Updated 1 September 2026
Privacy Policy
Tomorrow Systems® s.r.o. processes only the personal data needed to operate WodaTherm™, serve customers, fulfil legal duties and keep the store secure.
Controller
The controller is Tomorrow Systems® s.r.o., Karlštejnská 323, 252 25 Ořech, Czechia, company ID 26705257, EU VAT ID CZ26705257. Privacy enquiries: info@wodatherm.com.
Data we process
- identity, billing and delivery details, company and VAT information;
- contact details, account details and customer communications;
- order, invoice, delivery, return, complaint and warranty records;
- payment status and transaction references supplied by payment providers, not full card numbers;
- technical data such as IP address, device/browser information, security events, consent choices and necessary cookies.
Purposes and legal bases
We process data to create and administer accounts, answer enquiries, conclude and perform contracts, take payment, deliver goods, handle returns and complaints, and provide support. The legal basis is performance of a contract or steps requested before a contract. We retain accounting, tax and other records to comply with legal obligations. Fraud prevention, website security, service diagnostics and the establishment or defence of claims rely on our legitimate interests, balanced against individual rights. Optional marketing or non-essential cookies rely on consent where consent is required and may be withdrawn at any time.
Recipients and processors
Data is shared only where necessary with hosting and IT providers, store and communications infrastructure, payment providers, carriers, professional advisers, public authorities when legally required, and service partners involved in an authorised repair or claim. Each recipient receives only the information needed for its role. We do not sell personal data.
International transfers
Where a provider processes data outside the European Economic Area, we use a lawful transfer mechanism and appropriate safeguards, such as an adequacy decision or approved contractual clauses, unless a statutory exception applies.
Retention
Order, invoice and tax records are kept for the periods required by law. Account data is kept while the account is active and afterwards only as needed for legal claims or obligations. Enquiries and service records are kept for a reasonable period according to their subject. Security logs are retained for a limited operational period. Consent records are retained while needed to demonstrate the choice; withdrawal does not affect earlier lawful processing.
Your rights
Subject to the GDPR and applicable law, you may request access, correction, erasure, restriction, portability or object to processing based on legitimate interests. You may withdraw consent at any time. Some requests cannot be fulfilled where retention or processing is required by law or necessary for legal claims. We may need to verify identity before responding.
Complaints and automated decisions
Contact us first at info@wodatherm.com. You may also complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7; uoou.gov.cz) or another competent supervisory authority. WodaTherm™ does not use solely automated decision-making that produces legal or similarly significant effects on customers.
Security and changes
We use organisational and technical safeguards appropriate to the risk, but no internet service can guarantee absolute security. We may update this policy when processing, providers or law changes; the current date is shown above.