Skip to document
English

JapanDíly

Privacy Policy

Effective date
2026-10-19
Version 2Download PDF
Contents

Introduction

This Privacy Policy explains how Jitoma Solutions s.r.o. processes personal information in connection with JapanDíly at https://japandily.cz. It takes effect on 2026-10-19. It is based on the service practices described by its operator and should be read together with notices shown when information is collected.

Who operates this service

Jitoma Solutions s.r.o. is the business responsible for this policy and is established in the Czech Republic, with a postal address at Děčínská 552/1, 180 00 Praha 8, Czech Republic and company registration number 19728492.

Scope

This policy applies to the website and online store offered under the JapanDíly name. It does not govern independent third-party services that publish their own privacy terms.

Information we collect

Depending on use of the service, Jitoma Solutions s.r.o. collects these broad categories: identity and contact information; account information, submitted content, and communications; technical, usage, and device information; and payment, location, sensitive, or other information. Specific data depends on the features used and the practices described below.

Account registration requires an email address and authentication details. Orders require the chosen parts, email, recipient name, telephone and shipping and billing addresses and any selected pickup point, plus payment confirmation. Payment credentials are supplied to Stripe through hosted checkout. Part enquiries and tuner questions require a name, email, vehicle details and request; their telephone field is optional. Without information necessary for a requested account, delivery, payment or enquiry, that function cannot be provided. Newsletter signup is optional and requires an email and separate consent; declining does not prevent shopping. Legally required accounting records must be retained independently of account deletion.

Sources of information

Information comes from users directly, automatic collection from the devices used to access the service, and service providers or partners. Actual indirect sources: Stripe returns payment status, transaction references and payment verification information to reconcile orders and tuner payments. Brevo returns email-submission and delivery information for transactional communications. Zásilkovna/Packeta supplies pickup-point records and selected delivery information; customer contact details and published order/shipment updates are used for fulfilment. Cloudflare processes technical request information to deliver and secure the site's content. No purchased marketing lists or collection from public sources are implemented. Information received from another source is handled for the purposes described in this policy and subject to applicable restrictions. Where a direct or indirect collection notice is required at a particular time, this general policy does not replace that notice.

How we use information

Information is used for providing and securing the service; managing accounts, support, payments, and communications; and marketing, advertising, and personalization. It may also be used to prevent misuse, establish or defend legal claims, meet legal obligations, and enforce service terms where those activities are relevant and permitted.

Messages and email

The service sends transactional service and marketing messages using Brevo. Transactional messages use the Brevo email API; newsletter signup addresses are stored in the shop database. The source does not disable Brevo's default message-open or click tracking; the provider's account-level tracking settings have not been separately verified.. Contact details are used for delivery, service administration, and the purposes described when the details are collected.

Marketing messages can be stopped through Email jiri@jitoma.cz to withdraw newsletter consent and request removal from the newsletter list. The repository currently collects newsletter signups with a separate, unchecked consent box; no self-service unsubscribe control is implemented.. The operator measures message opens or link interactions; those events are used to understand delivery and engagement.

Cookies and tracking technologies

The service uses essential browser storage or cookies only where needed for security, sessions, saved choices, load balancing, or requested functionality. These technologies are not used for cross-service advertising.

Payments

Payments are processed using Stripe for one-time purchases. The operator does not directly store full payment-card information; the payment provider handles card details under its own privacy terms.

Sharing and disclosures

Information may be disclosed to service providers and authorities or professional advisers for the purposes described in this policy, subject to contracts and legal limits where required. It may also be disclosed to authorities, courts, advisers, or transaction counterparties when reasonably necessary for law, safety, claims, or a business reorganization. Selected service providers include Stripe and Cloudflare.

International transfers

Information may be processed outside the Czech Republic. The stated location and safeguard approach is: The application is hosted in Germany. Stripe processes payment and customer data globally, including in the United States, under its Data Processing Agreement and Data Transfers Addendum: https://stripe.com/legal/dpa and https://stripe.com/legal/dta. These provide the applicable EU-US Data Privacy Framework mechanism where covered, and the European Commission's 2021 standard contractual clauses as applicable. Cloudflare operates a global network and its Customer Data Processing Addendum incorporates standard contractual clauses for restricted transfers: https://www.cloudflare.com/cloudflare-customer-dpa/. Brevo sends account, order and enquiry emails; its Data Processing Agreement is incorporated in its Terms of Service at https://www.brevo.com/legal/termsofuse/; provider and subprocessor processing may extend beyond the EEA, including the United States and support access from India. Its published DPA provides standard contractual clauses and supplementary measures, and EU-US Data Privacy Framework coverage where applicable. Contact jiri@jitoma.cz for information about applicable safeguards and copies subject to necessary redactions. Local delivery contact details are also used by the selected carrier or pickup provider, including Zásilkovna. These arrangements do not mean all information remains in the EU/EEA. For EU information, the transfer mechanism is: The application is hosted in Germany. Stripe processes payment and customer data globally, including in the United States, under its Data Processing Agreement and Data Transfers Addendum: https://stripe.com/legal/dpa and https://stripe.com/legal/dta. These provide the applicable EU-US Data Privacy Framework mechanism where covered, and the European Commission's 2021 standard contractual clauses as applicable. Cloudflare operates a global network and its Customer Data Processing Addendum incorporates standard contractual clauses for restricted transfers: https://www.cloudflare.com/cloudflare-customer-dpa/. Brevo sends account, order and enquiry emails; its Data Processing Agreement is incorporated in its Terms of Service at https://www.brevo.com/legal/termsofuse/; provider and subprocessor processing may extend beyond the EEA, including the United States and support access from India. Its published DPA provides standard contractual clauses and supplementary measures, and EU-US Data Privacy Framework coverage where applicable. Contact jiri@jitoma.cz for information about applicable safeguards and copies subject to necessary redactions. Local delivery contact details are also used by the selected carrier or pickup provider, including Zásilkovna. These arrangements do not mean all information remains in the EU/EEA. Users may request information about the mechanism used.

Data retention

The retention model is: records are kept while the account or relationship remains active and for a justified period afterward. Records may be kept longer when reasonably necessary for security, disputes, tax, accounting, fraud prevention, legal obligations, or enforcement. Deletion or de-identification follows the stated model and applicable law.

Security

The operator uses encryption and access restrictions, selected according to the nature and risk of the information. No transmission or storage method is completely secure, so absolute security cannot be guaranteed.

Children's privacy

The service is intended for a general audience. If the operator learns that information was collected from a child contrary to the stated audience or applicable law, it will take reasonable steps to delete it and may ask for age or authority verification.

Your choices and privacy rights

Depending on location and processing, users may ask to access, correct, delete, restrict, or receive information; withdraw consent; unsubscribe; object; or opt out of sale, sharing, or targeted advertising. Requests are supported through the privacy contact or by email to jiri@jitoma.cz. The operator may verify identity and authority, apply legal exceptions, and explain a denial and available appeal where required.

Privacy complaint procedure: Send privacy requests, objections, newsletter withdrawal and complaints to jiri@jitoma.cz or by post to Jitoma Solutions s.r.o. at the address in this notice. The operator assesses the request, may seek proportionate identity verification and replies through the supplied contact. A complaint may also be submitted directly to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), https://uoou.gov.cz. Applicable regional response periods and escalation routes are described below. Request verification must not demand more information than is reasonably necessary, and statutory opt-out requests must not be made conditional on creating an account where prohibited.

European Economic Area privacy rights

The EU GDPR has applied since May 25, 2018. Where it applies, people may request access, rectification, erasure, restriction and portability; object to processing; withdraw consent without affecting prior lawful processing; and complain to a competent supervisory authority, including in the country of habitual residence, workplace or alleged infringement. The EDPB lists the national authorities at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. Rights depend on the processing, lawful basis and statutory exceptions. Requests may be made through the privacy contact or at jiri@jitoma.cz.

The controller responds without undue delay and normally within one month of receiving a request. Where a lawful extension of up to two further months is needed because of complexity or number of requests, the controller explains it within the first month. A refusal is explained with the available complaint and judicial remedies. Information and action are generally free, subject to the GDPR's limited exceptions. New incompatible processing purposes require the appropriate further notice and legal basis before that processing begins.

Article 13 information is supplied when information is collected from the person. For indirect collection under Article 14, subject to its exceptions, the controller supplies the required notice within a reasonable period of at most one month, or earlier at the first communication with the person or first disclosure to another recipient, as applicable.

Account and data deletion

Users can request account and associated-data deletion through email to jiri@jitoma.cz. Some records may remain for security, legal, tax, payment, dispute, fraud-prevention, or backup-cycle needs and will remain restricted to those purposes.

Changes to this policy

This policy may be updated to reflect service, legal, or operational changes. The current version will be posted at https://japandily.cz with a revised effective date. Additional notice or consent will be provided only when required by applicable law.

Contact us

Privacy questions and requests may be sent to Jitoma Solutions s.r.o. at jiri@jitoma.cz or by mail to Děčínská 552/1, 180 00 Praha 8, Czech Republic.