NOVA POST + GIMMICK.IN

Strategic Integration Partnership
for CZ/SK E-commerce

Bridging the gap between Nova Post and 80,000+
Czech & Slovak e-shops

1

Demonstration

2

Who we are (Gimmick.in spol. s r.o.)

Your Strategic Gateway to CZ/SK E-commerce

Technology House

Czech-based technology company: ID/ICO: 28915119, VAT: CZ28915119, since 2009. For each solution we connect professionals with proven skills in technologies, banking, e-commerce, accounting, KYC, AML, compliance

Local Expertise

Years of experience with local and international platforms (Magento, Shoptet), regulations (SK/CZ/EU), and business practices thanks to own e-commerce products and solutions

Data Transformation Specialists

We don't just connect systems — we translate business needs into technical reality
Expert at converting messy real-world data into clean, structured formats

3

Proven Resilience & Scale

We Handle Complexity at Scale

Sametic.cz

B2C e-shop since 2012
Experience with Magento, Shoptet, many payment and delivery methods
Already exported to 50+ countries
Proof: Deep knowledge of Czech and Slovak e-commerce

Rychlejsie.sk

Mission-critical system for COVID-19 testing management
750,000+ processed records for the City of Bratislava, AAA auto and other cities and companies
Massive data spikes handled with highest uptime thanks to MS Azure
Proof: We deliver when failure is not an option

Biatec.cz

B2B SAAS since 2014
Seamless conversion of e-commerce data into accounting systems
40+ input formats supported
Hundreds of active clients across CZ/SK
Proof: We are experts at transforming messy data into clean formats

Garix.eu

Automated sanction checks: UN, US, EU lists
Compliance-grade data processing
Understanding of legal & security requirements for international shipping
Proof: We know the regulatory landscape

4

Biatec Connector — Nova Post for Shoptet

Bridging the Gap Between Nova Post and 80,000+ E-shops

Zero Integration Barrier

Biatec Connector desktop app lets merchants ship with Nova Post instantly
No Shoptet API subscription, no complex implementation
Download & install → auto-setup wizard → ship in minutes

The "Clean Data" Engine

Automatic data validation before reaching Nova Post API
Optional (see roadmap): Phone formatting, weight normalization, COD parsing
Country code mapping (CZ, SK, PL, HU, DE, AT, UA)

Checkout Widget

Official Nova Post branch picker embedded in checkout
Customer selects branch → data flows to merchant admin
Works across all checkout steps with smart state management

Unified Platform

One tool for Shoptet today, extensible to other platforms
Platform-agnostic backend — only thin frontend adapters needed
Roadmap: WooCommerce, PrestaShop, and more

5

Why Partner with Us?

More Than Just an Integrator — A Growth Partner

Immediate Market Penetration
We remove the technical friction that stops small and medium e-shops from switching to Nova Post.

Value-Added Knowledge
We provide the "know-how" on connecting local workflows (accounting, invoicing, local habits) to your global logistics.

Built-in Marketing Channel
We can directly introduce Nova Post to our hundreds of existing Biatec.cz clients who already need better logistics.

Local Agility
Shoptet changes their code? We update the connector the same day. No corporate delays.

CZ/SK Expertise
We understand Czech and Slovak e-commerce regulations, payment methods, and customer expectations.

6

Steps to Cooperation

Next Steps Towards a Strategic Partnership

1

Official Integrator

Confirm Gimmick.in as the official integration partner for Nova Post in the CZ/SK region — the Biatec Connector desktop app is production-ready and distributed directly, with no third-party store approval required.

2

Solution Verification

Nova Post validates the Biatec Connector solution on a real e-shop.

3

Pilot Phase

Starting a pilot phase with selected high-volume Shoptet merchants to prove the value.

4

Production

Implement the internal Nova Post process with connection of Nova Post clients to Gimmick.in.

7

Technical Architecture

A Complete, Production-Ready Integration Stack

Checkout Widget — Customer-facing

Lightweight JS injected into Shoptet storefront
Official Nova Post branch picker (iframe)
Saves selection in machine-readable format
Works across all checkout steps
Country auto-detection (CZ, SK, PL, HU…)

Biatec Connector — Merchant desktop app

Embeds Shoptet admin, adds a "Nova Post" column
One-click shipment creation & bulk labels
Direct printing to local label printer
Auto-extracts order data (name, phone, COD)
No Shoptet API subscription needed

Backend API — Infrastructure

Node.js + PostgreSQL
JWT authentication & multi-tenant isolation
Nova Post API integration (create, track, label)
Data validation & transformation layer
Project verification & ownership system

8

The Data Flow

From Cart to Label — Every Step Automated

1

Customer Checkout

Customer selects Nova Post branch in checkout widget. Branch ID saved to order.

2

Merchant Admin

Biatec Connector detects Nova Post orders, extracts recipient details automatically.

3

Create Shipment

One click → data validated → Nova Post API called → tracking number returned.

4

Download Label

PDF label retrieved from Nova Post. Bulk merge for multiple shipments.

5

Track & Deliver

Status refreshed from Nova Post API. Full lifecycle visibility.

Data Validation Layer

Phone numbers: extraction & formatting
Weight: normalization (min 1 kg enforced)
COD amounts: parsed from local currency formats
Country codes: CZ, SK, PL, HU, DE, AT, UA mapping
Branch fallback: automatic retry with alternative
Address validation: format check before API call
All errors caught before reaching Nova Post API
Result: Higher success rate, fewer failed shipments

9

Technical Advantages

Why This Approach Wins

⚠ No native Shoptet module

→

Biatec Connector desktop app bypasses the need entirely

⚠ Merchants lack technical skills

→

Zero-code setup: install the app, widget auto-installs

⚠ Data quality crashes shipments

→

Pre-validation catches errors before Nova Post API

⚠ Each platform is different

→

Platform-agnostic backend, only frontend adapts

⚠ Need for bulk operations

→

Bulk creation + merged PDF labels in one click

10

Onboarding — E-shop Admin

From Zero to Shipping — Same Day Setup

1

Register & Configure

Create account on dashboard, enter Nova Post API key and sender details

5 min

→

2

Install App

Download & install Biatec Connector, follow the wizard to verify and insert widget

2 min

→

3

Auto-Setup

App auto-detects store, installs widget, and verifies — no manual work

1 min

→

4

Done!

Widget live in checkout, start creating shipments immediately

same day

No coding skills needed · No server setup · No Shoptet API subscription

11

Onboarding — Operator

Warehouse Staff — No Registration Needed

1

Get Access Code

E-shop admin generates an access code in dashboard and shares it

1 min

→

2

Install & Connect

Install Biatec Connector, enter access code — no account needed

2 min

→

3

Done!

Operator can create shipments and print labels right away

same day

No registration

No email, no password

Delegated access

Admin controls who has access

Revokable

Admin can disable code anytime

12

Daily Usage Flow

How the Merchant Works With Nova Post Every Day

Customer

Shop Owner

Biatec Connector

Nova Post

Picks Nova Post branch in checkout widget

Places order (branch ID saved)

Opens Shoptet admin — sees Nova Post orders

Clicks "Create Shipment"

Validates data, formats address & phone

Sends shipment request →

Creates shipment, returns tracking #

Clicks "Print Label"

Fetches PDF →

Returns label PDF

Auto-refreshes status →

Returns tracking data

13

Architecture

Integration Overview — Desktop App + Server Layer

14

Roadmap

From Shoptet to the Entire CZ/SK Market

Phase 1 — NOW

Biatec Connector for Shoptet

Live and production-ready desktop app. Auto-install wizard, operator access codes, direct label printing.

Phase 2

Customs Automation

HS code mapping, CN22/CN23 form generation for cross-border shipments.

Phase 3

Additional Platforms

WooCommerce and PrestaShop connectors using the same backend.

Phase 4

Advanced Features

• Biatec.cz: COD Transactions for your customer's accounting directly from the Shoptet.
• Garix.eu: Sanction list check as integrated and exclusive advantage for Nova Post clients.

15

Why a Desktop App — Not a Browser Extension

Full Control, No Third-Party Gatekeepers

Instant Updates

Fixes reach every operator within minutes
No store review, no user click-through
App can require the current build before shipping

No Gatekeepers

Distributed directly by Biatec — download & install
Independent of Google / Chrome Web Store policy
When Shoptet changes, operators are back online the same hour

Operator-Grade Tooling

Direct printing to local label printer
Local archive of labels, invoices & customs docs
Persistent Shoptet session — log in once

	Biatec Connector (desktop)	Browser extension
Time to ship a fix	Minutes — pushed to all operators	~2 weeks — store review per release
Distribution control	Fully ours	Subject to Google policy changes
Local label printing	Direct to printer	Browser print dialog only
Install	One-time download (~120 MB)	One-click in browser

The one trade-off — a desktop install instead of a browser click — buys same-hour fixes, direct printing and independence from any app-store gatekeeper.

16

High-Volume Path — Shoptet API Integration

Complementary Server-to-Server Option — Less Data, More Automation, Better Compliance

How It Works

Shoptet API → read order in real time → send to Nova Post → store only tracking number
No need to store recipient address, phone, or email — fetched on demand
Server-to-server — runs without the desktop app

Customs Automation

Product data from Shoptet API → automatic HS code classification (TARIC database + AI)
CN22/CN23 customs declaration generated automatically
HS code mapping shared across merchants (anonymized SKU → HS code database)

Print Bundle

Invoice — fetched directly from Shoptet API (PDF)
Customs declaration — generated by Biatec (CN22/CN23)
Shipping label — from Nova Post API
All three printed together in one click

What We Store	What We Don't Store	GDPR Benefit
Order ID + tracking number	Recipient name, address, phone, email	Minimal data footprint
Shipment status	Order contents, prices	No personal data at rest
HS code mappings (anonymized SKU → code)	Invoices — fetched live from Shoptet	Nothing to breach

17

DOM Stability & Response Times

Two Independent Layers — Different Risk Profiles

	FE — Checkout Widget	Admin — Biatec Connector
Who sees it	End customer	Merchant only
Complexity	Simple — 150 lines of code	Complex — 1,100 lines of code
Depends on	Shipping radio buttons, remark field	Order table structure, detail page HTML
If it breaks	Customer can't pick branch, but order still goes through	Merchant exports orders → imports on Biatec dashboard → processes → saves PDF
Fix estimate	2–4 hours	4 hours — 3 days

Detection

Sentry error tracking — real-time alerts when something breaks
Automated smoke tests — daily DOM structure check

Resilience

Text-based selectors — resilient to CSS/class changes
FE and Admin are fully independent — one can break without affecting the other

Why It's Not a Showstopper

Customers never see admin-side issues
Fallback: export orders → Biatec dashboard → process → PDF
Text-based selectors survive most Shoptet redesigns
API integration (roadmap) eliminates DOM dependency entirely

The desktop app is a convenience layer, not a single point of failure.

18

Privacy & Checkout Data

What We Access, What We Don't

	FE — Checkout Widget	Admin — Biatec Connector
Reads	Shipping method ID, delivery country	Order name, phone, email, address
Writes	Branch selection → remark field	Tracking number → Shoptet order
Sends to server	Nothing — all stays in browser (localStorage)	Order data via HTTPS → Biatec → Nova Post API
Receives from server	—	Tracking number, shipment status, PDF label from Nova Post
Payment data	No access — payment on external gateway	No access

Customer Data

Widget never sends customer data to our servers
Branch selection stored only in browser localStorage

Merchant Data

The app only processes data the merchant already has full access to
All transfers over HTTPS

Never Collected

Card numbers, CVV, payment credentials
Passwords or login tokens
Personal documents or IDs

19

Data Reliability & Order Safety

Read-Only Approach — Orders Are Never at Risk

1. Read

Biatec Connector reads order from Shoptet
Read-only — never modifies the original order
Branch ID stored in remark field at checkout — editable by admin if customer requests a change

2. Send

Data sent to Nova Post API via HTTPS
Clear success/fail response per order
Each order processed individually — one failure doesn't block others

3. Confirm

Tracking number written back only after Nova Post confirms
Shipment stored in DB only on success
If anything fails → Retry button, no data lost

Safety Guarantee	If Something Goes Wrong
Orders are never deleted in Shoptet — only tracking number is written back	The app shows a clear error message per order
Failed shipments can always be retried — zero data loss	Merchant clicks Retry or creates shipment manually
Duplicate protection — same order won't be shipped twice (unless admin requests a new shipment)	Internet glitch mid-request → order stays in Shoptet, ready to retry
All communication over HTTPS — encrypted in transit	Original order in Shoptet is always intact

20

GDPR & Data Storage

What We Store, Where, and Why

Data Category	What We Store	Retention
Merchant account	Login, email, name, company, address, tax ID, password (bcrypt hash)	Until account deletion
Project config	Shoptet ID, shop URL, sender address, Nova Post API key (encrypted at rest in production)	Until project removal
Shipments	Recipient name, phone, email, address, branch ID, tracking number, status	12 months, then anonymized
Customer checkout	Branch selection in browser localStorage only — never sent to our server	Browser session
Never stored	Payment data, card numbers, passwords in plain text	—

Infrastructure

Hetzner — ISO 27001 certified, EU (Germany/Finland)
PostgreSQL with encrypted connections
All API communication over HTTPS

Legal Roles

Merchant = Data Controller
Biatec = Data Processor (DPA provided)
Nova Post = Carrier — receives only shipping data

Compliance

Right to erasure — data deletion on request
Data minimization — we only store what shipping requires
No cross-merchant data sharing

21

Security & Token Architecture

How We Keep Tokens Safe

Authentication

Admin JWT — login/password, full project access, 30-day expiry
Operator token — access code, single-project scope, no credentials needed
Two roles, least-privilege principle

Token Isolation

Refresh token in OS keychain (safeStorage) — access token in memory only
Shoptet admin runs in an isolated Chromium partition
Web pages cannot reach the app's encrypted storage

Transport Security

All communication over HTTPS
Tokens never exposed to page DOM
No tokens in URLs or query strings

Attack Vector	Protection
Malicious script on Shoptet page	Runs in an isolated Chromium partition — cannot reach tokens or the OS keychain
Other apps on the machine	Refresh token encrypted via OS keychain (`safeStorage`) — access token never persisted
Network interception (MITM)	HTTPS encryption on all API calls — tokens encrypted in transit
Token theft from device	30-day JWT expiry, operator tokens scoped to single project — limited blast radius

22

Support & Monitoring

How We Know When Something Goes Wrong

Error Tracking

Sentry integration in the app & backend
Real-time alerts when errors spike
Full stack trace — pinpoints exact line of failure

Proactive Monitoring

Automated smoke tests — daily DOM structure check on Shoptet
Uptime monitoring — API health check every 5 minutes
Nova Post widget versioning — monitor for new versions, verify compatibility on each update

Merchant-Side Visibility

App shows clear status per order (success / error / retry)
Auto-update — the app installs the latest build automatically
Setup wizard validates configuration step by step

Layer	Tool	Detection Time	Response
Backend API	Uptime monitor + Sentry	Minutes	Auto-alert → immediate investigation
Biatec Connector (Admin)	Sentry error tracking	Minutes	Error report with context → targeted fix
Widget (Checkout)	Sentry + smoke test	Hours (daily check)	DOM change detected → fix deployed same day
Shoptet DOM change	Automated smoke test	Within 24 hours	Proactive fix before merchants notice

23

Platform Compliance & Shoptet Relationship

Using Standard Platform Features, Not Workarounds

Current Approach

Widget uses Shoptet's built-in HTML code feature — official, documented functionality
Same mechanism used by Google Analytics, Hotjar, chat widgets, and hundreds of integrations
Merchant controls their own admin — the app is a desktop productivity tool

Risk Mitigation

Official Shoptet API integration path available — zero platform friction
The app is a convenience layer, not a dependency
If Shoptet changes policy, merchant switches to API-based flow — no service interruption

Nova Post Protection

Biatec is the integration partner — not Nova Post
All legal and technical responsibility sits with Biatec
Nova Post's brand and reputation are never at risk

Concern	Our Position
Bypassing Shoptet's marketplace?	We use the same HTML code injection that Shoptet provides to all merchants — it's a standard feature, not a bypass
What if Shoptet sends a C&D?	Biatec absorbs any legal responsibility. Migration to official Shoptet API is ready as a fallback — seamless transition
Could this damage Nova Post?	Nova Post is the carrier, not the integrator. Biatec is the contractual partner — Nova Post's brand stays clean
Long-term sustainability?	API integration (roadmap) eliminates any platform dependency — the desktop app is a fast-start tool, not the endgame

Key message: We don't bypass Shoptet — we use standard platform features available to every merchant.

Key message: We don't depend on any single channel — we have alternative solutions ready for any scenario.

24

What If Shoptet Blocks Our Integration?

Contingency Plan for Every Technical Restriction

Scenario	Likelihood	Impact	Our Response
Shoptet blocks our domain	Low — Shoptet would have to target us specifically	Checkout widget stops loading	Negotiate with Shoptet. Ask merchants to request Shoptet to allow the widget.
Shoptet adds strict CSP	Very low — would break Google Analytics, Hotjar, and thousands of eshops	External scripts & iframes blocked on checkout — branch picker won't load	Disable branch delivery, keep address-only. Or: link to external branch picker, customer enters branch ID manually. Merchants lobby Shoptet to whitelist Nova Post widget.
Shoptet removes HTML code feature	Very low — core feature used by majority of merchants	No place to inject widget loader	The app injects the widget directly — or switch to API integration
Shoptet tries to block the app	Near zero — the app embeds its own Chromium, indistinguishable from a normal browser session	App cannot modify admin pages	Dashboard CSV import + API integration — fully independent of Shoptet frontend

CSP Workarounds

Admin side still works — the app embeds its own Chromium, unaffected by page CSP
Checkout: fallback to address-only delivery or external branch picker link
Merchants request Shoptet to whitelist Nova Post widget domain

Domain Independence

Widget is a static JS file — can be hosted on any domain or CDN
Domain switch requires only updating the loader snippet — no code changes

Nuclear Option

If all browser-side approaches fail, API integration runs entirely server-to-server
Shoptet has zero control over what happens outside their platform
Near-zero risk that Shoptet would block the checkout branch picker widget — it would hurt their own merchants

25

Biatec Connector vs Shoptet API — Summary

Both paths use the same checkout widget for branch selection on the frontend

Biatec Connector — Desktop App (primary)

Advantages:

Proven solution — validated in production
Everything in one place — merchant works over Shoptet admin
No paid Shoptet API required
Distributed directly — no app-store approval
Same-hour updates & direct local label printing

Disadvantages:

Sensitive to Shoptet DOM changes (1–2x per year) — but fixed the same hour
One-time desktop install (~120 MB) per operator
PDFs archived locally, not stored in Shoptet

Typical Client:

Low to mid-volume Nova Post shipments
Small / medium eshop without Shoptet API

Shoptet API Integration (high-volume)

Advantages:

Standard API integration — robust and maintainable
Resilient to Shoptet DOM changes
No desktop install — runs server-side
Faster deployment for first clients (~5 days)
Optional: temporary PDF storage for labels & customs documents
Extensible: customs declarations, automated HS code suggestions

Disadvantages:

Merchant uses a separate application for shipments
Requires paid Shoptet API

Typical Client:

Higher-volume Nova Post shipments
Larger eshop with Shoptet API
Tariff: Shoptet Premium, from 12 000 CZK / month

Available in Both Paths

Garix.eu sanction list check
COD transaction exports for accounting software (SK & CZ)