Home / Privacy Policy

Privacy Policy

We are Mahalo shop, operated by Vojtěch Chládek, with its registered office at Velké Kunratické 1355/15, 148 00, Prague 4 - Kunratice, Company ID 10673601, email info@mahalo-centrum.cz, phone number +420 775 020 202.

We operate an e-shop at www.mahalo-shop.cz.

For providing our services, selling goods, and operating our website, we process certain personal data.

The processing of personal data is governed primarily by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).

I. Processing of Personal Data

A. Processing of Personal Data in Case of Using the Contact Form

If you inquire about our products and services, we will process your contact details provided mainly through the inquiry form. These details include: name, surname, and email address.

For what purpose?

We use this information to contact you for further arrangements regarding goods and services.

On what legal basis?

This processing is based on Article 6(1)(b) GDPR – processing necessary for the performance of a contract or for taking steps at your request prior to entering into a contract.

How long will we process the personal data?

If we do not establish further cooperation, we will process your data for no longer than 1 year from our last communication.

B. Processing of Personal Data in Case of Purchase

If you make a purchase with us, we will process the data you provide, mainly billing details: name, surname, address, email, phone.

For what purpose?

We need to process personal data to fulfill our contract – to deliver our goods or services to you. We will also use contact details to communicate with you about the status of your order, or regarding complaints or inquiries.

Additionally, we will process personal data to fulfill our legal obligations (mainly for accounting and tax purposes, and possibly for handling complaints and other matters).

On what legal basis?

This processing is based on Article 6(1)(b) GDPR – performance of a contract and Article 6(1)(c) GDPR – compliance with a legal obligation.

How long will we process the personal data?

For the duration of providing our service and then for 10 years from the last provision of such service or delivery of goods.

C. Newsletters (Commercial Communications)

If you are a purchasing customer and did not opt out at the time of purchase, we will use your email address to send you our updates.

On what legal basis?

This is permitted by Section 7(3) of Act No. 480/2004 Coll., on Certain Information Society Services, if you did not opt out at the time of purchase.

How long will we process the personal data?

For 1 year from your last purchase. You can unsubscribe from the mailing list at any time by email or contact us at info@mahalo-centrum.cz.

 

II. Who Has Access to the Data?

Your data remains with us. However, some companies or individuals who help us operate our e-shop have access to the data. These include:

  • The operator of the e-shop platform Shoptet (Shoptet a.s., with its registered office at Dvořeckého 628/8, Břevnov, 169 00, Prague 6, Company ID 289 35 675, registered at the Municipal Court in Prague, Section B, File 25 395)
  • Companies involved in the dispatch of goods: Česká pošta (Czech Post)
  • Companies involved in payment processing: Shoptet Pay
  • Provider of email services: Český hosting

We process personal data only within the territory of the European Union.

 

III. What You Should Know

We do not have a designated Data Protection Officer in our company.

Our company does not engage in decision-making based on automated processing or profiling.

If you have any questions about personal data, please contact us at info@mahalo-centrum.cz.

 

IV. Use of Cookies

Cookies are text files containing small amounts of information that are downloaded to your device when you visit our website. Cookies are then sent back to the website or another website that recognizes them during each subsequent visit.

Cookies serve various purposes, such as enabling efficient navigation between web pages, remembering your preferences, and generally improving the user experience. They can also ensure that online ads are better tailored to you and your interests.

On our website, we use the following types of cookies:

  • Necessary Cookies: These are essential for the operation of the website, allowing functions such as logging into secure areas and other basic functionalities. This category of cookies cannot be disabled.
  • Analytical/Statistical Cookies: These allow us to recognize and determine the number of visitors and track how our visitors use the website. They help us improve the way the site functions, for example, by making it easier for users to find what they are looking for. We only activate these cookies with your prior consent.
  • Advertising Cookies: These are used to track preferences and display advertisements and other content that best matches your interests and online behavior. We only activate these cookies with your prior consent.

Please note that third parties (including, for example, external service providers) may also use cookies and/or access data collected by cookies on our website.

Further information about cookies and their current list can be found through individual internet browsers, often in the Developer Tools section.

Consent can be given through the checkbox contained in the so-called cookie banner. You can also refuse cookies or configure your browser settings to use only certain cookies.

For more information on managing cookies in individual browsers, see the following links:

 

V. Your Rights Related to Personal Data Processing

Under GDPR, you have the right to request information about what personal data we process, to access this data, and to have it updated or corrected. You may also request restrictions on processing, request a copy of the personal data being processed, request the deletion of personal data in certain situations, and, in certain cases, request data portability. You can object to processing based on legitimate interests.

If you believe we are not handling your data correctly, you have the right to file a complaint with the Office for Personal Data Protection or to pursue legal action.

These conditions are effective from November 24, 2022.