Privacy Policy
Effective from 1 November 2026
1. Controller
The controller of personal data is Tristan Marek, IČO (Business ID No.) 02201925, with registered place of business at Na Maninách 1614/22, 170 00 Praha 7 (the "Controller"). Contact for personal data protection enquiries: pedidos@piantado.cz.
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and zákon č. 110/2019 Sb. (Act No. 110/2019 Coll., on the Processing of Personal Data).
2. What data we process, why and for how long
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| --- | --- | --- | --- |
| Processing the order, delivery and communication about it | name, address, e-mail, telephone, goods ordered, delivery date | performance of a contract (čl. 6 odst. 1 písm. b) GDPR [Article 6(1)(b) GDPR]) | for the duration of the contract and the limitation period (generally 3 years from delivery) |
| Customer account | e-mail, password (stored in encrypted form), addresses, order history, preferred language | performance of a contract | until the account is closed |
| Payment | payment details; card details are processed directly by Stripe, and we do not see them | performance of a contract | as for the order |
| Accounting and taxes (invoices) | identification and billing details, order contents | legal obligation (čl. 6 odst. 1 písm. c) GDPR [Article 6(1)(c) GDPR]) | 10 years (zákon o DPH [VAT Act], zákon o účetnictví [Accounting Act]) |
| Sale of alcohol | confirmation of age 18+ | legal obligation | as for the order |
| Wholesale account | company and contact person details, verification in ARES and VIES | performance of a contract, legitimate interest in verifying the customer | for the duration of the business relationship and the limitation period |
| Online advisor | content of the conversation and, where applicable, your e-mail or telephone number if you provide them to the advisor | legitimate interest in providing advice; performance of a contract if the conversation leads to an order | we do not store the conversation longer than necessary to respond; contact details passed to our team are kept until the enquiry is resolved |
| Fraud prevention and security | technical data (IP address, device) | legitimate interest | no longer than 12 months |
| Complaints and disputes | complaint data, photographs | legal obligation, legitimate interest | for the duration of the limitation period |
We do not currently send commercial communications (newsletter). If we begin sending them, we will do so only with your consent or to the extent permitted by law, always with the option to unsubscribe.
3. Recipients and processors
We share personal data only to the extent necessary for the given purpose:
- Stripe Payments Europe Ltd. (Ireland): card payment processing;
- Fakturoid s.r.o. (Czech Republic): issuing invoices;
- PPL CZ s.r.o. and other carriers: delivery of shipments;
- Resend (USA): sending transactional e-mails;
- Anthropic PBC (USA): language model for the online advisor;
- Vercel Inc. and Railway Corp. (USA): operation of the website and database;
- Google Ireland Ltd. (Ireland; data may be transferred to Google LLC, USA): website traffic analytics (Google Analytics), only with your consent;
- our accountant and tax adviser, and public authorities where required by law.
For transfers to the USA, we rely on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
We do not sell personal data and do not process it for automated decision-making producing legal effects.
4. AI online advisor
The online advisor on the website is an artificial intelligence system, not a human. Do not enter sensitive data (e.g. health information) or payment details in the conversation. If you ask to be connected to a human, we will pass the conversation and the contact details you have provided to our team.
5. Your rights
You have the right:
- to access your personal data and obtain a copy of it;
- to rectification of inaccurate data;
- to erasure, where the data are no longer necessary or their processing is not lawful;
- to restriction of processing;
- to portability of the data you have provided to us;
- to object to processing based on legitimate interest;
- to withdraw your consent, where processing is based on consent.
Send your request to pedidos@piantado.cz; we will handle it within one month. You also have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.
6. Cookies
Information about cookies can be found in our Cookie Policy.