Privacy Policy

I. Basic Provisions

The data controller within the meaning of Article 4(7) of the Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter "GDPR") is Jana Neuhoferová, Company ID: 21333211, with registered office at V.P.Čkalova 387/7, Prague 6, 16000.

The contact details of the controller are:

Personal data means any information relating to an identified or identifiable natural person. An identifiable person is a natural person who can be identified, directly or indirectly, based on an identifier such as a name, identification number, location data, or one or more elements specific to their physical, mental, economic, cultural, or social identity.

The controller has not appointed a data protection officer.

II. Sources and Categories of Processed Personal Data

The controller processes personal data that you have provided directly or that was obtained in connection with fulfilling your order. Typically, this includes identification and contact data necessary for concluding and fulfilling the contract.

III. Legal Basis and Purpose of Processing

The legal basis for processing personal data is:


  • performance of the contract between you and the controller pursuant to Article 6(1)(b) GDPR,

  • the legitimate interest of the controller in providing direct marketing pursuant to Article 6(1)(f) GDPR,

  • your consent to the processing of personal data for direct marketing purposes pursuant to Article 6(1)(a) GDPR, if no goods or services were ordered.

The purpose of processing personal data is:


  • to process your order, including delivery of goods and fulfillment of rights and obligations arising from the contractual relationship,

  • sending commercial communications and newsletters.

The controller does not engage in automated decision-making within the meaning of Article 22 GDPR.

IV. Data Retention Period

The controller retains personal data for the period necessary to exercise rights and obligations arising from the contractual relationship and for 15 years after its termination. In the case of consent given for marketing purposes, data will be retained until this consent is withdrawn.

After the relevant period expires, personal data will be securely deleted.

V. Recipients of Personal Data

Recipients of personal data may include persons involved in delivering goods, processing payments, operating the e-shop, or providing marketing services.

In some cases, the controller intends to transfer personal data to a third country (outside the EU) – for example, to providers of mailing and cloud services such as Google or Meta.

VI. Your Rights

Under the conditions set out in the GDPR, you have the right to:


  • access your personal data pursuant to Article 15 GDPR,

  • rectify or complete data pursuant to Article 16 GDPR,

  • erase personal data pursuant to Article 17 GDPR,

  • restrict processing pursuant to Article 18 GDPR,

  • data portability pursuant to Article 20 GDPR,

  • object to processing pursuant to Article 21 GDPR,

  • withdraw consent to data processing,

  • file a complaint with the Office for Personal Data Protection.

VII. Security of Personal Data

The controller has adopted all appropriate technical and organizational measures to secure personal data. Personal data are protected against loss, destruction, alteration, and unauthorized access. Only authorized persons have access to them.

VIII. Final Provisions

By submitting an order through the e-shop, you confirm that you have read these terms and accept them in full.

The controller reserves the right to modify these terms at any time. The new version will be published on the controller’s website.

These terms take effect on August 1, 2025.