Privacy Policy (Vegapolis s.r.o.)

Data Controller:
Vegapolis s.r.o.
Company ID: 22634100
Registered office: Václavské náměstí 808/66, 110 00 Prague 1
Email: [email protected]
Phone: +420…….

Effective date: [insert date]

Legal basis: Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Coll. on the Processing of Personal Data


What personal data do we process?

As part of our activities, we process the following categories of personal data:

  • Identification and contact data: first name and last name, residential or delivery address, email address, phone number
  • Business data: order information, purchase history, payment details
  • Accounting and tax documents: invoices and tax documents issued in accordance with accounting and VAT regulations
  • Consent data: records of granted consents to marketing communications
  • Technical data: IP address, cookies, and online identifiers (see our separate Cookie Policy for details)

Purposes of processing and legal grounds

We process your personal data only for specific and lawful purposes:

Contract performance and communication
Legal basis: Article 6(1)(b) GDPR (performance of a contract)
Purpose: processing and fulfilling orders, delivery of goods or services, communication regarding orders, handling complaints and warranty claims

Accounting and tax obligations
Legal basis: Article 6(1)(c) GDPR (legal obligation)
Purpose: accounting, issuing tax documents, fulfilling obligations towards financial and tax authorities

Customer account management and records
Legal basis: Article 6(1)(f) GDPR (legitimate interest of the controller)
Purpose: efficient order management, improving services, protection of company rights and property, fraud prevention

Marketing communications
Legal basis: Article 6(1)(a) GDPR (consent)
Purpose: sending commercial messages, newsletters, information about promotions and updates
Important: you may withdraw your consent at any time by clicking the unsubscribe link in emails or by contacting [email protected]

Cookies and traffic analysis
Legal basis: consent (for marketing cookies) or legitimate interest (for functional cookies)
Purpose: ensuring website functionality, traffic analytics, content personalization
For more details, see our Cookie Policy


Data retention period

We retain personal data only for as long as necessary:

  • Duration of contractual relationship — as long as you actively use our services
  • Accounting and tax documents — 10 years after the end of the tax period
  • Protection of the controller’s rights — within statutory limitation periods (typically 3 years)
  • Marketing consents — until withdrawal or a maximum of 5 years after the last purchase
  • Cookies — depending on their type

After the retention period, data is securely deleted or anonymized.


Recipients of personal data (processors)

We may share your personal data with the following categories:

  • IT services and hosting providers — for website and e-commerce operation
  • Payment gateways — for processing payments
  • Logistics and courier services — for delivery of goods
  • Accountants and tax advisors — for accounting and tax compliance
  • Marketing service providers — for newsletters (only with your consent)

All processors are bound by data processing agreements in accordance with Article 28 GDPR.


Transfers to third countries

As a rule, personal data is not transferred outside the EU/EEA.
If such transfer occurs, appropriate safeguards will be ensured:

  • Standard Contractual Clauses (SCC) approved by the European Commission
  • Adequacy decisions of the European Commission
  • Other safeguards under Article 46 GDPR

Your rights

You have the following rights:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to object (Art. 21 GDPR)
  • right to withdraw consent
  • right to lodge a complaint with a supervisory authority

Supervisory authority:
Office for Personal Data Protection
Pplk. Sochora 27, 170 00 Prague 7
Web: www.uoou.cz
Email: [email protected]


How to exercise your rights

Send your request to: [email protected]
We will respond without undue delay, no later than 1 month (this period may be extended by up to 2 months in complex cases)


Cookie policy

We use:

  • necessary cookies
  • analytical cookies (e.g. Google Analytics)
  • marketing cookies (only with consent)

You can manage cookies via your browser settings or cookie banner.
More details: www.vegapolis.cz/cookies


Data security

We implement:

  • HTTPS (SSL/TLS encryption)
  • access control
  • data backups
  • system updates
  • staff training

Despite all measures, absolute security of data transmission over the Internet cannot be guaranteed. We recommend using strong passwords.


Contact details

Email: [email protected]
Address: Vegapolis s.r.o., Václavské náměstí 808/66, 110 00 Prague 1
Phone: +420


Changes to this policy

We may update this policy from time to time. The current version is always available on our website.
We will inform you about significant changes.

Last updated: [insert date]