Privacy Policy

I. Data Controller

The data controller within the meaning of Regulation (EU) 2016/679 (GDPR) is Eva Černíková — PROUST, ID: 10930574, registered office [Křižíkova 53/52a, 186 00 Praha 8] (hereinafter the "controller").

Controller's contact email: eva@proust.cz.

II. Scope of Processed Data

The controller processes the following personal data provided by the buyer in the course of placing an order:

• full name
• email address
• phone number
• delivery address (street, city, postal code)
• order details (items, price, date)

III. Purposes and Legal Basis for Processing

Personal data is processed for the following purposes:

• Performance of the purchase contract — processing orders, delivering goods, communicating about orders. Legal basis: performance of a contract under Art. 6(1)(b) GDPR.
• Compliance with legal obligations — accounting and tax records. Legal basis: legal obligation under Art. 6(1)(c) GDPR.
• Website traffic analysis (Google Analytics 4) — only with consent given via the cookie banner. Legal basis: consent under Art. 6(1)(a) GDPR.

IV. Recipients of Personal Data

Personal data may be shared with the following recipients (processors):

• Resend (email service) — sending order confirmations
• Twilio (communication service) — sending order notifications
• Vercel (hosting) — operating the online store
• Google Analytics (analytics) — website traffic analysis (with consent only)

V. Data Retention Period

Order data is retained for the period required by law for tax and accounting purposes (5–10 years under the Accounting Act and Tax Code).

Analytical data from cookies is retained for the duration of the consent or until it is revoked.

VI. Data Subject Rights

As a data subject, you have the right to:

• access your personal data
• rectification of inaccurate data
• erasure of personal data (right to be forgotten)
• restriction of processing
• data portability
• object to processing
• withdraw consent to processing (for cookies)

You may exercise your rights by emailing eva@proust.cz.

VII. Cookies

The website uses only analytical cookies (Google Analytics 4), which are loaded only after explicit consent is given via the cookie banner.

Technically necessary cookies (session, cart) do not require consent under applicable law.

You may revoke your cookie consent by clearing your browser data (localStorage).

VIII. Supervisory Authority

If you believe that the processing of your personal data is in violation of the law, you have the right to file a complaint with the supervisory authority:

Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

IX. Automated Decision-Making

The controller does not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR.