Privacy Policy — Webshop (B2B)
POS Entertainment s.r.o. · Version 0.1 · As of: 14 July 2026
1. Controller
The controller for the processing of personal data in connection with the webshop is:
POS Entertainment s.r.o. Bořivojova 878/35, 130 00 Prague 3, Czech Republic Commercial Register C 49847, Regional Court of Brno · VAT ID CZ27661377 E-mail: [privacy@onlyentertain.com]
No data protection officer has been appointed.
2. What We Process Data For
The webshop is directed exclusively at businesses (operators and resellers). We process personal data of the acting natural persons (e.g. owners, employees, contact persons) for the following purposes:
2.1 Customer Account and Contract Performance
Name, company, address, e-mail address, [telephone number], register number, VAT ID, access credentials (password stored as hash only), order and contract history, shop schedules, operator registration data (also in the reseller channel, see Section 2.5). Legal basis: Art. 6(1)(b) GDPR (contract or pre-contractual measures); for contact persons of legal entities Art. 6(1)(f) GDPR (legitimate interest in performing the B2B contract).
2.2 Payment Processing
Payment method, invoicing data; for card payments the transaction data processed via our payment service provider [PSP name] (we ourselves do not store full card data); where crypto payment has been activated, the transaction identifier and wallet address. Legal basis: Art. 6(1)(b) GDPR; for retention under tax and commercial law Art. 6(1)(c) GDPR; for crypto payments additionally Art. 6(1)(c)/(f) GDPR (prevention of money laundering, compliance checks).
2.3 Operation, Security and Abuse Prevention
Server logs (IP address, timestamp, resource accessed, user agent), login events, security and audit logs; monitoring data for detecting breaches of the platform agreement (e.g. conspicuous credits-distribution patterns, see its Section B7). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security, stability and contract enforcement). Log retention: [30/90] days, then deletion or anonymisation, unless a security incident requires longer retention.
2.4 Support and Communication
Content and metadata of e-mail enquiries to our support address. Legal basis: Art. 6(1)(b) or (f) GDPR.
2.5 Operator Registry and Provider Identification
We process operator identity data registered in the reseller channel (name/company, address, contact, register number if any) for the activation of shops, for the platform-side provider identification towards end users, and for enforcing the platform principles. Legal basis: Art. 6(1)(b) and (f) GDPR (contract performance; legitimate interest in securing the transparency and compliance of the platform).
3. Recipients of the Data
We disclose personal data only to the extent necessary for the purposes stated above:
Hosting provider: [provider, seat in the EU] — processor pursuant to Art. 28 GDPR
Payment service provider: [PSP name] for card payments (separate controller for the payment processing)
Tax advisory / accounting: [firm/provider]
Authorities and courts, where legally required
Data is not transferred to countries outside the EU/EEA.
4. Retention Period
We store personal data for as long as the customer account exists and beyond that to the extent statutory retention obligations apply (up to [10] years for invoicing and accounting records under Czech tax and commercial law — [have deadlines confirmed by the tax advisor]). Server logs: see Section 2.3. Thereafter the data is deleted or anonymised.
5. Your Rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). Please contact [privacy@onlyentertain.com].
You also have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz.
6. Obligation to Provide Data; Automated Decision-Making
Providing the account and invoicing data is required for concluding the contract; without it we cannot provide the webshop. No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.
7. Cookies
The webshop uses strictly necessary cookies only. Details are set out in our [Cookie Policy] (Dok4).
8. Changes to this Policy
We update this privacy policy when the processing or the legal situation changes. The version published on this page applies.