contract (Art. 6 (1) b) GDPR), which is carried out with the aid of automated processes, to have data stored by us about you transferred in a common, machine-readable format, or to request the transfer to another controller (the latter, insofar as this is technically feasible),

You can assert the aforementioned rights to which you are entitled at info@boll.cz.

You also have the right to complain to a supervisory authority. In particular, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

8.2. Right of Objection

You have the right to object to the processing of your personal data for advertising purposes at any time ( „advertising objection”).

In addition, you have the right to object to data processing on the basis of Art. 6 (1) f) GDPR for reasons arising from your particular situation. We will then stop processing your data, unless we can demonstrate - in accordance with the legal requirements - compelling legitimate grounds for further processing that override your rights, or the processing serves the assertion, exercise or defense of legal claims.

You can exercise your right of objection at info@boll.cz.

8.3. Right of Withdrawal

If we process data on the basis of your consent, you have the right to revoke this consent at any time. Your revocation does not change the legality of the data processing carried out on the basis of the consent(s) until the revocation. 

You can generally exercise your rights of objection at info@boll.cz.

You can revoke your consent to the use of Cookies or the processing of your personal data based on them, in whole or in part, at any time by changing your settings in our CMP here here and clicking on "Confirm My Choices" or by clicking on "Reject All". You can also always find our CMP at the bottom of the page under the link "Preference Center (Consent Management)".