Privacy Notice
Cool Jack s.r.o.
Last updated: 5 November 2026
This document explains how Cool Jack s.r.o. processes the personal data of visitors to www.cooljack.cz, prospective customers, customers, suppliers, business partners and their contact persons. It also separately describes Cool Jack's role in processing the personal data of shipment recipients as part of its fulfillment services.
1. Data Controller
Cool Jack s.r.o.
Registered office: F. V. Veselého 2718/9, 193 00 Prague 20 – Horní Počernice, Czech Republic
Company ID: 281 16 135
Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 168158.
Contact details for data protection enquiries and exercising your rights:
Email: info@cooljack.cz
Phone: +420 777 703 350
Postal address: F. V. Veselého 2718/9, 193 00 Prague 20 – Horní Počernice, Czech Republic
2. What Personal Data We Process
Depending on how you communicate or work with us, we may process the following categories of personal data:
- Identification data, including first name, surname, job title, company name and company identification number.
- Contact details, including email address, telephone number and postal address.
- Information contained in enquiries, messages, contracts or other business communications.
- Information relating to business relationships, ordered services, payments, complaints and legal claims.
- Technical data relating to website visits, such as IP address, access date and time, device and browser type, server logs and cookie identifiers, where applicable.
We primarily obtain this information directly from you, from the company you represent, through our mutual communications, from public registers and when you use our website.
3. Purposes, Legal Bases and Retention Periods
Handling Enquiries and Discussing Potential Cooperation
We use personal data to respond to messages, prepare quotations and take steps prior to entering into a contract.
The legal basis is Article 6(1)(b) of the General Data Protection Regulation (GDPR). For contact persons of legal entities, we also rely on our legitimate interest in business communication under Article 6(1)(f) GDPR.
We process this data for the duration of the discussions and for no longer than 12 months after they end, unless a contractual relationship is subsequently established or the data is required to protect legal claims.
Contract Performance and Customer Support
We process personal data when providing fulfillment, warehousing, transport and related services, managing operational communications, invoicing and handling complaints.
The legal bases are:
- Performance of a contract under Article 6(1)(b) GDPR.
- Compliance with legal obligations under Article 6(1)(c) GDPR.
- Our legitimate interest in managing relationships with contact persons under Article 6(1)(f) GDPR.
We retain the data for the duration of the contractual relationship and subsequently for the periods required by applicable law and necessary to protect legal claims.
Compliance with Legal Obligations
We process personal data primarily for accounting, tax, record-keeping and cooperation with public authorities.
The legal basis is Article 6(1)(c) GDPR. Data is retained for the periods prescribed by applicable legislation.
Protection of Rights and Security
We use personal data to prevent misuse, protect our website and systems, and address security incidents, disputes and legal claims.
The legal basis is our legitimate interest under Article 6(1)(f) GDPR.
We retain the data for as long as necessary to protect our website and systems, investigate incidents or safeguard legal claims.
Direct Marketing
We may use contact details to send information about our own similar services to existing customers or marketing communications to individuals who have separately subscribed.
The legal basis is our legitimate interest under Article 6(1)(f) GDPR, where permitted by law, or consent under Article 6(1)(a) GDPR.
Processing ends when you object, unsubscribe or withdraw your consent. We may retain a record of consent for as long as necessary to demonstrate its validity.
Analytics and Embedded Content
With your consent, we may process data to measure website traffic, analyse website usage and enable the playback of externally hosted videos.
The legal basis is consent under Article 6(1)(a) GDPR, together with consent to the storage of or access to non-essential cookies.
Data is processed according to the lifespan of individual cookies and your consent preferences, and no longer than until your consent is withdrawn.
4. Contact Forms and Marketing Communications
Submitting an enquiry or contact form does not automatically constitute consent to receive marketing communications.
We primarily use the information provided through these forms to respond to your message, prepare a quotation and discuss potential cooperation.
Fields marked as mandatory are necessary to process your request. Without this information, we may be unable to respond.
Where the website offers the option to subscribe to marketing communications, consent must be separate and freely given.
You may opt out of marketing communications at any time using the unsubscribe link in an email or by contacting info@cooljack.cz.
Opting out does not affect your ability to use our services.
5. Cookies, Analytics and Video
Our website may use strictly necessary cookies required for its operation and security. These cookies are used without consent only to the extent necessary.
Analytics, marketing and other non-essential cookies, including technologies associated with Google Analytics, Google Tag Manager or embedded YouTube content, are activated only after the relevant consent has been obtained, where required by law.
Refusing consent must be as easy as giving it. You may change or withdraw your consent at any time through the cookie settings available on our website.
The current list of cookies, their providers, purposes and expiration periods is available through the website's cookie settings tool.
If a visitor rejects non-essential cookies or does not make a choice, those cookies remain disabled.
6. Recipients of Personal Data and Service Providers
The following parties may have access to personal data to the extent necessary:
- Authorised Cool Jack employees and contractors who are bound by confidentiality obligations.
- Providers of website hosting, forms, information systems, cloud services, email, communications, analytics and security services.
- Carriers and other partners where sharing data is necessary to provide the requested service.
- Accounting, tax, legal and other professional advisers.
- Public authorities where disclosure is required by law.
We may use service providers including Webflow and Google to operate our website and related services.
The specific recipients may change depending on the services we use. We only make personal data available to the extent necessary for the relevant purpose.
7. Transfers of Personal Data Outside the European Economic Area
Some providers of technical, cloud or analytics services may process personal data outside the European Economic Area (EEA), particularly in the United States.
In such cases, transfers are based on a European Commission adequacy decision, including the EU–US Data Privacy Framework where applicable, or on Standard Contractual Clauses and any additional safeguards that may be required.
8. Shipment Recipient Data and Fulfillment Services
When processing orders, picking, packing, dispatching and handing shipments over to carriers, tracking shipments, handling returns and processing claims, we generally process recipients' personal data on behalf of our customers.
In this relationship, the customer acts as the data controller and Cool Jack acts as the data processor under Article 28 GDPR.
The personal data processed may include:
- First name and surname.
- Delivery and billing addresses.
- Telephone number and email address.
- Order identifier.
- Parcel collection point.
- Delivery time window.
- Delivery instructions or notes.
We process this data only in accordance with the customer's documented instructions and the applicable data processing agreement.
Carriers generally act as independent data controllers for transport purposes.
Requests concerning this personal data should normally be directed to the retailer or other company with which the order was placed.
If we receive such a request, we will forward it to the relevant data controller without undue delay.
9. Your Rights
Subject to the conditions set out in the GDPR, you have the right to:
- Access your personal data and obtain a copy.
- Request rectification of inaccurate data or completion of incomplete data.
- Request erasure of your personal data or restriction of its processing.
- Data portability: receive your personal data in a structured, commonly used and machine-readable format and, where applicable, transfer it to another controller.
- Object to processing based on legitimate interests. You may object to processing for direct marketing purposes at any time.
- Withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
- Lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.gov.cz.
You can exercise your rights by emailing info@cooljack.cz or writing to the postal address provided in Section 1.
Before processing your request, we may take reasonable steps to verify your identity.
10. Automated Decision-Making
We do not carry out automated individual decision-making in connection with the processing described in this document that would produce legal effects or similarly significant effects concerning you.
11. Changes to This Privacy Notice
We may update this Privacy Notice, particularly in response to changes in legislation, the services we use or our data processing practices.
The current version is always available on our website at www.cooljack.cz.