Codex Labs Czech Republic s.r.o.,
Registered office: Primátorská 296/38, Libeň, 180 00 Prague 8
Company ID: 191 05 151, VAT ID: CZ19105151
Registered with the Municipal Court in Prague, Section C, Insert 381559
("Seller")

The Seller informs clients that it has adopted and maintains appropriate technical, organisational and related measures for the protection of personal data,
in compliance with Regulation (EU) 2016/679 (GDPR) and applicable Czech and EU data protection laws. All handling of personal data (including receiving, sending, storing, archiving—both in hard copy and electronically) within the Seller’s operations is carried out in a way that ensures data protection laws are not breached and personal data is not misused.

This Privacy Policy (“Policy”) explains how the Seller collects, uses, and otherwise handles personal data obtained through the online interface accessible at: https://www.codexlabs.co (the “Web Interface”)

Data Controller

Codex Labs Czech Republic s.r.o.
Registered office: Primátorská 296/38, Libeň, 180 00 Prague 8
Mailing address:
Heřmanova 33, 170 00 Prague 7
Email: support@codexlabscorp.com

Data Box ID: za85jsk

1. INTRODUCTORY PROVISIONS

What rules govern the processing of personal data?

The Seller processes personal data in accordance with Czech law and directly applicable EU legislation, in particular:

Act No. 101/2000 Coll., on the Protection of Personal Data (as amended)

Act No. 480/2004 Coll., on Certain Information Society Services (as amended)

What is personal data?

“Personal data” means any information that identifies or could identify an individual. This may include (but is not limited to):

• Identification data (e.g. full name, personal ID number, date of birth, gender, login credentials);

• Contact details (e.g. residential or delivery address, telephone number, email address);

• Other data (e.g. cookies, IP address, browser type, device and operating system, number and duration of website visits)

2. COLLECTION AND USE OF PERSONAL DATA

How do we collect your personal data?

We primarily collect data through order forms and when users create a customer account via cookies when browsing the Web Interface (see Article 5 of this Policy)

On what legal basis and for what purposes do we process your personal data?

We may process your data without explicit consent: (i)to perform a contract (e.g. process and deliver orders), (ii) to comply with legal obligations (e.g. accounting, tax recordkeeping), (iii) to enable management of your customer account.

We may also use your email address to send marketing e-mails related to similar products you have purchased, unless you opt out.

If you give consent, we may also process your data for:

• sending promotional materials;
• direct marketing;
• any other expressly consented purposes.

We may process cookie-derived data with your consent (given by accepting cookies on the Website). Continued use of the Website after being informed about cookies is also considered consent.

We use cookies to:

• support your user experience;
• improve services through analytics;
• carry out marketing activities.

We will use your data for purposes other than those for which it was collected only with your express consent.

How long do we store your personal data?

Data provided in orders or during registration is processed only as long as necessary to fulfil contractual and legal obligations.

If you have consented to data processing or we send marketing emails under the legitimate interest clause, data is processed for the lifetime of the Website Interface or until consent is withdrawn.

3. YOUR RIGHTS REGARDING PERSONAL DATA

Right to withdraw consent

If processing is based solely on your consent, you may withdraw it at any time via:

• e-mail, phone, written letter.
• The unsubscribe link in any commercial communication
• Withdrawal does not affect the legality of prior data processing.

Right of access

You may request confirmation whether we process your data and request access to:

• the purpose of processing;
• categories of personal data;
• data recipients;
• retention period.

You are entitled to one free copy of your data. Additional copies may incur a reasonable administrative fee.

Right to rectification

You may request immediate correction of inaccurate or incomplete personal data.

Right to object

You may object to processing for direct marketing purposes. In that case, we will cease processing your data for such purposes.

Right to erasure ("right to be forgotten")

You may request that we delete your data if:

• it is no longer necessary for its original purpose;
• you have withdrawn consent;
• you have objected to the processing;
• data was processed unlawfully.

Unless legal grounds require us to retain the data, we will comply.

Right to restriction of processing

You may request restriction if:

• you contest the accuracy of data;
• processing is unlawful but you prefer restriction to erasure;
• we no longer need the data but you require it to assert legal claims;
• you have objected to processing (restriction applies during objection assessment).

During restriction, we may store but not otherwise process your data without your consent or legal grounds.

Right to data portability

You may request your data in a structured, commonly used, and machine-readable format to transmit to another controller.

How to exercise your rights

You may contact us using the details above. We will respond without undue delay. If unsatisfied, you may contact the Czech Data Protection Authority: https://www.uoou.cz or your local EU supervisory authority.

4. DATA MANAGEMENT AND PROCESSING

Who processes your data?

The Seller is the controller of your data.

Currently, the company KLM Group SE, ID No.: 28948823, registered office: Argentinská 1621/36, Prague 7, PSČ: 170 00, provides accounting services and processes data on our behalf.

We may also share your data with our IT providers, web administrators, couriers, legal, tax or accounting advisers. Details on specific data processors will be provided upon request.

Personal data is secured against misuse. Processing may be automated (digital) or manual (printed).

Will we share your data?

Only to the extent necessary to fulfil the contract or legal duties (e.g. with couriers or service providers).

We do not transfer your data outside the European Union.

5. COOKIES

What are cookies?

Cookies are text files stored on your device that enable the Website to function properly. Some are essential; others enhance functionality.

You may disable cookies in your browser settings. However, this may affect website functionality.

 

What cookies do we use?

Session cookies – temporary, deleted after closing the browser

Persistent cookies – remain until manually deleted

Cookies categories:

First-party cookies: essential for Website operation (e.g. navigation, login)

Performance cookies: analytics (e.g. number of visits, session duration)

Third-party cookies: from domains other than codexlabs.co (e.g. advertising, social media)

Functional cookies: personalise experience, remember preferences, location

Targeting/advertising cookies: personalise ads, may involve personal data use

See Annex 1 hereof for the full list of cookies used.

Google services

We use Google Analytics and related services. Learn more about how Google uses your data and how to manage your preferences here:

🔗 https://policies.google.com/technologies/partner-sites?hl=en

Effective Date

These Privacy Policy terms are valid and effective from 7 May 2025.

 

Essential cookies:

• Cookiebot
• Google
• PayPal
• Shopify
• Vimeo

Preference cookies:

• Klaviyo

Statistics cookies:

• Klaviyo
• Vimeo

Marketing cookies:

• Meta Platforms, Inc.
• Klaviyo
• Optimizely
• RudderStack
• Shopify
• Clarity

Unclassified cookies:

• Cloudflare
• Google
• Klaviyo
• PayPal
• Powr
• Shopify