Privacy Policy
Last updated: 2026-05-13
Draft for legal review. The text below covers the points required by Czech law (Act 89/2012 Sb., 634/1992 Sb., GDPR) and by payment gateway operators. Please have it reviewed by counsel before go-live.
This policy describes how we process personal data of customers and website visitors as a controller within the meaning of Regulation (EU) 2016/679 (GDPR).
Data controller
The controller is the operator of this online store identified in the footer below. You can reach the controller at the contact e-mail and phone shown on the Customer service page.
What personal data we process
Identification and contact data (name, address, e-mail, phone), order data (items, price, delivery details), payment data limited to a transaction reference (full card numbers are processed by the payment gateway, not by us), and technical data from your browser (IP address, device, cookies necessary for the operation of the cart).
Purposes and legal basis
Order fulfilment and customer account (Art. 6(1)(b) GDPR — performance of a contract); accounting and tax obligations (Art. 6(1)(c) GDPR — legal obligation); customer service and resolving complaints (Art. 6(1)(b) and (c) GDPR); marketing communication only with your separate, freely withdrawable consent (Art. 6(1)(a) GDPR).
Recipients and processors
We share data only with processors needed to deliver your order: the carrier you select at checkout, the payment gateway (e.g. Comgate Payments, a.s.), our hosting and e-mail provider, and accounting service providers. We do not transfer your personal data outside the EU/EEA unless required and protected by Standard Contractual Clauses.
Retention period
Order data: 10 years from the end of the accounting period (Act 235/2004 Sb., on VAT, and Act 563/1991 Sb., on accounting). Customer account data: until the account is deleted. Marketing consent data: until withdrawal of consent or 3 years of inactivity, whichever comes first.
Your rights
You have the right to access your data, correct or erase them, restrict or object to processing, withdraw consent at any time, and request data portability. You can also lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz).
Cookies
We use only cookies strictly necessary for the operation of the cart, checkout and language selection. Analytics or advertising cookies, if any are added later, will be activated only after you give consent in the cookie banner.