Privacy Policy

 

I. Basic Provisions

1. The controller of personal data within the meaning of Art. 4(7) of Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") is Kateřina Kolářová, Company ID: 01968947, registered office at Zdeňka Štěpánka 1785/5, 70800 Ostrava-Poruba, Czech Republic (hereinafter the "Controller").

2. Contact details of the Controller: Email: info@miolka.cz, Phone: +420 704 513 220, mailing address: see Controller’s registered office.

3. Personal data means any information about an identified or identifiable natural person.

II. What Data We Process and Where We Obtain It

1. We process in particular the following categories of data: identification data (name, surname), contact data (email, phone, address), order and payment data (variable symbol, amount, payment method), delivery data, customer account and communication data, technical data from website use (IP address, cookies – see Section X).

2. We obtain data directly from you when you make a purchase, register, or communicate with us, or from payment and delivery providers to the extent necessary to deliver goods.

III. Purposes and Legal Bases of Processing

• Performance of a contract (Art. 6(1)(b) GDPR): receiving and processing orders, communication, delivery, management of customer accounts.
• Compliance with legal obligations (Art. 6(1)(c) GDPR): accounting and tax records (archiving of documents), handling complaints and warranty claims.
• Legitimate interests (Art. 6(1)(f) GDPR): protection of rights and claims, website security and fraud prevention, direct marketing of our own products to existing customers (sending commercial communications with an option to unsubscribe at any time), customer satisfaction surveys within the Verified by Customers program (Heureka).
• Consent (Art. 6(1)(a) GDPR): sending newsletters to individuals who have not purchased from us, and the use of analytical/marketing cookies – consent can be withdrawn at any time.

Note: You can unsubscribe from the newsletter at any time by clicking the link in the email or by contacting us at info@miolka.cz.

IV. Recipients of Personal Data

• Carriers and delivery networks (e.g. Packeta/Zásilkovna, Czech Post, Slovak Post, PPL, DPD, GLS) – delivery of parcels.
• Payment gateway provider (online card payments, Google Pay, Apple Pay). The Controller does not store or otherwise process full payment card numbers; these are processed by the payment service provider.
• E-shop platform provider (e.g. Shoptet) and hosting/IT administrators – technical operation of the website.
• Accountant/tax advisor – bookkeeping.
• Heureka (Verified by Customers program) – sending a satisfaction survey after purchase based on our legitimate interest.
• Emailing tools (if used for newsletters) – only with your consent or under legitimate interest as provided by law.

V. Data Transfers to Third Countries

We do not transfer personal data outside the EU/EEA. If such a transfer is necessary, it will only take place subject to appropriate safeguards under Chapter V of the GDPR (e.g. standard contractual clauses).

VI. Data Retention Periods

• Accounting and tax documents: 10 years from the end of the accounting period concerned.
• Contracts/orders and related communication: 3 years from the last contractual interaction (or longer if necessary to defend legal claims).
• Complaints: 3 years after the complaint procedure ends.
• Customer account: for the duration of the account and 3 years after its closure.
• Marketing (newsletter): until consent is withdrawn/unsubscribed, maximum 3 years from the last interaction.
• Cookies: according to the settings and periods specified in the cookie banner (see Section X).

VII. How We Protect Your Data

We use technical and organizational measures appropriate to the risks: encrypted transmission (HTTPS), access control and logging, regular system updates, backups, and secure storage of physical documents. Only authorized persons have access to the data to the extent necessary.

VIII. Automated Decision-Making

The Controller does not carry out automated individual decision-making or profiling within the meaning of Art. 22 GDPR. Any basic segmentation of newsletters (e.g. by type of purchase) has no legal effects on data subjects.

IX. Your Rights

• Right of access to personal data (Art. 15 GDPR),
• Right to rectification (Art. 16) and erasure (Art. 17),
• Right to restriction of processing (Art. 18),
• Right to data portability (Art. 20),
• Right to object to processing, in particular direct marketing (Art. 21),
• Right to withdraw consent at any time (if consent is the legal basis).

You can exercise your rights by contacting us at info@miolka.cz. We usually respond within 1 month. You also have the right to lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

X. Cookies

We use essential cookies for the functioning of our website. Analytical and marketing cookies are used only based on your consent given in the cookie banner, where you can also find details and change your preferences at any time. Cookie settings can also be adjusted in your browser.

XI. Satisfaction Surveys (Heureka)

We monitor your satisfaction through email surveys within the Verified by Customers program. The survey is sent after purchase based on our legitimate interest. You can object to receiving surveys at any time via the link provided in the email.

XII. Final Provisions

This policy may be updated. The current version will always be published on our website. In case of significant changes, we will reasonably notify you (e.g. by email for registered users).

These privacy policy terms take effect on 1 September 2025.