Privacy Policy

The controller of personal data under Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (the “GDPR”) is Erik Dvořák, Company ID No. 05614805, with registered office at Papoušková 1344, 252 42 Jesenice, Czech Republic (the “Controller”).

Contact details

• Address: Papoušková 1344, 252 42 Jesenice, Czech Republic
• Email: dvorak@ruzemichael.cz
• Telephone: +420 739 272 229

The Controller has not appointed a data protection officer.

The Controller processes personal data provided by the Buyer or obtained in connection with an order for goods.

Personal data processed

• identification and contact details;
• information required for performance of the agreement.

Legal basis for processing

• performance of the agreement between the Buyer and the Controller under Article 6(1)(b) GDPR;
• the Controller’s legitimate interests under Article 6(1)(f) GDPR, including direct marketing;
• the Buyer’s consent under Article 6(1)(a) GDPR.

Purposes of processing

• processing the order and performing the agreement;
• sending commercial communications and newsletters.

The Controller does not carry out automated individual decision-making within the meaning of Article 22 GDPR.

Retention periods

• for the period necessary to perform the agreement and exercise rights arising from it, but no longer than 10 years after the contractual relationship ends;
• or until consent to processing for marketing purposes is withdrawn, but no longer than 5 years.

After these periods expire, the data will be deleted.

Recipients of personal data

• carriers and delivery providers;
• the online-store provider, Shoptet;
• providers of marketing and email services, for example Mailchimp and Google Workspace.

Where personal data is transferred outside the European Union, appropriate safeguards will be ensured in accordance with Chapters V and VI GDPR.

Your rights

The Buyer has the right to:

• access personal data under Article 15 GDPR;
• rectification under Article 16 GDPR;
• erasure under Article 17 GDPR;
• restriction of processing under Article 18 GDPR;
• data portability under Article 20 GDPR;
• object to processing under Article 21 GDPR;
• withdraw consent at any time.

The Buyer also has the right to lodge a complaint with the Czech Office for Personal Data Protection at uoou.gov.cz.

The Controller has adopted technical and organisational measures to protect personal data, including strong passwords, encryption, antivirus protection and secure storage. Access to personal data is limited to authorised persons.

By submitting an order, the Buyer confirms that they have read this Privacy Policy.

The Controller reserves the right to amend this Privacy Policy. A new version will be published on the website and, where appropriate, the Buyer will be informed by email.

This Privacy Policy is valid and effective from 14 April 2025.