Customer support:+420 605 158 596info@berserkr.cz
    Currency
    EUR
    Language
    English
    Home / Privacy Policy

    Privacy Policy

    For the online store operated by Bubak Company s.r.o., company ID: 04952545, with its registered office at Na Chodovci 2722/56, Záběhlice (Praha 4), 141 00 Praha, at www.berserkr.cz.

    I. General provisions

    1. The controller of personal data within the meaning of Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”) is Bubak Company s.r.o., company ID: 04952545, with its registered office at Na Chodovci 2722/56, Záběhlice (Praha 4), 141 00 Praha (the “Controller”).
    2. The Controller’s contact details:
      • Address: Na Chodovci 2722/56, Záběhlice (Praha 4), 141 00 Praha
      • Email: info@berserkr.cz
      • Telephone: +420 605 158 596
    3. Personal data means any information relating to an identified or identifiable person, such as a name, address, email address, telephone number or IP address.
    4. The Controller has not appointed a data protection officer because the law does not require it to do so.

    II. Sources and categories of personal data processed

    1. The Controller processes personal data provided by the Buyer:
      • when placing an order;
      • when registering a user account;
      • when communicating with the Controller by email, form or telephone.
    2. In particular, the Controller processes:
      • Identification data – first name, surname and, where applicable, company name;
      • Contact data – email address, telephone number, delivery and billing addresses;
      • Data necessary to perform the contract – order contents, payment method and purchase history;
      • Technical data – IP address, cookies and website activity data, where consent has been given.

    III. Legal bases and purposes of processing

    The Controller processes personal data on the following legal bases:

    1. Performance of a contract (Article 6(1)(b) GDPR) – order processing, delivery of goods, invoicing and communication.
    2. The Controller’s legitimate interest (Article 6(1)(f) GDPR) – in particular, direct marketing to existing customers, protecting rights and resolving potential disputes.
    3. The data subject’s consent (Article 6(1)(a) GDPR) – sending newsletters where no purchase has been made, and using optional analytics and marketing cookies.

    Purposes of processing personal data

    1. Handling orders – receipt, processing, delivery, invoicing and customer service.
    2. Compliance with legal obligations – accounting and tax records.
    3. Marketing – sending commercial communications, newsletters, discounts and news, only with consent or on the basis of legitimate interest.
    4. Analysing online store traffic – where you have consented to cookies.
    5. Protecting the Controller’s rights – preventing fraud and retaining evidence for potential disputes.

    IV. Retention periods

    1. For performance of the contract, personal data is retained for the period necessary to handle the order, and subsequently for the periods required by law:
      • accounting documents: 10 years;
      • communications concerning claims: usually 3–5 years.
    2. For marketing based on legitimate interest: until you unsubscribe from the newsletter.
    3. For marketing based on consent: until consent is withdrawn, but no longer than 5 years.
    4. After these periods expire, personal data is irreversibly deleted or anonymised.

    V. Recipients of personal data

    The Controller uses only verified providers supporting the operation of the online store and related services. Personal data may be disclosed to:

    1. Carriers – to deliver parcels, according to the delivery method selected in the order.
    2. Payment service providers – Shoptet Pay for card payments, Apple Pay and Google Pay.
    3. IT, hosting and e-commerce service providers – the Shoptet platform.
    4. Accountants and tax advisers.
    5. Marketing and newsletter service providers – Ecomail.

    Transfers to third countries

    If a newsletter is sent through a service outside the EU, data is transferred to third countries. In such cases, personal data is protected using standard contractual clauses under the GDPR.

    VI. Rights of the data subject

    The data subject has the following rights:

    1. Right of access (Article 15 GDPR) – to request information about the data we process.
    2. Right to rectification (Article 16 GDPR) – to request correction of inaccurate or incomplete data.
    3. Right to erasure (Article 17 GDPR) – where data is no longer needed or is processed unlawfully.
    4. Right to restriction of processing (Article 18 GDPR).
    5. Right to data portability (Article 20 GDPR).
    6. Right to object (Article 21 GDPR), particularly to direct marketing.
    7. Right to withdraw consent at any time where processing is based on consent.
    8. Right to lodge a complaint with the Czech Office for Personal Data Protection: ÚOOÚ, Pplk. Sochora 27, Praha 7, www.uoou.cz.

    VII. Security of personal data

    The Controller declares that it has:

    1. adopted technical and organisational measures to protect personal data;
    2. secured data storage and electronic systems through encryption, passwords and access rights;
    3. adopted measures against loss, misuse and unauthorised access;
    4. restricted access to personal data to persons authorised by the Controller, and only to the extent necessary.

    VIII. Final provisions

    1. By submitting an order or registering an account, the Buyer confirms that they have read and fully accept this Privacy Policy.
    2. The Controller may amend this policy. A new version will be published in the online store, and the Buyer may be informed by email in the event of significant changes.
    3. This policy takes effect on 12 December 2025.