Processing of personal data

This notice describes how Marina De Zulueta , ID: 04837789, a natural person doing business under a trade license, with its registered office at Vačkařova 284, 251 01 Dobřejovice, Czech Republic (hereinafter referred to as the “ controller ”, “ we ”), processes personal data of visitors and customers of the website www.mzdsiluet.com (hereinafter referred to as the " website ").

📧 Email: info@mdzsiluet.com

📞 Phone: +420 776 257 285

The controller determines the purposes and means of processing personal data and is responsible for their protection. The controller has not appointed a data protection officer because it is not obliged to do so under the GDPR.

1. Purpose of processing personal data

Customer personal data is processed solely for the purpose of:

  • order processing,
  • delivery of goods,
  • communication with the customer,
  • fulfillment of the administrator's accounting and tax obligations.

❌ Data is not provided to third parties for marketing purposes.

2. Who has access to the data

Personal data may only be made available to verified processors who are involved in the operation of the e-shop and orders:

  • Shopify (e-commerce platform),
  • payment gateways : GoPay, Stripe, PayPal, Shopify Payments and its partners,
  • carriers : Czech Post, Zásilkovna, DPD, etc. according to the customer's choice,
  • accounting services .

👉 All processors have concluded processing contracts and guarantee an adequate level of protection.

3. Data retention period

We only retain personal data for as long as necessary:

  • during the period of performance of the contract and delivery of the goods,
  • further for the statutory archiving period (5–10 years),
  • customer accounts – for the period of their active management,
  • consents to marketing (newsletter) – until revoked, max. 10 years,
  • cookies – according to the consent given or browser settings.

4. Rights of data subjects

You have the right to request:

  • access to your personal data,
  • correction of inaccurate or supplemented data,
  • erasure ("right to be forgotten") or restriction of processing,
  • objection to processing (including marketing),
  • portability of data processed automatically.

🕒 We will provide an answer within 30 days at the latest.
📧 Requests: info@mdzsiluet.com

5. Cookies

We use cookies on the website for:

  • necessary – cart, login, security,
  • functional – they remember your choices (e.g. language),
  • analytical – measures traffic and behavior (Google Ireland, with consent),
  • marketing – targeted advertising (Google, Meta; with consent).

⚙️ On your first visit, you can set your preferences via the cookie bar.
Settings can be changed at any time in the website footer → " Cookie settings ".

For more details, see Cookie Policy .

6. What data do we process?

Data provided by the customer:

  • first name, last name,
  • delivery/billing address,
  • email, phone,
  • order and payment information,
  • optional delivery notes.

Cookie data:
– website visits, products viewed, activity (with consent).

❌ We do not process sensitive data (health, religion, etc.).

7. Purposes and legal bases

  • Order processing and contract performance – Art. 6/1/b GDPR.
  • Customer account – Art. 6/1/b GDPR.
  • Newsletter and marketing – legitimate interest (Article 6/1/f) or consent (Article 6/1/a).
  • Measurement and statistics (cookies) – consent (Article 6/1/a).
  • Accounting and tax records – legal obligation (Article 6/1/c).
  • Protection of rights and claims – legitimate interest (Article 6/1/f).

8. Recipients and transfers outside the EU/EEA

Some providers (Shopify, Google, Meta) may have servers outside the EU/EEA.
The transfer takes place on the basis of SCC (standard contractual clauses) and other guarantees according to the GDPR.

9. Withdrawal of consent

Consent (cookies, newsletter) can be revoked at any time:

  • in cookie settings,
  • via the unsubscribe link in the email,
  • by email to info@mdzsiluet.com

The revocation does not apply to processing prior to its revocation.

10. Security

We protect personal data with technical and organizational measures in accordance with the GDPR.
Only people and partners who absolutely need it have access. We regularly review security.

Contact

📧 info@mdzsiluet.com

📬 Vačkařova 284, 251 01 Dobřejovice, Czech Republic

Effective from: 01. 10. 2025