Privacy & Cookie Terms

These privacy terms follow the EU General Data Protection Regulation (GDPR), as applied in the Czech Republic where my business is registered.

The controller is subject to Czech and EU privacy laws.

I. Basic Provisions

  1. The data controller pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, “GDPR”) is Veronika Lacinová, ID No. 03172678, with registered office at Na Zacházce 1330/16, Ústí nad Labem, 400 03, Czech Republic, registered in the Trade Register maintained by the Trade Licensing Office of the City of Ústí nad Labem (hereinafter referred to as the “Controller”).
  2. Contact details of the Controller:
  3. “Personal data” refers to any information about an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
  4. The Controller has not appointed a Data Protection Officer.

 

II. Sources and categories of processed personal data

  1. The data controller processes personal data that you have provided or personal data obtained in connection with the fulfilment of your order:
    • full name
    • email address
    • mailing address
    • phone number
  2. The controller processes your identification and contact details and any data necessary for the performance of the contract.

III. Legal basis and purpose of personal data processing

  1. The legal basis for processing personal data includes: 
    • performance of a contract between you and the controller pursuant to Article 6(1)(b) of the GDPR,
    • compliance with legal obligations of the controller pursuant to Article 6(1)(c) of the GDPR,
    • legitimate interest of the controller in providing direct marketing (especially for sending commercial messages and newsletters) pursuant to Article 6(1)(f) of the GDPR,
    • your consent to processing for the purposes of direct marketing (especially for sending commercial messages and newsletters) pursuant to Article 6(1)(a) of the GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., on certain information society services, in cases where no goods or services have been ordered. 
  2. The purpose of processing personal data is:
    • to process your order and fulfil the rights and obligations arising from the contractual relationship between you and the controller; personal data is required when placing an order (name, address, contact), and without this data, it is not possible to conclude or fulfil the contract,
    • to comply with legal obligations towards the state,
    • to send commercial communications and conduct other marketing activities.
  3. The controller does not engage in automated individual decision-making within the meaning of Article 22 of the GDPR.

IV. Data retention period

  1. The controller stores personal data:
    • for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to assert claims from such contractual relationships (for a period of 15 years from the termination of the contractual relationship),
    • for the duration of the consent to the processing of personal data for marketing purposes, but no longer than 10 years if the data is processed based on consent.
  2. After the expiration of the data retention period, the controller will delete the personal data.

V. Recipients of personal data (Controller’s subcontractors)

  1. Recipients of personal data may include:
    • persons involved in the delivery of goods/services and payment processing under the contract,
    • suppliers or manufacturers of goods,
    • providers of e-shop operation and related services,
    • providers of marketing services.
  2. The controller does not intend to transfer personal data to a third country (a country outside the EU) or to an international organization.

VI. Personal data processors

  1. The processing of personal data is carried out by the controller. However, personal data may also be processed for the controller by the following processors: Providers of marketing services and others.

VII. Use of cookies

Cookies are text files containing a small amount of information that are downloaded to your device when you visit our website. These cookies are then sent back to the website or another website that recognizes them on each subsequent visit.

Cookies perform various functions, such as enabling efficient navigation between web pages, remembering your preferences, and generally improving user experience. They can also help ensure that online advertisements are more relevant to you and your interests.

On our website, we use the following types of cookies:

  • Necessary cookies: Required for the operation of the website. For example, they allow you to log into secure areas and enable basic website functionality. These cookies cannot be disabled.

  • Analytical/statistical cookies: Help us recognize and count the number of visitors and understand how visitors use our website. They help us improve the way the site works, for example, by making it easier for users to find what they’re looking for. These cookies are used only with your prior consent.

  • Marketing/advertising cookies: Used to track user preferences and display advertising and other content that better corresponds to your interests and online behavior. These cookies are used only with your prior consent.

Please note that third parties (including providers of external services) may also use cookies and/or access data collected through cookies on the website.

Cookies used:

Technical Name

Provider

Purpose/Description

Duration

Analytical cookies

Google Analytics

Analytical features – help us understand how you use the website so we can improve it

26 months

Profiling (marketing) cookies

Meta

Advertising features – help us better target advertising

1 year

Profiling (marketing) cookies

Meta

Marketing features – help improve content quality

1 year

 

You can find more information about cookies and a current list of them in your browser’s developer tools section.

Consent can be expressed by ticking a checkbox contained in the so-called cookie bar. You can later refuse cookies in your browser settings or allow only selected types.

For more information on cookie management in various browsers, visit:

VIII. Your Rights

  1. Under the conditions set out in the GDPR, you have the following rights:
    • The right to access your personal data under Article 15 of the GDPR.
    • The right to rectification of your personal data under Article 16 of the GDPR, or restriction of processing under Article 18 of the GDPR.
    • The right to erasure of your personal data under Article 17 of the GDPR.
    • The right to object to processing under Article 21 of the GDPR.
    • The right to data portability under Article 20 of the GDPR.
    • The right to withdraw consent to processing at any time, either in writing or electronically to the address or email of the Controller specified in Article III of these conditions.
  2. You also have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů) if you believe that your rights regarding personal data protection have been violated, or you may take legal action.

IX. Personal Data Security Measures

  1. The Controller declares that they have taken all appropriate technical and organizational measures to secure personal data.
  2. The Controller has implemented technical measures to secure data storage and personal data repositories in both digital and physical formats.
  3. The Controller also declares that access to personal data is granted only to authorized persons.

X. Final Provisions

  1. By submitting an order through the online order form, you confirm that you have read and fully accept these personal data protection terms.
  2. You agree to these terms by checking the consent box in the online form. By checking the box, you confirm that you have read and fully accept these personal data protection terms.
  3. The Controller reserves the right to modify these terms. The new version of the personal data protection terms will be published on the Controller’s website and also sent to your email address provided to the Controller.
  4. These terms take effect on May 24, 2025