Privacy Policy

I. Who Processes Your Personal Data

The controller of your personal data is:

Karamílek s.r.o.
Company ID No.: 03726428
Registered office: Klatovská 2308/172, 301 00 Plzeň, Czech Republic
Email: info@karamilek.cz
Website: www.karamilek.cz

(hereinafter referred to as the “Controller”).

The Controller has not appointed a Data Protection Officer.

II. What Personal Data We Process and Why

1. Orders and Performance of a Contract

When you place and we process an order, we process in particular your first and last name, billing and delivery address, email address, telephone number, information about the goods ordered, your chosen delivery and payment methods, and any other information you provide to us in connection with your order.

We process this data for the purpose of entering into and performing the purchase contract, in particular to receive and process your order, deliver the goods, receive payment and communicate with you.

The legal basis for this processing is the performance of a contract and taking steps prior to entering into a contract pursuant to Article 6(1)(b) of the GDPR.

Providing the information marked as mandatory and necessary for entering into and performing the contract is a contractual requirement. Without this information, we cannot accept and process your order.

2. Compliance with Legal Obligations

We also process certain personal data contained in accounting and tax documents because we are required by law to retain such information.

The legal basis for this processing is compliance with a legal obligation pursuant to Article 6(1)(c) of the GDPR.

3. Complaints, Enquiries and Protection of Our Rights

If you contact us with an enquiry, complaint or other request, we process the information necessary to deal with it.

We may also retain personal data to the extent necessary for the establishment, exercise or defence of our legal claims.

Depending on the circumstances, the legal basis may be the performance of a contract, compliance with a legal obligation, or our legitimate interest in the establishment, exercise and defence of legal claims pursuant to Article 6(1)(f) of the GDPR.

4. Customer Account

If you create a customer account, we process the information necessary to maintain your account and provide the functions available through it.

5. Marketing Communications

If you are our customer, we may, in accordance with applicable law, send you marketing communications concerning our own similar products. You may object to receiving such communications or unsubscribe at any time using the link provided in each marketing communication.

If you are not our customer, we will send you marketing communications only if you have given us your consent. You may withdraw this consent at any time.

Unsubscribing from marketing communications will not affect your ability to shop with us.

III. How Long We Keep Your Personal Data

We retain personal data only for as long as necessary for the purpose for which it is processed.

Data relating to an order is retained for the duration of the contractual relationship and subsequently for the period during which rights and claims relating to the contract may be exercised.

We retain accounting and tax documents for the periods required by applicable legislation.

Data necessary for maintaining a customer account is processed for as long as the account exists and thereafter only if, and to the extent that, another legal basis for further processing applies.

Data processed on the basis of consent is processed no longer than until the consent is withdrawn or until the purpose of the processing ceases to apply.

Personal data processed on the basis of legitimate interests is retained only for as long as the legitimate interest continues to exist and is not overridden by your rights and freedoms.

IV. Who We Share Personal Data With

To operate our online shop and process your orders, we use the services of other parties. We disclose personal data to them only to the extent necessary to provide the relevant service.

These include in particular:

Shoptet, which provides the technical operation of our online shop,
carriers and operators of collection points according to the delivery method you choose,
payment service providers according to your chosen payment method,
accounting and tax service providers,
IT, hosting and other technical service providers,
providers of analytics and marketing services, where applicable and where you have consented to their use if such consent is required.

We may also disclose personal data to public authorities where we are required to do so by law.

V. Transfers of Personal Data Outside the EU and EEA

Some service providers may process personal data outside the European Union or European Economic Area.

Where such transfers take place, they are carried out only in accordance with the conditions laid down by the GDPR, in particular on the basis of an adequacy decision by the European Commission or using appropriate safeguards, such as Standard Contractual Clauses.

VI. Cookies

We use cookies on www.karamilek.cz.

Necessary cookies are required for the basic operation of our online shop, for example to enable the shopping cart, login functionality or to retain website settings.

Analytics, marketing and similar non-essential cookies are used only if you have consented to their use through our cookie settings.

You can change your choices at any time through the cookie settings on our website.

More detailed information about the cookies we use, their purposes and their duration is available directly in the cookie settings.

VII. Automated Decision-Making

We do not carry out automated individual decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

VIII. Your Rights

Subject to the conditions laid down by the GDPR, you have in particular the right to:

obtain confirmation as to whether we process your personal data and access that data,
request the correction of inaccurate personal data or completion of incomplete personal data,
request the erasure of personal data where the legal requirements are met,
request restriction of processing,
object to processing based on legitimate interests,
object at any time to the processing of personal data for direct marketing purposes,
receive personal data you have provided to us in a structured, commonly used and machine-readable format and, where the legal requirements are met, transmit that data to another controller,
withdraw your consent at any time where processing is based on your consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

You can exercise your rights by contacting us at info@karamilek.cz.

We will respond to requests concerning your rights without undue delay and no later than one month after receiving the request. In complex cases, this period may be extended under the conditions laid down by the GDPR.

If you believe that we are processing your personal data in breach of applicable legislation, you have the right to lodge a complaint with the Office for Personal Data Protection of the Czech Republic.

IX. Security of Personal Data

We have implemented appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or unauthorised disclosure.

Access to personal data is limited to persons who need it to perform their employment or contractual duties, and to our processors only to the extent necessary for the provision of their services.

X. Changes to This Privacy Notice

We may update this Privacy Notice, in particular if there are changes to the way we process personal data, the services we use or applicable legislation.

The current version will always be published on this page.

Effective from 22 September 2026