Privacy Policy

This Privacy Policy explains how TOVARNA.CZ, s.r.o. (“we”, “us”) processes personal data when you use this website, place an order or contact us. Further identification is provided in the Imprint. We process data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Czech law.

1. Data controller

The controller of personal data is TOVARNA.CZ, s.r.o., Na Okraji 1947, 250 01 Brandýs nad Labem, Czech Republic, ID No. 27382745, VAT ID CZ27382745. For privacy enquiries, use the contact e-mail published on the website (see Imprint).

2. Categories of data

Depending on your interaction, we may process: identification and contact data (name, e-mail, phone, postal address), order details (ordered items, price, payment and shipping information), communication content (messages you send us), and technical data (e.g. server logs, IP address in limited scope where necessary for security or troubleshooting).

3. Purposes and legal bases

  • Processing and fulfilling your order (including payment matching, delivery, invoicing where applicable) — performance of a contract (Art. 6(1)(b) GDPR).

  • Responding to enquiries — predominantly contract or legitimate interests in communicating with interested parties (Art. 6(1)(f) GDPR), where not covered by contract.

  • Legal obligations (e.g. accounting, tax, cooperation with authorities) — legal obligation (Art. 6(1)(c) GDPR).

  • Defence of legal claims — legitimate interests (Art. 6(1)(f) GDPR).

Where we rely on consent (e.g. optional marketing, if offered separately), you may withdraw it at any time without affecting prior processing.

4. Recipients and transfers

We may share data with: payment and banking service providers (to the extent necessary to process transfers), shipping carriers, e-mail or hosting providers that process data on our behalf under appropriate agreements, and professional advisers where required. We do not sell your personal data. Transfers outside the EEA only occur with appropriate safeguards where applicable.

5. Retention

We keep order and accounting-related data for the periods required by law (typically several years under Czech accounting and tax rules). Contact and enquiry data are kept as long as needed to handle your request and then deleted or anonymised unless a longer period is justified (e.g. pending dispute).

6. Your rights

Subject to GDPR, you have the right to: access, rectification, erasure, restriction of processing, data portability (where applicable), and objection to processing based on legitimate interests. You may lodge a complaint with the supervisory authority — in the Czech Republic, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.cz).

7. Cookies and similar technologies

This site is intended to work with minimal tracking. We do not use behavioural advertising cookies. Non-essential tools such as audience measurement (e.g. Vercel Web Analytics, or Google Analytics if introduced later) are only activated after you give consent in the cookie banner on your first visit. This section will be updated if our use of cookies changes.

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration.

9. Changes

We may update this Policy; the current version is always published on this page.