PRIVACY POLICY

1. Personal Data Controller

The personal data controller is:

Ing. Radek Mička
VKUSE
tř. Svornosti 896/54
779 00 Olomouc
ID No.: 01511602

Email: info@vkuse.cz
Phone: +420 604 330 353

(hereinafter referred to as the "Controller").

The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act No. 110/2019 Coll., on Personal Data Processing, and other related legal regulations.

2. What Personal Data We Process

The Controller processes personal data provided by the customer during:

• placing an order,

• registering a customer account,

• communicating with the Controller,

• subscribing to newsletters.

This mainly includes:

• first name and surname,

• billing and delivery address,

• email address,

• phone number,

• order details,

• payment details,

• communication between the customer and the Controller,

• IP address and technical data about website visits.

3. Purposes of Personal Data Processing

We process personal data for the purpose of:

Fulfilling the Purchase Agreement

• accepting and processing orders,

• delivering goods,

• handling complaints,

• issuing accounting documents,

• communicating with the customer.

The legal basis is the performance of a contract under Article 6(1)(b) of the GDPR.

Fulfilling Legal Obligations

• accounting,

• archiving tax documents,

• fulfilling obligations under legal regulations.

The legal basis is compliance with a legal obligation under Article 6(1)(c) of the GDPR.

Legitimate Interest of the Controller

• protection of legal claims,

• complaint records,

• website security,

• basic customer support.

The legal basis is legitimate interest under Article 6(1)(f) of the GDPR.

Marketing

If the customer gives consent or if the legal condition for sending commercial communications is met, the Controller may send information about news, products, and promotions of the VKUSE brand.

Consent can be revoked at any time.

4. Period of Personal Data Retention

We retain personal data only for as long as strictly necessary.

Specifically:

• orders and accounting documents for 10 years,

• complaints for the duration of their resolution and subsequently for the period of protection of legal claims,

• customer account for the duration of its existence,

• marketing data until consent is revoked.

After the respective period, the data is securely deleted or anonymized.

5. Recipients of Personal Data

Personal data may be disclosed only to the necessary extent to the following processors:

E-shop Operation

• Shopify International Ltd.

• Shopify Inc.

Payment Services

• Shopify Payments

• payment gateway providers

• banking institutions

Carriers

• Zásilkovna s.r.o.

• PPL CZ s.r.o.

• Česká pošta, s.p.

• other carriers chosen by the customer

Marketing and Analytical Services

• Google Analytics

• Google Ads

• Meta Platforms Ireland Ltd. (Facebook and Instagram)

• Seznam.cz a.s. (Sklik)

Technical Support

• hosting providers

• website administrators

• IT suppliers

6. Transfer of Personal Data to Third Countries

Some service providers, especially Shopify, Google, or Meta, may process personal data outside the European Economic Area.

Such transfers take place exclusively in accordance with the GDPR and on the basis of appropriate safeguards for the protection of personal data.

7. Data Subject Rights

The customer has the right:

• to access their personal data,

• to rectification of inaccurate data,

• to erasure of personal data,

• to restriction of processing,

• to object to processing,

• to data portability,

• to withdraw consent to processing.

Requests can be sent to info@vkuse.cz.

8. Right to Lodge a Complaint

If the customer believes that their personal data is being processed unlawfully, they can lodge a complaint with:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7

www.uoou.gov.cz

9. Personal Data Security

The Controller has adopted appropriate technical and organizational measures to protect personal data against:

• unauthorized access,

• loss,

• misuse,

• alteration or destruction.

Access to personal data is granted only to persons authorized by the Controller.

10. Cookies

The VKUSE.cz website uses cookies and similar technologies.

Details are provided in a separate document "Cookie Policy".

11. Final Provisions

By placing an order, the customer confirms that they have familiarized themselves with this Privacy Policy.

The Controller reserves the right to amend these rules appropriately. The current version is always published on the VKUSE.cz website.

This Privacy Policy comes into effect on June 21, 2026.

In Olomouc on June 21, 2026

Ing. Radek Mička
VKUSE