3+1 FREE — Prague Memories Shampoo

English
de DE

My shop
OC Varyáda, Karlovy Vary

Privacy policy

CONDITIONS FOR PROCESSING OF PERSONAL DATA

The purpose of this document is to provide you with information on processing and protection of personal data in connection with Regulation (EU) 2016/679, on the protection of natural persons in relation to the processing of personal data ("GDPR"). This document is effective from May 28th , 2024.

1. Identification of the Data Controllers

The joint data controllers are:

  • MANUFAKTURA s.r.o., with residence at Melantrichova 970/17, 110 00 Praha 1, company reg. no. 031 27 371 (hereinafter “Manufaktura”),
  • Český národní podnik s.r.o., with residence at Melantrichova 970/17B, 110 00 Praha 1, company reg. no. 496 27 371 (hereinafter “ČNP”),
  • ČNP SR s. r. o., with residence at Mariánske nám. 29/6 010 01 Žilina, company reg. no. 46783393

and franchise administrators and processors who share data on customers and orders:

  • Jana Dutková, based at 1. Máje 1526/66, 703 00 Ostrava – Moravská Ostrava, company reg. no. 447 34 468,
  • Jana Mohylová, based at Krásná 170, 739 04, company reg. no. 017 75 791,
  • VisViva, s.r.o., with residence at Bernolákova 703/54, 953 01 Zlaté Moravce, Slovakia, company reg. no. 468 83 665.

Pursuant to Article 26 of the GDPR, the above-mentioned companies represent Joint Data Controllers who have entered into an agreement regarding the joint processing of personal data.

The primary responsible Data Controller and the main point of contact for Data Subjects is MANUFAKTURA s.r.o., which ensures communication with data subjects, processes their requests and facilitates the exercise of their rights in compliance with the GDPR.

Data subjects may exercise their rights against any Joint Data Controller; however, primarily the responsible administrator ensures the responses and fulfilment of these duties.

In terms of requirements and inquiries concerning personal data protection you can contact responsible personnel available via gdpr@manufaktura.cz or gdpr@manufaktura.sk.

2. What personal data do we process and for what purpose?

We process only the personal data that you provide to us with regard to your interest in our products, services and their purchase, or entering into a contract for the sale of goods (e. g. within an order in our online store, visit of website presentation, registration, shopping in a brick-and mortar shop, and others).

It is personal data of the general category, i. e. mostly identification and contact details. For more information regarding specific purposes, see the chapters below.

2.1. Purchasing Goods Online, Delivery of Goods – Entering into and Performing the Contract

This data is necessary for entering into and performing the contract, billing, delivery of goods, handling complaints and other purposes resulting from the law. It deals mainly of:

  • name and surname,
  • contact and/or delivery address,
  • email,
  • telephone number,
  • payment details (the first 6 digits of your payment card), which we will store in your account (only when using paid services, such as purchases on our e-shop, etc.) – according to the payment gateway.

Personal data for these purposes is kept for as long as necessary to fulfil other legal obligations resulting from the law and/or a contractual relationship - i. e the period necessary for handling complaints is 2 years, for billing purposes 5 years, for archiving 10 years, for a limitation period 3 years.

2.2. Other Data (e. g. website visit - cookies)

Personal data that we get from you on the basis of using our services. It is:

  • IP address,
  • cookie files (in case of online services),
  • records of users´ behavior on the website run by Manufaktura obtained from the use of cookies, if cookies are enabled in the browser. The records are processed in order to improve operation of the website run by Manufaktura and online advertising.
  • possibly another online identifier.

More information about cookies is below in this document.

2.4. Surveillance Videos from Branded Brick-and-Mortar Shops and Premises of ČNP

ČNP places security cameras to the branded brick-and-mortar shops and premises of ČNP for reasons of protection of ČNP´s customers, property and interests. It is a legitimate interest of ČNP. The premises where cameras are placed are always marked with warning. Surveillance videos are available 3 days back.

More information about surveillance videos is available via gdpr@manufaktura.cz or gdpr@manufaktura.sk.

2.5. Marketing Purposes (e. g. sending newsletters)

If you have granted consent to receiving marketing information by means of email (news, information on products, special offers and others), the personal data for this purpose will be processed for 3 years, or until you withdraw your consent.

You can unsubscribe from receiving news and special offers in the setting of the service for which the users signed up themselves in order to receive such information via gdpr@manufaktura.cz or gdpr@manufaktura.sk.

After withdrawing your consent or upon expiry of the period of granting consent, we will keep your consent for a three-year limitation period.

2.6. Cookies

Cookies are small text files stored on the user’s terminal equipment (computer, tablet, mobile phone) via web browsers when visiting websites. Cookies allow websites to recognize the user’s equipment and remember their settings or performed actions, while ensuring proper functionality and improving user comfort.

The Data Controller uses cookies in accordance with applicable laws, particularly the GDPR and legislation concerning electronic communication.

Types of cookies used:

a) Necessary (Technical) Cookies

These cookies are indispensable for ensuring the basic functionality of the websites and their secure operation. Without their use, the websites could not function properly.

These cookies primarily ensure:

  • basic website setting,
  • website security and user data protection,
  • user authentication and verification,
  • prevention of fraudulent activity,
  • proper functioning of processes that allow for the provision of services (e.g. user account login, shopping basket, session state).

The use of Necessary Cookies does not require user consent, as they are processed based on the Data Controller’s legitimate interest.

b) Analytical Cookies

Analytical cookies serve to retrieve information about how users interact with the websites for the purpose of improving and optimizing content and functionality. These cookies allow for the monitoring of website traffic or how users navigate through the pages.

The Data Controller utilizes third-party analytical tools, specifically Google Analytics.

Analytical cookies are stored only based on your prior consent, which you may grant or withdraw at any time via the cookie settings.

c) Marketing Cookies

Marketing cookies are used to display advertisements that are relevant to the user and to evaluate the effectiveness of marketing campaigns. These cookies allow for the display of targeted advertisements via third-party advertising systems, such as Google, Meta (Facebook, Instagram) and Seznam.

Marketing cookies primarily process:

  • data regarding user behaviour on the websites,
  • online identifiers and equipment identifiers,
  • pseudonymous or anonymous data necessary for marketing and analytical purposes.

Marketing cookies are stored exclusively based on your explicit consent, which you may grant or withdraw at any time via the cookie settings.

Management of Cookies Consent

When visiting the websites for the first time, you may manage your cookie preference via the cookie banner. You can change or withdraw your consent for analytical and marketing cookies at any time through the website settings.

Rejecting analytical or marketing cookies does not affect the basic functionality of the websites, however, it may influence content personalization and the display of relevant advertisements.

You can also limit or completely prohibit cookies via your web browser settings. Please note that in such case the full functionality of certain parts of the website may not be guaranteed.

To process cookies, the Data Processors mentioned in Chapter 4 used are utilized.

2.7. Selection Procedures - Job Applicants

If you send us your curriculum vitae, your personal data relating to the selection procedure will be processed for the duration of the selection procedure. You curriculum vitae will be disposed of within 3 months on completion of the selection procedure. If you give us a consent to process your personal data in further selection procedures, your curriculum vitae will be stored for 5 years.

Some of your personal data can be stored for the period of 3 years on completion of the selection procedure due to legal claims resulting from the limitation period.

3. Form of Processing and Access to Personal Data

Appropriate organisational and technical security measures based on GDPR including control of access to personal data was adopted to secure your personal data. The company performs regular annual audits in the field of data security and personal data.

Your personal data will be stored both in an electronic and written form. Electronic data is stored in shared discs in the data centre of our company. Only the company´s staff has access to personal data stored in the shared discs, which is further limited and controlled.

Written documentation is stored in lockable filing cabinets accessible only by identified company´s employees. Disposal of electronic and written data is performed regularly under the disposal rule.

4. Recipients of Personal Data – Processors

The recipients of personal data are persons:

  • Participating in delivery of goods/making payments,
  • Providing services of online store operation and other services associated with website presentation operation,
  • Providing tax, accounting and other services,
  • Providing marketing services such as PPC ad (Google LLC, Meta, Seznam) and newsletter (Ecomail),
  • Franchises.

Data controllers do not intend to directly or actively transfer personal data to third countries (outside the EU). The transfer of personal data takes place between the Czech Republic and Slovakia based on a contract. The transfer of personal data between the Data Controller and the Processors takes place based on a contract. Personal data may be transferred to third countries indirectly through the use of services of providers, such as Google LLC or Meta Platforms, Inc., based on standard contractual clauses, or other adequate safeguards in accordance with Chapter 5 of the GDPR.

Sharing of personal data may take place on a platform basis of Google LLC (Google Ads, Youtube), Meta Platforms (Facebook, Instagram), Microsoft (Office, LinkedIn) – USA.

5. What rights do you have?

You have the following rights in relation to your personal data:

  • the right to information on the processing of personal data,
  • the right to access personal data,
  • the right to have personal data rectified,
  • the right to have personal data deleted (the right to be “forgotten”) in certain cases when the purpose/period of the processing of personal data has passed,
  • the right to restrict the processing of personal data,
  • the right to require transferring of personal data,
  • the right to object to or complain against the processing of personal data in certain cases,
  • the right to withdraw your consent with the processing of personal data (for marketing purposes) at any time,
  • he right to lodge a complaint with a supervisory authority:
    • The Office for Personal Data Protection (Czech Republic), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, email: posta@uoou.cz,
    • The Office for Personal Data Protection (Slovak Republic), Hraničná 12, 820 07 Bratislava 27, Slovak Republic, email: statny.dozor@pdp.gov.sk

6. Final Provisions

If you have any inquiry concerning the processing of your personal data, please use this email address: gdpr@manufaktura.cz or gdpr@manufaktura.sk.

In this context please note that we may ask you to prove your identity in an appropriate manner in order to check your identity. This is a preventive security measure aimed at preventing unauthorized persons from accessing your personal data.

In order to improve the quality of our services and to maintain the records of performance of our obligations resulting from the law every communication with you is monitored.

Manufaktura s.r.o., data protection officer, address: Melantrichova 970/17B, 110 00 Praha 1, or email: gdpr@manufaktura.cz or gdpr@manufaktura.sk.

In Prague, on  August 1st 2025

Updated on February 1st 2026