☰ Menu

Privacy policy.

What data I process when you buy in the shop, why and for how long. The Czech version prevails.

Controller

The controller is BO Gastro Services s.r.o., registered office Kaprova 42/14, 110 00 Praha 1, company ID 24165590, registered in the Commercial Register at the Municipal Court in Prague, section C, file 184738. Contact for anything about personal data: info@kafevklidu.cz.

What data and why

For an order I process your name, e-mail, for parcels your phone and delivery address or chosen pick-up point, for a voucher the “from” and “to” names and the dedication, the order contents and payment details (order number, amount, status). I never see your card details; Stripe processes them directly.

Legal bases under Art. 6(1) GDPR:

  • (b) performance of a contract – handling the order, payment, delivery, issuing and sending the voucher, communication about the order and complaints;
  • (c) compliance with a legal obligation – bookkeeping and keeping accounting records;
  • (f) legitimate interest – defending my legal claims (e.g. in a dispute about an order) and securing the website and shop (server logs, abuse prevention such as limiting attempts per IP address).

You as the buyer enter the voucher recipient’s name and the dedication and are responsible for being allowed to use them. I use them only to print them on the voucher.

Who receives the data

  • Stripe (Stripe Payments Europe, Limited, Ireland) – card payments. For fraud prevention and its own legal obligations Stripe is also an independent controller. It may transfer data to Stripe, LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework; otherwise it uses the EU standard contractual clauses.
  • Resend (Plus Five Five, Inc., San Francisco, USA) – sending confirmation and voucher e-mails (e-mail address, name and e-mail content). Resend processes data mainly in the USA; the transfer is covered by the EU standard contractual clauses (Commission Decision 2021/914) included in its data processing agreement, and Resend is also certified under the EU-U.S. Data Privacy Framework.
  • Zásilkovna s.r.o. (company ID 28408306, Českomoravská 2408/1a, 190 00 Prague 9) – only if you choose Zásilkovna delivery: name, phone, e-mail, address or pick-up point and, for cash on delivery, the amount. For delivering the parcel Zásilkovna is an independent controller under its own privacy policy. When you click “Choose a pick-up point on the map” in the cart, the map of pick-up points is loaded directly from Zásilkovna’s servers (widget.packeta.com); as an independent controller Zásilkovna then sees your IP address and browser details and may use its own cookies. Nothing from Zásilkovna is loaded unless you click, and you can also type the pick-up point in by hand.
  • Hosting provider – the website and shop run on its servers; the server keeps technical logs (IP address, time, requested page, browser type) for security and troubleshooting, stored only for a limited time.
  • My accountant – to the extent of accounting records.

How long

Order and payment records (accounting documents) are kept for 5 years from the end of the year in which the order was made. Voucher data (code, names, dedication) is kept until the voucher expires and then only as part of accounting records. Unfinished and cancelled orders are deleted after 12 months at the latest.

Your rights

You have the right to access, correct and erase your data (unless I must keep it by law), to restrict processing, to data portability and to object. Just e-mail info@kafevklidu.cz. You can also complain to the Czech data protection authority, uoou.gov.cz.

Cookies

Neither the website nor the shop uses advertising or analytics cookies and nothing tracks you. Fonts are loaded from my own server, not from Google. Instagram, Facebook and maps are plain links; nothing from them is embedded in the pages. Your cart is stored only in your browser (localStorage). For card payments you are redirected to Stripe’s payment page, which uses its own necessary cookies; no Stripe code is loaded on my website. The Zásilkovna pick-up point map is loaded only after you click “Choose a pick-up point on the map” in the cart and may use Zásilkovna’s cookies (see Who receives the data).

Effective from 29/10/2026.