Podmínky ochrany osobních údajů

Privacy Policy

We are a company registered in the Czech Republic. Our company registration details can be found in the Contact section of this website.

We operate the online store available at:

smokeydoo.cz

For the purpose of providing our services, selling products, and operating our website, we process certain personal data.

The processing of personal data is governed primarily by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR).

I. Processing of Personal Data

A. Personal Data Processed Through the Contact Form

If you enquire about our products or services, we process the contact information you provide, primarily through our contact form.

This may include:

  • Full name

  • Confirmation that you are at least 18 years of age (by accessing this website you confirm that you have reached the legal age required under Czech Act No. 65/2017 Coll. concerning the protection of health from the harmful effects of addictive substances)

  • Billing address

  • Delivery address (where different)

  • Telephone number

  • Email address

Why do we process this information?

We use these details to contact you regarding your enquiry, products, or requested services.

Legal basis

Processing is necessary for taking steps prior to entering into a contract at your request, pursuant to Article 6(1)(b) GDPR.

How long do we retain your data?

If no contractual relationship is established, your personal data will be retained for a maximum of 6 months following our last communication.

B. Personal Data Processed When You Make a Purchase

When you purchase products from us, we process the information you provide during checkout, including:

  • Full name

  • Billing address

  • Delivery address

  • Confirmation of legal age

  • Contact details

Why do we process this information?

We process your personal data in order to:

  • fulfil our contractual obligations by delivering your order;

  • communicate with you regarding your order, delivery, returns, or complaints;

  • comply with our legal obligations, including accounting, tax, and consumer protection requirements.

Legal basis

Processing is based on:

  • Article 6(1)(b) GDPR – performance of a contract;

  • Article 6(1)(c) GDPR – compliance with a legal obligation.

How long do we retain your data?

Your personal data will be retained for the duration of our contractual relationship and for 10 years thereafter where required by applicable legal obligations.

C. Marketing Communications (Newsletter)

If you have purchased products from us and have not opted out, we may use your email address to send you marketing communications regarding similar products and services.

Legal basis

This processing is based on Section 7(3) of Czech Act No. 480/2004 Coll. on Certain Information Society Services and our legitimate interest where permitted by applicable law.

How long do we retain your data?

Your email address may be used for marketing purposes for up to 10 years after your last purchase.

You may unsubscribe at any time by using the unsubscribe link included in our emails or by contacting us at:

smokeydoo@email.cz

II. Who Has Access to Your Personal Data?

Your personal data remains under our control. However, we use selected third-party service providers who assist us in operating our online store and delivering our services. These parties may process your personal data only to the extent necessary to provide their services.

These may include:

  • our e-commerce platform provider (Shopify);

  • shipping and delivery service providers;

  • payment service providers;

  • email marketing service providers;

  • marketing and advertising agencies;

  • IT service providers and website maintenance partners.

Your personal data may also be disclosed where required by applicable law or to public authorities where legally obligated.

All personal data is processed within the European Union or in countries providing an adequate level of data protection in accordance with the GDPR.

III. Additional Information

We have appointed a person responsible for overseeing compliance with our data protection obligations.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects concerning you.

If you have any questions regarding the processing of your personal data, please contact us:

Email: smokeydoo@email.cz

Telephone: +420 604 611 177

IV. Use of Cookies

Cookies are small text files stored on your device when you visit our website. They help websites function correctly, remember your preferences, improve your browsing experience, and provide analytical information.

We use the following categories of cookies:

Essential Cookies

These cookies are strictly necessary for the operation of the website and enable core functionality such as secure login, shopping basket functionality, and website security.

These cookies cannot be disabled.

Analytics Cookies

Analytics cookies help us understand how visitors use our website by collecting anonymous statistical information. This enables us to improve website performance and usability.

Analytics cookies are only used with your prior consent.

Marketing Cookies

Marketing cookies are used to personalise advertisements and measure the effectiveness of advertising campaigns based on your browsing behaviour.

Marketing cookies are only used after obtaining your explicit consent.

Third-party providers may also place cookies on your device or access information collected through cookies in accordance with their own privacy policies.

You may manage or withdraw your cookie consent at any time through your browser settings or the cookie preferences available on our website.

Further information about managing cookies is available within your web browser.

V. Your Rights Under the GDPR

Under the General Data Protection Regulation (GDPR), you have the right to:

  • request access to your personal data;

  • obtain a copy of your personal data;

  • request correction of inaccurate or incomplete personal data;

  • request erasure of your personal data where applicable;

  • request restriction of processing;

  • object to processing based on our legitimate interests;

  • receive your personal data in a structured, commonly used, machine-readable format (data portability);

  • withdraw your consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

If you believe that we process your personal data unlawfully, you have the right to lodge a complaint with your local supervisory authority responsible for data protection or seek judicial protection.

Effective from: 30 July 2022