GDPR

Privacy policy

Below you will find information about how we process personal data when you visit the website, send a request or shop in the e-shop.

Updated: 24 June 2026

Personal data controller

The personal data controller is Michal Gratcl, Company ID: 69751587, with registered office at Kounicova 293/61, Brno, 602 00. Zlato v Praze branch: Opletalova 1013/59, Galerie Graciano, Prague 1, 110 00.

For questions about personal data processing, contact us at [email protected] or by phone at +420 725 142 519.

Processing purposes

What data we process and why

We process personal data only to the extent necessary for a specific purpose. If processing is based on consent, you can withdraw it at any time.

Request handling and communication

Data
Name, surname, e-mail, phone number, message content, photos or attachments that you send us yourself.
Purpose
Contacting the customer, indicative item valuation, arranging a store visit or answering a question.
Legal basis
Pre-contractual negotiations and legitimate interest in handling the request.
Retention period
For the time needed to handle the request and then for a reasonable period to protect legal claims.

Orders and sale of goods

Data
Identification and contact details, delivery and billing details, order, payment and shipping data.
Purpose
Conclusion and fulfilment of the purchase contract, goods delivery, payment, customer communication and complaints.
Legal basis
Contract fulfilment and fulfilment of legal obligations, especially accounting and tax obligations.
Retention period
For the duration of the contractual relationship and then for the period required by law.

Accounting, taxes and legal obligations

Data
Data included on tax documents, orders, complaints and related business documentation.
Purpose
Keeping accounts, meeting tax obligations and proving compliance with legal obligations.
Legal basis
Fulfilment of a legal obligation.
Retention period
For the period set by applicable legal regulations.

Newsletter subscription

Data
E-mail address and possibly name, if you provide it to us for this purpose.
Purpose
Sending news, commercial communications and offer information.
Legal basis
Consent, which you can withdraw at any time.
Retention period
Until consent is withdrawn or you unsubscribe.

Cookies and traffic measurement

Data
Cookie identifiers, consent settings, technical website visit data and website behaviour data if you allow analytics or marketing.
Purpose
Website operation, consent management, traffic measurement and possible campaign evaluation.
Legal basis
For necessary cookies, legitimate interest in operating the website; for analytics and marketing cookies, consent.
Retention period
According to cookie type; details are in the cookie policy.
Data sharing

Who may access the data

We do not provide data to third parties for their own marketing. Only suppliers and partners who help us operate the website, communicate, process orders or comply with legal obligations may have access.

Categories of recipients

Typically these include providers of web hosting and technical website administration, e-mail and communication services, carriers, payment services, accountants, tax and legal advisers, or public authorities where required by law.

Security

We limit access to personal data to what is necessary and use appropriate technical and organisational measures to prevent unauthorised access, loss or misuse of data.

Your rights

  • the right of access to personal data
  • the right to rectify inaccurate data
  • the right to erasure if legal conditions are met
  • the right to restrict processing
  • the right to object to processing based on legitimate interest
  • the right to data portability
  • the right to withdraw consent if processing is based on consent
  • the right to lodge a complaint with the Czech Office for Personal Data Protection

How to exercise your rights

Write to us at [email protected]. We will process your request within the statutory period. If you believe that we process data contrary to legal regulations, you may also contact the Czech Office for Personal Data Protection.