Privacy policy

This notice explains how DAVID SARAY collects and uses personal data when you visit raehalostore.shop or place an order, and what rights you have. It is written to meet the General Data Protection Regulation (EU) 2016/679 and Act No. 110/2019 Sb., on the processing of personal data.

Controller

DAVID SARAY, Česká 1021/12, 434 01 Most, Czech Republic. Email info@raehalostore.shop, telephone +420 603 114 228.

What we collect

Order data: name, delivery and billing address, email address, telephone number, ordered items, order value.
Payment data: the payment method and the confirmation returned by our payment provider. Card numbers are handled by the provider and never reach our systems.
Technical data: IP address, browser type, device type, pages viewed, and the cookies described below.
Correspondence: the content of messages you send us and our replies.

Why we use it and on what legal basis

We use order and payment data to perform the contract with you (article 6(1)(b) GDPR), including delivery, returns handling and customer service. We use technical data on the basis of our legitimate interest in keeping the shop secure and working (article 6(1)(f) GDPR). Where you subscribe to our newsletter we use your email address on the basis of your consent (article 6(1)(a) GDPR), which you may withdraw at any time. We use data where necessary to comply with tax, accounting and consumer-protection obligations (article 6(1)(c) GDPR).

Who receives it

Our shop platform Shopify International Ltd processes order data on our behalf; payment providers process payments; carriers receive the delivery address and telephone number; our accountant receives invoice data. All processors act on written instructions and under data-processing agreements. We do not sell personal data.

Transfers outside the European Union

Some service providers process data outside the European Union, in particular in Canada and the United States. Transfers rely on the European Commission's adequacy decision for Canada or on standard contractual clauses together with supplementary measures.

How long we keep it

Order and invoice data are kept for ten years to meet Czech tax and accounting requirements (Act No. 563/1991 Sb., on accounting). Correspondence is kept for two years. Technical logs are kept for 30 days. Newsletter data is kept until you withdraw consent.

Your rights

You may request access to your data (article 15 GDPR), correction (article 16), deletion (article 17), restriction (article 18), data portability (article 20), and you may object to processing based on legitimate interest (article 21). To exercise any of these, email info@raehalostore.shop; we reply within one month. You may also lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, or with the authority in your own country.

Cookies

We use the cookies needed to keep your basket and session working, and, with your consent, cookies that help us understand how the shop is used. You can withdraw consent at any time through the cookie settings and can delete cookies in your browser; the basket and checkout may then stop working.