GDPR

Privacy policy

Below you will find information about how we process personal data when you visit the website, send a request or shop in the e-shop.

Processing purposesCookie policy

Updated: 30 July 2026

Personal data controller

The personal data controller is Michal Gratcl, Company ID: 69751587, with registered office at Kounicova 293/61, Brno, 602 00. Zlato v Praze branch: Opletalova 1013/59, Galerie Graciano, Prague 1, 110 00.

For questions about personal data processing, contact us at [email protected] or by phone at +420 725 142 519.

Processing purposes

What data we process and why

We process personal data only to the extent necessary for a specific purpose. If processing is based on consent, you can withdraw it at any time.

Request handling and communication

Data
Name, surname, e-mail, phone number, message content, photos or attachments that you send us yourself.
Purpose
Contacting the customer, indicative item valuation, arranging a store visit or answering a question.
Legal basis
Pre-contractual negotiations and legitimate interest in handling the request.
Retention period
For the time needed to handle the request and then for a reasonable period to protect legal claims.

Orders and sale of goods

Data
Identification and contact details, delivery and billing details, order, payment and shipping data.
Purpose
Conclusion and fulfilment of the purchase contract, goods delivery, payment, customer communication and complaints.
Legal basis
Contract fulfilment and fulfilment of legal obligations, especially accounting and tax obligations.
Retention period
For the duration of the contractual relationship and then for the period required by law.

Accounting, taxes and legal obligations

Data
Data included on tax documents, orders, complaints and related business documentation.
Purpose
Keeping accounts, meeting tax obligations and proving compliance with legal obligations.
Legal basis
Fulfilment of a legal obligation.
Retention period
For the period set by applicable legal regulations.

Newsletter subscription

Data
E-mail address and possibly name, if you provide it to us for this purpose.
Purpose
Sending news, commercial communications and offer information.
Legal basis
Consent, which you can withdraw at any time.
Retention period
Until consent is withdrawn or you unsubscribe.

Cookies and traffic measurement

Data
Consent settings; for cookieless Sabemio/Umami measurement, the page path, referrer domain, permitted UTM source, medium and campaign parameters, device and language data and an anonymous session identifier; after analytics or marketing consent, the relevant cookie identifiers and website behaviour data.
Purpose
Website operation, consent management, aggregated traffic and source measurement and campaign evaluation. Campaign parameters measured by Sabemio/Umami are not attached to contact requests.
Legal basis
Legitimate interest in operating the website and in minimised cookieless traffic measurement; consent for Google Analytics, Microsoft Clarity and marketing technologies.
Retention period
Only for the period necessary to evaluate traffic trends and according to the settings of each consent-based tool; details are in the cookie policy.
Data sharing

Who may access the data

We do not provide data to third parties for their own marketing. Only suppliers and partners who help us operate the website, communicate, process orders or comply with legal obligations may have access.

Categories of recipients

Typically these include providers of web hosting and technical website administration, Sabemio as the provider of cookieless traffic analytics, e-mail and communication services, carriers, payment services, accountants, tax and legal advisers, or public authorities where required by law.

Security

We limit access to personal data to what is necessary and use appropriate technical and organisational measures to prevent unauthorised access, loss or misuse of data.

Your rights

  • the right of access to personal data
  • the right to rectify inaccurate data
  • the right to erasure if legal conditions are met
  • the right to restrict processing
  • the right to object to processing based on legitimate interest
  • the right to data portability
  • the right to withdraw consent if processing is based on consent
  • the right to lodge a complaint with the Czech Office for Personal Data Protection

How to exercise your rights

Write to us at [email protected]. We will process your request within the statutory period. If you believe that we process data contrary to legal regulations, you may also contact the Czech Office for Personal Data Protection.

ContactCookie policy