How 524WiFi Uses Personal Data
This policy explains who controls personal data, how and why we use it, who may receive it, and how customers and visitors can exercise their rights.
1. Data controller
Tomorrow Systems s.r.o.®, Radlicka 899/33, 150 00 Praha 5, Czech Republic, Company ID 26705257, EU VAT ID CZ26705257, operates 524WiFi.com and is the controller for the processing described here.
Privacy contact: [email protected], phone +420 608 262 004, Data Box ID 4kg7ng3.
2. Data, purposes and legal bases
| Purpose | Typical information | Legal basis |
|---|---|---|
| Account, quote, cart, order, payment, and delivery | Name, company, billing and delivery address, email, phone, EU VAT number, order contents, payment status, and shipping status | Contract and steps requested before a contract; statutory accounting and tax duties |
| Customer support, withdrawal, returns and warranty | Contact details, order number, correspondence, diagnostics and return information | Contract, statutory consumer duties and legitimate interest in documenting and resolving requests |
| Security, fraud and service availability | IP address, request and device metadata, timestamps, account and security events | Legitimate interest in protecting customers, systems and legal claims |
| Marketing communications | Email address and campaign interactions | Consent where required, or the limited existing-customer exception permitted by law; every marketing message offers an opt-out |
| Analytics and advertising measurement | Online identifiers and page or e-commerce interactions | Consent supplied through the applicable consent process |
Providing data marked as required is necessary to create an account, process an order, or respond to the relevant request. Without it, we may be unable to provide that service. Full payment-card information entered on a payment provider's page is handled by that provider and is not stored by us as part of the standard shop order record.
3. Recipients and service providers
We share data only as needed to provide the relevant service. Recipients may include:
- Webglobe and technical providers that support hosting, security, email, and the shop;
- PayPal, banks, and payment providers selected by the customer;
- postal, courier, customs, and fulfillment providers needed to deliver or return goods;
- accounting, tax, and legal advisors and public authorities where required;
- Google Analytics and Google Ads for consent-based analytics and advertising measurement.
When a provider processes data outside the EEA and no adequacy decision applies, we use an appropriate transfer mechanism, such as European Commission standard contractual clauses and any necessary supplementary safeguards.
4. Retention
- Order, invoice and tax records are kept for the periods required by Czech accounting and tax law, commonly up to 10 years.
- Support, return, withdrawal, warranty and contract correspondence is kept while the request is handled and for the period reasonably necessary to establish, exercise or defend legal claims.
- Operational and security logs are retained only as long as reasonably necessary for troubleshooting, abuse prevention and incident evidence; relevant evidence may be held longer during a claim or investigation.
- Marketing data is used until consent is withdrawn, a valid objection is made or the address is no longer needed.
Backups may retain data for a limited additional period before scheduled replacement.
5. Rights
Depending on the circumstances, individuals may request access, correction, deletion, restriction, or portability; object to processing based on legitimate interests or direct marketing; and withdraw consent without affecting earlier lawful processing. We may need to verify identity and may retain information when required by a legal duty or legal claim.
Send requests to [email protected]. A complaint may also be filed with the Czech Office for Personal Data Protection (UOOU) or another competent EEA supervisory authority.
6. Cookies and related technologies
The existing 524WiFi cookie notice and controls explain the shop's cookie categories and the available choice. This Privacy Policy does not alter that consent mechanism. Further information remains available on the Cookies page.
7. Security and automated review
We use access controls, encrypted connections, backups, logging, and other appropriate safeguards. No internet-connected service can guarantee absolute security. Security systems may automatically flag suspicious traffic or orders for review, but the shop does not make decisions based solely on automated processing that produce legal or similarly significant effects for a customer.
8. Updates
We may update this policy when the shop, providers or legal requirements change. Material changes are published here with a new revision date.
Last updated: September 30, 2026.
