Privacy Policy

1. Personal Data Controller

The controller of personal data is:

IČO: 21769605
Address: Bezručova 4201
430 03 Chomutov
Czech Republic
Email: main@czechpeptide.com or info@czechpeptide.com

2. What Data We Collect

We may collect personal data such as:

  • We may collect the following personal data:
  • name and surname
  • billing and shipping address
  • email address
  • phone number
  • order details (items ordered, order value, order history)
  • IP address and cookie/analytics identifiers (via Google Analytics — see Section 6)
  • This data is collected only for the purposes described in Section 3.

This information is collected only for the purpose of processing orders and communicating with customers.

3. Purpose of Data Processing

Personal data are processed for:

  • We process personal data for the following purposes, each with its own legal basis under Art. 6(1) GDPR:
    Purpose
    Legal basis
    Order processing and delivery via Packeta (Zásilkovna) or other carriers
    Performance of a contract (Art. 6(1)(b))
    Customer communication regarding your order
    Performance of a contract (Art. 6(1)(b))
    Accounting and tax records
    Legal obligation (Art. 6(1)(c))
    Website analytics (Google Analytics)
    Your consent (Art. 6(1)(a))
    Responding to your requests (e.g. data deletion, complaints)
    Legal obligation / legitimate interest (Art. 6(1)(c)/(f))

4. Data Retention

Order and contract data: kept for the duration of the contractual relationship, plus the statutory limitation period for civil claims. Accounting and tax documents: retained per Czech law — generally 10 years for accounting records (Act No. 563/1991 Coll., on Accounting) and 10 years for tax purposes (Act No. 235/2004 Coll., on VAT), where applicable. I’m not fully certain these figures apply exactly to your situation — please verify current retention periods with your accountant, as thresholds can depend on document type.Analytics data (Google Analytics): retained per your GA account’s data retention settings (Google’s default is commonly 14 or 26 months, configurable) — verify and state your actual configured setting here. Marketing/communication data: only if you separately collect this and only until consent is withdrawn.

5. Cookies

This website uses two categories of cookies:

a) Strictly necessary cookies Required for core website and WooCommerce shopping-cart functionality (e.g. maintaining your cart contents, session state). These do not require consent and do not store personal information beyond what’s needed for the site to function.

b) Analytics cookies (Google Analytics) We use Google Analytics to understand how visitors use our website (pages visited, time on site, general location). These cookies are not strictly necessary and are only set with your prior consent, given via the cookie banner when you first visit the site. You can withdraw your consent at any time by [adjusting your cookie settings via the banner / link to cookie settings tool].

Data collected via Google Analytics may be transferred to Google LLC in the United States. [State here which safeguard applies to your setup — e.g. Google’s certification under the EU-U.S. Data Privacy Framework, or Standard Contractual Clauses. I don’t have visibility into your actual Google Analytics configuration, so please confirm this with your GA admin settings or Google’s current documentation before publishing.]

You can disable cookies generally through your browser settings, though this may affect website functionality.

6. Third-Party Services

Your personal data may be shared with the following categories of recipients, strictly as needed to fulfill your order or our legal obligations:

  • Delivery/logistics providers — e.g. Packeta (Zásilkovna) s.r.o., for order delivery
  • Payment processors — [name your actual payment gateway, e.g. Shoptet Pay, GoPay, Stripe, etc.]
  • Accounting/bookkeeping service or software provider — [name if applicable]
  • Web hosting and IT service providers
  • Google Ireland Limited / Google LLC — for Google Analytics (see Section 6)

We do not sell your personal data to third parties.

7. Data Protection Rights

Under the GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Rectify inaccurate data (Art. 16)
  • Erase your data (“right to be forgotten”) (Art. 17) — see Section 5
  • Restrict processing under certain conditions (Art. 18)
  • Data portability — receive your data in a structured, machine-readable format (Art. 20)
  • Object to processing based on legitimate interest (Art. 21)
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3)) — relevant for Google Analytics
  • Lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ) Pplk. Sochora 27, 170 00 Praha 7 www.uoou.cz

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

8. Contact

If you have any questions regarding personal data protection, please contact us at:

Email: info@czechpeptide.com

9. Your Right to Request Deletion

You may request deletion of your personal data at any time by contacting us at [contact email]. We will delete your data unless we are required to retain it to comply with a legal obligation (e.g. accounting/tax law) or to establish, exercise, or defend legal claims — in which case we will inform you of the reason we cannot delete it immediately.

Shopping Cart
Scroll to Top