We consider the security of personal data, customer accounts and information systems to be an important part of the operation of the online store https://www.orfeoshop.com.
Orfeo Office, s.r.o. implements appropriate technical and organisational measures corresponding to the nature of the data processed, the systems used and the potential security risks.
Our aim is, in particular, to protect the confidentiality, integrity and availability of the data processed and to reduce the risk of unauthorised access, loss, alteration, misuse or unauthorised disclosure of data.
Communication between the user and the online store https://www.orfeoshop.com is secured using an encrypted HTTPS/TLS connection.
Access to administration systems and personal data is restricted to persons who need such access to perform their employment or contractual duties.
We use appropriate technical and organisational measures aimed in particular at protecting user accounts, orders, customer communications and other data processed in connection with the operation of the online store.
We continuously adapt our security measures to developments in the technologies used, the nature of the processing and the identified risks.
Users are required to protect their login credentials for their customer account and not disclose their password to third parties.
We recommend using a sufficiently strong and unique password that is not used simultaneously for other services.
If you suspect that unauthorised access to your account has occurred, we recommend changing your password without delay and contacting us.
Orfeo Office, s.r.o. never asks customers to send their password by e-mail.
Online payments are processed through an external payment service provider.
Full payment card details are not stored in the systems of https://www.orfeoshop.com.
When making an online payment, the data is entered directly into the secure environment of the relevant payment service provider.
Only authorised persons and contractual partners have access to personal data to the extent necessary to perform their tasks.
Data may be made available in particular to IT service providers, payment service providers, carriers, accountants and other processors or recipients listed in our Privacy Policy.
Details of what personal data we process, for what purposes and to whom it may be disclosed can be found in our Privacy Policy.
To an extent appropriate to the nature of the systems used, we implement measures aimed at maintaining data availability and enabling the restoration of operations in the event of a technical failure or security incident.
We do not disclose specific technical procedures or security configurations where such disclosure could reduce the level of security of our systems.
If we identify a security incident, we assess its nature, scope and potential impact.
Where a personal data breach is likely to result in a risk to the rights and freedoms of natural persons, we proceed in accordance with the GDPR and, where applicable, notify the Czech Office for Personal Data Protection of the incident.
If the breach is likely to result in a high risk to the persons concerned, we inform them in the cases and in the manner required by applicable law.
The Czech Office for Personal Data Protection confirms that a personal data breach may include, for example, unauthorised access, loss, alteration or disclosure of data and that incidents involving risk are subject to notification obligations under the GDPR.
Úřad pro ochranu osobních údajů
If you believe you have identified a security vulnerability, weakness or other security issue in the online store https://www.orfeoshop.com, please contact us at:
info@orfeoshop.com
Please include the following information in your message:
the address of the page or system affected by the issue,
a brief description of the issue identified,
the steps required to reproduce the issue, where possible,
and a contact e-mail address in case additional information is required.
When investigating a potential security issue, please do not carry out any actions that could lead to unauthorised access to another person’s data, alteration or deletion of such data, disruption of services or any other interference with the rights of third parties.
We will assess security reports and take appropriate measures according to the nature of the reported issue.
We recommend paying particular attention to fraudulent e-mails, SMS messages and fake websites that may impersonate ProdejKavy.cz, carriers or payment service providers.
If in doubt, do not click suspicious links and do not provide login passwords or full payment card details.
You can verify the authenticity of any communication using our official contact details.
No information system can be considered absolutely secure.
Orfeo Office, s.r.o. therefore cannot guarantee that a technical failure or security incident will never occur. However, we undertake to implement appropriate measures corresponding to known risks and to act without undue delay if an incident is identified.
Orfeo Office, s.r.o.
Registered office:
Chelčického 95/15
370 01 České Budějovice
Czech Republic
Contact address:
Chelčického 95/13A
370 01 České Budějovice
Czech Republic
Company ID No.: 25176269
VAT ID No.: CZ25176269
E-mail: info@orfeoshop.com
Telephone: +420 734 215 588
Website: https://www.orfeoshop.com
