GDPR

1. Who is the controller of your personal data?

The personal data controller is the owner of the e-shop:

ESBE s.r.o.
Registered Office / Billing Address: 9. května 24/22, 25092 Šestajovice, Czech Republic
ID (IČO): 07795491 | VAT ID (DIČ): CZ07795491
E-mail: support@slehame.com
Operated e-shop: www.slehame.com

2. What data do we process, why, and for how long?

We always process your data only to the extent necessary for specific purposes:

Purpose of processing	Legal basis	Scope of data	Retention period
Order processing, delivery of goods, warranty claims	Performance of contract (necessary for purchase)	First name, last name, delivery and billing address, e-mail, phone number.	For a period of 10 years (required by accounting law and for resolving warranty claims).
User account management (Registration)	Order management	First name, last name, e-mail, order history.	During the period of active account use, but no longer than 10 years from the last order, or until account deletion.
Marketing e-mailing (Newsletter)	Your voluntary consent (checkbox in cart or on website)	E-mail address.	For a period of 5 years, or until unsubscription.
Marketing for existing customers	Legitimate interest of the controller	E-mail address.	For a period of 3 years from the last purchase, or until an objection is raised (unsubscription).
Satisfaction evaluation (Heureka)	Legitimate interest of the controller (assessing purchase satisfaction)	E-mail address, information about purchased goods.	One-time processing for sending the questionnaire (Heureka deletes data after 6 months).
Service & Repairs	Performance of a service order / warranty claim processing	First name, last name, delivery and billing address, e-mail, phone number.	For a period of 10 years (required by accounting law and for resolving warranty claims).

3. Who has access to your data? (Recipients of personal data)

Your data is safe with us. However, to ensure the operation of the e-shop and delivery of goods, we use verified partners to whom we transfer data solely for the purpose of fulfilling the given task:

Carriers and logistics: Packeta, GLS, and the operator of our drop-off point DePo Šleháme.cz – Bedřich Černý, ID 45863423, VAT ID CZ6910091133.
Technical partners: Operator of the e-shop system SHOP5 (IT platform provider).
Marketing tools and price comparison platforms: Heureka Group a.s. (Verified by Customers program) and SmartSelling a.s. (SmartEmailing).
Accounting services: Our external accounting software Money S3, by Seyfor a.s., for document processing. In the case of servicing Bamix blenders, the external service company Bedřich Černý, ID 45863423, VAT ID CZ6910091133.

4. What are your rights?

Under the GDPR regulation, you have full control over your personal data. You can exercise the following rights with us (simply write to gdpr@slehame.cz):

Right of access: You have the right to know what personal data we process about you.
Right to rectification: If your details are incorrect, we will gladly update them.
Right to erasure (right to be forgotten): You can request the deletion of your personal data, provided another law does not prevent us from doing so (e.g., accounting law).
Right to restriction of processing and right to object: If we process data based on legitimate interest (e.g., e-mails to existing customers), you can object to this, and you will no longer be contacted.
Right to withdraw consent at any time: If you have given us consent to send newsletters, you can withdraw it at any time by clicking the link in the footer of any such e-mail.

If you believe that we are not handling your personal data correctly, you have the right to lodge a complaint with the Personal Data Protection Office (www.uoou.cz/en).

These policies are valid and effective as of June 18, 2026.

Above | Page print