PRIVACY POLICY

1. Data Controller

Van Phuong Nguyen, a sole trader, Company Registration Number: 22588914, place of business: Budečská 1028/16, 120 00 Prague 2, Czech Republic (hereinafter referred to as the “Controller” or “MarketBudečská”), operating the online shop www.marketbudecska.cz.
Contact email: marketbudecska@seznam.cz
Contact telephone number: +420 774 527 888

Given the scope and nature of the processing, the Controller is not obliged under the GDPR to appoint a Data Protection Officer (DPO); please contact the email address above for all matters relating to the processing of personal data.

2. What personal data do we process

- identification data: first name and surname;
- contact details: telephone number, email address, delivery address;
- customer account login details;
- order details: order history, goods ordered, price, method of payment and delivery;
- data required to verify age for age-restricted goods;
- technical data relating to visits to the website (IP address, device and browser type, cookies – see Article 7).

We do not process special categories of personal data (e.g. health-related data).

3. From which sources do we obtain personal data

We obtain personal data primarily directly from you – when you create a customer account, place an order or communicate with us. We may receive supplementary data (e.g. payment confirmation) from a payment service provider, if one is used.

4. Purposes and legal basis for processing

a) processing and delivering orders, communicating with customers, handling complaints – performance of the contract of sale (Article 6(1)(b) of the GDPR);
b) maintaining a customer account – performance of a contract (Article 6(1)(b) of the GDPR);
c) compliance with the Controller’s legal obligations, in particular the maintenance of accounts and tax records – compliance with a legal obligation (Article 6(1)(c) of the GDPR);
d) age verification when selling age-restricted goods – compliance with a legal obligation and the Controller’s legitimate interest (Article 6(1)(c) and (f) of the GDPR);
e) protection of legal claims and internal record-keeping of orders – the Controller’s legitimate interest (Article 6(1)(f) of the GDPR);

5. Retention period for personal data

- Order details and tax documents: 10 years from the end of the tax period, in accordance with the Accounting Act and the VAT Act.
- Contact details and order data for the purposes of protecting legal claims: for the duration of the general limitation period of 3 years and for one year following its expiry.
- Customer account data: for the duration of the account’s existence, which may be closed at any time upon request sent to marketbudecska@seznam.cz.
- Data processed on the basis of consent (e.g. marketing communications): until consent is withdrawn.

6. To whom we disclose personal data

Personal data may be disclosed to:
- to parties responsible for delivering orders (couriers);
- to payment service providers, where payment is made by means other than cash: ČSOB Bank.
- to an accountant/tax adviser, or to public authorities where required by law.

We do not transfer personal data to countries outside the European Economic Area.

7. Cookies and tracking technologies

The website uses cookies that are necessary for the basic functionality of the site (e.g. storing the contents of the shopping basket, logging in), based on the Controller’s legitimate interest – these cookies do not require consent.

"The website also uses cookies to measure traffic and display targeted advertising via the following tools: Google Analytics and Meta Pixel. These cookies are used only with your consent, which you give via the cookie banner on your first visit to the website and which you may withdraw at any time via the website’s cookie settings or your browser settings.”

8. Your rights

You have the right:
- to access your personal data (Article 15 of the GDPR);
- to have inaccurate data rectified (Article 16 of the GDPR);
- to have your personal data erased where the conditions set out in Article 17 of the GDPR are met;
- to restrict processing (Article 18 of the GDPR);
- to data portability (Article 20 of the GDPR);
- to object to processing based on legitimate interests (Article 21 of the GDPR);
- to withdraw consent at any time, without affecting the lawfulness of processing prior to such withdrawal;
- to lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

We will process your request without undue delay, at the latest within one month of receipt; in exceptional cases, this period may be extended by a further two months, in which case you will be informed.

You can exercise your rights by emailing marketbudecska@seznam.cz.

9. Security of personal data

The Data Controller has adopted appropriate technical and organisational measures to ensure an adequate level of personal data security. Access to the data is restricted to those persons who need it for the performance of their work duties.

10. Final provisions

This Privacy Policy may be updated from time to time. The current version is always available at www.marketbudecska.cz.

This Policy is valid and effective from 26 July 2026