This Privacy Policy describes how WHISPERING WINDS s.r.o. (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit or make a purchase from https://gohivekr.com/ (the “Website”).
We are committed to protecting your privacy and processing your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Czech data protection law.
1. Data Controller
The data controller responsible for your personal data is:
WHISPERING WINDS s.r.o. Lidická 700/19, Veveří 602 00 Brno Czechia
Email: [email protected]
2. What Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
Information you provide directly:
- Identity data (name, surname)
- Contact data (email address, phone number, billing and shipping address)
- Order and transaction data (products purchased, order value, payment confirmation)
- Communications (messages you send us via email, contact forms, or support channels)
- Account credentials, if you create an account
Information collected automatically:
- Technical data (IP address, browser type and version, device information, operating system)
- Usage data (pages visited, time spent on the Website, referring URLs, clickstream)
- Cookies and similar tracking technologies (see Section 8)
We do not knowingly collect payment card details directly. Payments are processed by third party payment providers (see Section 6).
3. How We Use Your Data
We process your personal data for the following purposes:
- To process and fulfil your orders, including shipping and invoicing
- To communicate with you about your orders, inquiries, and support requests
- To manage your account, if you have one
- To send marketing communications, where you have given consent or where permitted by law
- To improve our Website, products, and services
- To detect, prevent, and address fraud, security issues, and technical problems
- To comply with legal and accounting obligations
4. Legal Basis for Processing
We rely on the following legal bases under Article 6 GDPR:
- Performance of a contract: to process your orders and provide our services
- Legal obligation: to comply with accounting, tax, and consumer protection laws
- Consent: for marketing communications and non essential cookies, which you may withdraw at any time
- Legitimate interests: to operate, secure, and improve our business, provided your rights do not override these interests
5. How Long We Keep Your Data
We retain personal data only for as long as necessary for the purposes described above:
- Order and transaction data: for the period required by Czech accounting and tax law (generally up to 10 years)
- Account data: for as long as your account remains active
- Marketing data: until you withdraw consent or object
- Technical and usage data: typically for a limited period unless needed for security or legal reasons
When data is no longer needed, we securely delete or anonymise it.
6. Sharing Your Data
We do not sell your personal data. We may share it with:
- Service providers who help us operate the business, such as hosting, payment processing, shipping and logistics, email delivery, and analytics
- Payment providers who process transactions securely on our behalf
- Authorities or third parties where required by law, court order, or to protect our legal rights
All third party processors are bound by contractual obligations to protect your data and process it only on our instructions.
7. International Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
8. Cookies
Our Website uses cookies and similar technologies to function properly, analyse traffic, and improve your experience. You can manage or disable cookies through your browser settings or our cookie banner. Some cookies are strictly necessary and cannot be disabled. For more details, see our [Cookie Policy / cookie banner].
9. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data (“right to be forgotten”)
- Restrict or object to certain processing
- Data portability (receive your data in a structured, machine readable format)
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with a supervisory authority
To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by law.
You may also file a complaint with the Czech data protection authority:
Úřad pro ochranu osobních údajů (UOOU) Pplk. Sochora 27, 170 00 Prague 7, Czechia Website: www.uoou.cz
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. Children’s Privacy
Our Website is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. We encourage you to review this page periodically.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, contact us at:
WHISPERING WINDS s.r.o. Lidická 700/19, Veveří 602 00 Brno Czechia Email: [email protected]