Privacy policy

English translation; the Czech version prevails.

This policy describes how the ELAJEDIOVA online shop processes personal data under Regulation (EU) 2016/679 (GDPR).

Controller

Eliška Kacvinský Judová, Company ID (IČO) 03554571, registered address Černomořská 645/6, 101 00 Prague 10 – Vršovice, Czech Republic, sole trader registered in the Trade Register, not a VAT payer. Contact for personal data questions: elajediova@gmail.com, +420 775 363 559.

What data I process and why

• Handling your order (performance of a contract, Art. 6(1)(b) GDPR): name, e-mail, phone, delivery address or chosen pickup point, order contents, order note and payment details (the result and ID of the payment; I never see card numbers).
• Accounting and taxes (legal obligation, Art. 6(1)(c)): invoices and order records.
• Claims and legal disputes (legitimate interest, Art. 6(1)(f)): order data and our correspondence.
• Security and running the website (legitimate interest): technical access logs and protection of the checkout against abuse.
• Visit statistics (legitimate interest): the website counts visits itself without cookies; IP addresses are not stored, only a one-day anonymous fingerprint deleted within two days.

I do not send newsletters. If I ever wanted to, I would ask for your separate consent first.

Who receives the data

• Stripe Payments Europe, Ltd. (Ireland) – card, Apple Pay and Google Pay payments.
• Zásilkovna s.r.o. (Prague) – delivery to a pickup point: name, e-mail, phone, pickup point.
• GLS General Logistics Systems Czech Republic s.r.o. – courier delivery: name, address, e-mail, phone.
• WEDOS Internet, a.s. (Czech Republic) – website and database hosting.
• Google Ireland Limited – e-mail (Gmail).
• An accountant or tax advisor and public authorities where the law requires it.

Stripe and Google may transfer data to the USA under the EU–US Data Privacy Framework or standard contractual clauses.

How long I keep data

• Orders and invoices for the period required by tax and accounting law, at most 10 years from the end of the year in which the order was paid.
• Correspondence about claims and disputes for the limitation periods (usually 4 years from delivery).
• Unpaid and cancelled orders for at most 1 year.

Cookies

The website uses only necessary cookies: a session (cart contents, admin login) and a form security token. During payment, Stripe may use its own necessary cookies to prevent fraud. No advertising or analytics cookies are used, so no cookie consent is needed.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest – just write to elajediova@gmail.com. You may also lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, https://uoou.gov.cz.

Valid from 23 October 2026.