Privacy Policy

This Privacy Policy page explains about your personal data protection.

I. Basic provisions

1. Personal data controllerThe personal data controller pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) is Peter Janata, ID No.: 22495061, with its registered office at Žerotín 88, 440 01 Žerotín, Czech Republic (hereinafter referred to as the "Controller").

2. Contact details of the controllerE-mail:
Phone:

3. What is personal data?Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

4. Data Protection OfficerThe controller is not required to appoint a data protection officer.

II. Sources and categories of personal data processed

1. Sources of personal data

The controller processes personal data that:

  • is provided by the data subject (e.g. when placing an order, filling out a form, communicating by email),
  • is generated when using the website (cookies, IP address, data on web behavior).

2. Categories of personal data processed

The personal data processed may include, in particular:

  • first and last name,
  • delivery address,
  • e-mail address,
  • telephone number,
  • billing information,
  • IP address, and web behavior data (cookies).

Certain personal data, such as the customers name, delivery address and contact details, may be necessary for the conclusion and performance of the contract. The specific data required depends on the selected payment and delivery method. Other data, such as IP address, cookies and website usage data, may be processed on a different legal basis as described in this Privacy Policy.

Where personal data is required for the processing and delivery of an order, failure to provide the required data may prevent the Controller from concluding or performing the contract. Data processed for optional analytics or marketing purposes is provided voluntarily and may be withdrawn at any time where the legal basis is consent.

III. Legal basis and purpose of personal data processing

1. Legal basis for processing:

  • performance of a contract (order fulfillment),
  • compliance with legal obligations (in particular accounting and tax obligations),
  • legitimate interests of the controller (protection of legal claims),
  • consent of the data subject (where consent is required, including certain cookies and marketing activities).

2. Purpose of personal data processing:

  • order processing and delivery,
  • communication with the customer,
  • accounting,
  • improvement of the website and marketing activities,
  • protection of the controller's legal claims.

3. Automated decision-making

The controller does not perform automated individual decision-making pursuant to Article 22 of the GDPR.

IV. Cookies and analytics tools

This website uses cookies.

Types of cookies:

  • Technical cookies – necessary for the proper functioning of the website
  • Analytical cookies – Google Analytics (traffic measurement)

Analytical and marketing cookies and similar technologies are used only with the user's consent where consent is required by applicable law.

Tools used:

  • Google Analytics: used to analyse website traffic and usage.
  • Google Tag Manager: used to manage and deploy website tags and scripts.

V. Retention period for personal data

Personal data is retained only for as long as necessary for the relevant purpose, taking into account applicable legal obligations and the protection of the Controller's legal claims. In particular:

  • Order and customer data: for the duration of the contractual relationship and for the period necessary to exercise or defend legal claims.
  • Accounting and tax records: for the period required by applicable accounting and tax legislation.
  • Complaint and dispute records: for the period necessary to resolve the complaint or dispute and protect the Controller's legal claims.
  • Marketing data: until consent is withdrawn or the data subject objects to the processing, where applicable.
  • Analytics and cookie data: according to the retention periods applicable to the respective service and cookie settings.

After the applicable retention period, personal data is deleted or otherwise securely disposed of, subject to any legal obligations or legitimate reasons for further retention.

VI. Recipients of personal data

Personal data may be disclosed to the following recipients and service providers, depending on the purpose and circumstances of the processing:

  • Carriers: Česká pošta, s. p., ID No.: 47114983; Zásilkovna s.r.o., ID No.: 28408306; PPL CZ s.r.o., ID No.: 25194798.
  • Payment services: Air Bank a.s., ID No.: 29045371; PayPal (Europe) S.à r.l. et Cie, S.C.A., based in Luxembourg.
  • Billing system: iDoklad, Seyfor a. s., ID No.: 01572377.
  • Hosting and server: Váš Hosting s.r.o., ID No.: 24742252.
  • Address autocomplete: Address information entered by the customer may be transmitted to Geoapify (Keptango Ltd.), registered in Cyprus, to provide address search and autocomplete functionality.
  • Form Protection: Cloudflare Turnstile, provided by Cloudflare, Inc., is used to protect forms and the website against spam, automated abuse and malicious activity.
  • Social networks: Facebook and Instagram operated by Meta Platforms Ireland Limited, based in Ireland, ID No.: 462932.
  • Analytical and marketing services: Google Ireland Limited, based in Ireland, ID No.: 368047.

Where personal data is transferred to recipients in countries outside the European Economic Area, such transfers are carried out in accordance with Chapter V of the GDPR and using an applicable transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, where required.

VII. Your rights in relation to personal data protection

1. Under the GDPR, you have:

  • The right to access your personal data,
  • The right to correct inaccurate data,
  • The right to delete personal data,
  • The right to restrict processing,
  • The right to object to processing, including the right to object at any time to the processing of personal data for direct marketing purposes,
  • The right to data portability,
  • The right to withdraw consent to processing at any time.

2. If you wish to exercise your rights, you can contact the controller using the contact details provided above. If you believe that the processing of personal data is in violation of legal regulations, you have the right to file a complaint with the Office for Personal Data Protection.

VIII. Personal Data Security Conditions

1. Security measures:

  • Use of strong passwords
  • Antivirus programs
  • HTTPS encryption
  • Regular backups

2. Only authorized persons have access to personal data.

IX. Final provisions

1. This Privacy Policy provides information about how the Controller processes personal data. The processing of personal data necessary for the performance of a contract or compliance with legal obligations does not require the consent of the data subject.

2. The controller reserves the right to update this policy. The current version is always available on the website.

3. This policy takes effect on 21.1.2025

4. This policy was last updated on 12.8.2026