1. Personal Data Controller
The controller of your personal data is:
Business name: CZECHCEMENTBOARD s.r.o.
Registered office: Opletalova 921/6, 110 00 Prague 1
ID no.: 05365724
VAT no.: CZ05365724
E-mail: ordine@beacaffe.cz
Telephone: +420 777 841 353
The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and relevant Czech legal regulations.
2. What Personal Data We Process
2.1 Data obtained during an order
- Name and surname
- Delivery address
- Email address
- Phone number
- Order and payment data (without payment card number – this is managed by the payment gateway)
2.2 Data obtained when using the website
- IP address and device identifiers
- Website browsing data (pages, times, source of visit) – via Google Analytics
- Data on interaction with advertisements – via Meta Pixel (Facebook/Instagram)
- Cookies – see section 6
2.3 Data for email marketing
- Email address (with consent to newsletter subscription)
- Name (if provided)
- Data on interaction with emails (opening, clicks) – Ecomail
3. Purposes and Legal Basis for Processing
We process your data only for the following purposes and on the basis of the relevant legal basis:
Performance of a contract (Art. 6(1)(b) GDPR): order processing, goods delivery, complaint handling, customer support.
Fulfillment of legal obligations (Art. 6(1)(c) GDPR): accounting and tax obligations, archiving of documents according to law.
Legitimate interest (Art. 6(1)(f) GDPR): fraud protection, website traffic analysis (Google Analytics), remarketing campaigns (Meta Pixel).
Consent (Art. 6(1)(a) GDPR): sending newsletters and marketing emails (Ecomail). Consent can be revoked at any time.
4. To Whom We Transfer Your Data
We transfer your personal data only to verified processors who process it only on our instructions:
- Shopify Inc. – operator of the e-shop platform (servers in the EU/EEA or with appropriate safeguards)
- Payment gateway – processor of payment transactions (we never see or process the card number)
- Carriers – for the purpose of delivering goods (name, address, phone)
- Ecomail – platform for email marketing (email, name)
- Google LLC – analytics (Google Analytics 4); data may be transferred to the USA based on standard contractual clauses
- Meta Platforms Ireland Ltd. – Meta Pixel for advertising purposes; data may be transferred to the USA based on standard contractual clauses
- Accounting and legal services – to the extent necessary to fulfill legal obligations
We do not sell data to third parties or provide it for their own marketing purposes.
5. Data Retention Period
- Order data: 10 years (obligation under the Accounting Act)
- Customer accounts: for the duration of the account + 3 years after the last activity
- Email address for newsletter: until consent is revoked
- Analytics (Google Analytics): according to data retention settings in Google Analytics (standardly 14 months)
- Cookies: see section 6
6. Cookies
We use cookies on our website. Cookies are small text files stored in your browser.
Types of cookies we use:
Necessary cookies: ensuring basic website functions (cart, login, payment). We do not need your consent for processing.
Analytical cookies: Google Analytics – anonymized traffic measurement. We only use with your consent.
Marketing cookies: Meta Pixel – conversion tracking and remarketing. We only use with your consent.
You can manage cookie consent via the cookie bar on our website. Consent can be revoked or changed at any time in the cookie settings.
7. Your Rights
As a data subject, you have the following rights:
Right of access (Art. 15 GDPR): you can request confirmation whether we process your data and a copy thereof.
Right to rectification (Art. 16 GDPR): you can request the rectification of inaccurate data.
Right to erasure (Art. 17 GDPR): you can request the erasure of data if it is no longer necessary for the purposes for which it was collected or if you withdraw consent.
Right to restriction of processing (Art. 18 GDPR): under certain conditions, you can request the restriction of processing.
Right to data portability (Art. 20 GDPR): you can request your data in a machine-readable format.
Right to object (Art. 21 GDPR): you can object to processing based on legitimate interest (including profiling for advertising purposes).
Right to withdraw consent: consent to the newsletter or cookies can be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.
Please submit your request by email to ordine@beacaffe.cz. We will respond within 30 days.
8. Right to lodge a complaint with a supervisory authority
If you believe that we are processing your personal data in violation of the GDPR, you have the right to lodge a complaint with the supervisory authority:
Office for Personal Data Protection (ÚOOU): www.uoou.cz, Pplk. Sochora 27, 170 00 Prague 7, phone: +420 234 665 111
9. Data Security
We implement technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. The website uses encrypted connection (HTTPS). Payment data is processed exclusively by the payment gateway, and we do not have access to it.
10. Changes to these policies
We may update these privacy policies periodically. The current version is always published on our website. We will inform you of significant changes by email or a notice on the website.
These privacy policies are effective from April 1, 2026.