Privacy Policy
Effective from 19 June 2026 · Fellicis s.r.o.
1.Data controller
The controller of your personal data is:
Company ID (IČO): 21058369
VAT ID (DIČ): CZ21058369
Registered in the Commercial Register kept by the Municipal Court in Prague, file ref. C 396383
E-mail: info@svetkouzel.com
Phone: +420 725 338 071
This Privacy Policy describes how we process your personal data in accordance with Regulation (EU) 2016/679 ("GDPR") when operating the online shop www.svetkouzel.com.
We have not appointed a Data Protection Officer (DPO), as we are not legally required to do so. For any questions regarding personal data protection, please contact us at info@svetkouzel.com.
2.Personal data we process
We process only the personal data that is necessary for the relevant purpose. Specifically, this includes:
Identification and contact data
First name, surname, delivery address, billing address, e-mail address, telephone number. This data is necessary for processing your order and delivering your goods.
Transaction data
Order history, items purchased, prices, payment and delivery methods, cumulative spend (for the purposes of the Kouzelnický klub loyalty programme).
Accounting and billing data
Data appearing on tax documents, necessary for fulfilling our accounting and tax obligations.
Technical data from website visits
IP address, browser type and version, pages visited, time of visit, access source — only with your consent via analytical and marketing cookies (see section 8).
Correspondence
The content of e-mail communications with us, in particular in connection with complaints, enquiries or support requests.
3.Purpose and legal basis
Performance of contract — Art. 6(1)(b) GDPR
We process your identification and contact data in order to accept and process your order, deliver your goods, communicate with you about the status of your order and handle complaints. Without this data, the contract cannot be concluded or performed.
Retention period: for the duration of the contractual relationship and 2 years after its termination for the purposes of potential complaints.
Compliance with legal obligations — Art. 6(1)(c) GDPR
We process billing and accounting data for the period required by tax and accounting regulations — typically 10 years from the end of the tax period in which the transaction took place (Czech VAT Act and Accounting Act).
Legitimate interest — Art. 6(1)(f) GDPR
On the basis of legitimate interest, we process data for:
- Sending satisfaction surveys via the Verified by Customers programme (Heureka.cz) — customers who have made a purchase receive an invitation to rate their experience. You have the right to object to this processing at any time via the link in the survey e-mail.
- Kouzelnický klub loyalty programme — we record each customer's cumulative spend in order to assign the Bronze, Silver or Gold tier and apply the corresponding discount.
- Protection against fraud and misuse — we retain order records for potential legal disputes for the duration of the general limitation period (3 years, or 10 years for rights established by a court).
Consent — Art. 6(1)(a) GDPR
On the basis of your consent, we process:
- E-mail marketing (newsletter) — if you have subscribed to our newsletter via the sign-up form, we process your e-mail address on the basis of your consent. Consent may be withdrawn at any time by clicking the "Unsubscribe" link in any e-mail or by contacting us at info@svetkouzel.com. Retention period: 3 years from the date consent was given, or until it is withdrawn (whichever is earlier). Sending to existing customers on the basis of a prior purchase (soft opt-in, see note below) is governed by a separate retention period of 2 years from the last purchase.
- Analytical and marketing cookies — see section 8.
Note on newsletter: we may send commercial communications regarding similar goods to customers who have previously made a purchase, on the basis of soft opt-in, provided they did not opt out at the time of purchase. You may unsubscribe at any time.
Automated decision-making and profiling
We do not carry out automated decision-making with legal effects within the meaning of Art. 22 GDPR. Analytical tools (Google Analytics, Meta Pixel) may perform aggregated statistical processing and behavioural analysis for advertising purposes — this processing takes place exclusively on the basis of your cookie consent and is described in more detail in section 8.
4.Who we share data with
We share your personal data only where necessary for the relevant purpose, and always only to the minimum extent required. Recipients include:
Carriers and logistics
Company ID: 26087961
Company ID: 25194798
Company ID: 28408306
Technology partners (processors under Art. 28 GDPR)
Dvořeckého 628/8, Prague 6 · Company ID: 28935675
Company ID: 04466647
Company ID: 02387727 · Verified by Customers programme
Advertising and analytics platforms (consent-based processing)
Google Analytics
Meta Pixel (Facebook/Instagram)
Public authorities
We may share personal data with public authorities (tax authorities, courts, Police) where required by law or where necessary to protect our legal claims.
5.Transfers outside the EU
Most processing takes place within the European Union. The exception is services provided by Google LLC and Meta Platforms, Inc., which are US-based companies. Data transfers to the USA in these cases are covered by Standard Contractual Clauses approved by the European Commission (Art. 46(2)(c) GDPR), and/or by an adequacy decision (EU–US Data Privacy Framework, where applicable to the specific processor).
Details of the safeguards in place are available in the privacy policies of the respective companies.
6.How long we retain data
We retain personal data only for as long as necessary for the relevant purpose:
- Order and customer data — for the duration of the contractual relationship and 2 years after its termination (complaint and warranty periods)
- Billing and accounting documents — 10 years from the end of the tax period (statutory obligation)
- Newsletter and marketing communications — 3 years from the date consent was given, or 2 years from the last purchase (soft opt-in), whichever applies; or until consent is withdrawn
- Satisfaction surveys (Heureka) — in accordance with Heureka.cz's terms; we will cease processing immediately upon an objection being raised
- Correspondence (e-mails, complaints) — 3 years from the closure of the case (limitation period)
- Technical logs and analytics data — as configured by the relevant tool, up to 26 months (Google Analytics)
Upon expiry of the relevant period, data is securely deleted or anonymised.
7.Your rights
In connection with the processing of your personal data, you have the following rights:
How to exercise your rights
Please send your request by e-mail to info@svetkouzel.com or by post to our registered address. We will respond without undue delay, and in any event within 30 days of receiving your request (in exceptional cases this period may be extended by a further 60 days, of which we will notify you).
To verify your identity, we may ask you for additional information — this measure is in place to protect your data against unauthorised access.
9.Changes to this policy
This Privacy Policy is valid and effective from 19 June 2026. We reserve the right to update it at any time in response to changes in legislation or our processing activities. We will notify you of any material changes by e-mail or by a notice on the website. The current version is always available at www.svetkouzel.com/ochrana-osobnich-udaju/.