Effective from 1 October 2026.
1. Controller
Správcem osobních údajů je Anežka Buriánková, IČO 08490414, Ivana Olbrachta 668, 513 01 Semily, e-mail [email protected] (dále „správce“). Osobní údaje zpracováváme v souladu s nařízením (EU) 2016/679 (GDPR) a zákonem č. 110/2019 Sb.
2. What data, why and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Processing orders, delivery, communication | name, address, e-mail, phone, order contents, payment details | performance of a contract (Art. 6(1)(b) GDPR) | for the duration of the contract and the limitation period, at most 4 years |
| Accounting and taxes | data on accounting documents | legal obligation (Art. 6(1)(c) GDPR) | 10 years |
| Complaints and legal claims | order and communication data | legitimate interest (Art. 6(1)(f) GDPR) | for the limitation period |
| Product reviews | name (published with the review), e-mail, review text and rating, order number | legitimate interest (Art. 6(1)(f) GDPR) | for as long as the review is published |
| Review request by e-mail | e-mail, order contents | legitimate interest (Section 7(3) of Act No. 480/2004 Coll.) | one e-mail after the order is completed; you can opt out at any time by replying to the e-mail |
| Customer account (if you create one) | login details, order history | performance of a contract | until the account is deleted |
| Website security | IP address, technical logs | legitimate interest | at most 90 days |
Providing the data needed to process an order is required to conclude the contract. Without it, the order cannot be processed.
3. Who we share data with
- the carrier Zásilkovna s.r.o. (Packeta) (name, address, phone, e-mail),
- the payment gateway operator Stripe Payments Europe, Limited, Ireland (data needed to process the payment; we do not have access to card details),
- our e-mail service provider [E-MAIL PROVIDER],
- Cloudflare, Inc. (website security and delivery; data may be transferred to the USA under the EU–US Data Privacy Framework),
- our accountant / accounting software [NAME], if used,
- public authorities where required by law.
The e-shop and its database run on the controller's own server located in the Czech Republic.
4. Cookies
We only use cookies that are necessary for the e-shop to work (cart, login, security). These do not require your consent. We currently do not use analytics or advertising cookies. If we start using them, we will ask for your consent first.
5. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object to processing based on legitimate interest. Send your request to [email protected]; we will respond within one month. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.