Privacy policy & GDPR

1. Data controller

Vivadzen s.r.o., Company ID 00000000, registered office Prague, Czech Republic. Contact for personal data protection: gdpr@vivadzen.com.

2. What data we process

Identification data: name, surname, email, phone
Address data: delivery address, billing address
Order data: purchase history, COA reports, order status
Technical data: IP address, user-agent, cookies

3. Purpose of processing

We process data for the purpose of fulfilling the purchase contract (delivery of goods, invoicing), legal obligations (PML records, consumer protection), and legitimate interest (improving services, marketing only with consent).

4. Retention period

We retain data for the period strictly necessary: order data for 10 years (legal obligation), contact data until consent is withdrawn, marketing data for 3 years from the last purchase.

5. Your rights

Right to access data
Right to rectify inaccurate data
Right to erasure (right to be forgotten)
Right to data portability
Right to object
Right to lodge a complaint with the Office for Personal Data Protection

6. Data transfers

We share data only with necessary processors: courier services (Messenger, Zásilkovna, PPL), payment partners (ComGate, GoPay), email services (Mailchimp). We never sell data to third parties.

7. Security

All communication takes place over HTTPS with TLS 1.3. Passwords are stored as bcrypt hashes; we do not store card numbers at all (only tokens from payment partners).