Privacy Policy

1. Data controller

The controller is Zelený drak s.r.o., Company ID No. 24924610, Čenětická 2413/1a, Chodov, 149 00 Prague 4, Czech Republic, email info@svet-karet.cz, telephone +420 608 678 888.

2. Data we process

• the email address entered when placing an order or signing in,
• the selected option, price, currency, status and time of the order and payment,
• payment transaction identifiers and technical identifiers needed to match the payment,
• the time and version of the accepted Terms and Conditions and consent to immediate access,
• necessary access tokens, session data, IP address and technical security logs,
• for a gift voucher, also the optional recipient name and personal message, the voucher code in a protected form and the email address entered when redeeming it.

We do not store the full payment card number or security code. The customer enters these details directly with the SumUp or PayPal payment service.

3. Why we process data

• Entering into and performing a contract: creating the order, verifying payment, activating and delivering access.
• Compliance with legal obligations: maintaining accounting and tax records and handling consumer rights.
• Legitimate interests: protecting the website, preventing misuse, resolving technical errors and establishing, exercising or defending legal claims.

We do not use order data to send marketing communications without a separate legal basis.

4. Recipients of data

Where necessary, data may be disclosed to the payment service providers SumUp or PayPal, hosting and technical infrastructure providers, the Seznam.cz email service provider and professional contractors responsible for operating and securing the website. Data may also be disclosed to public authorities where required by law.

If a supplier processes data outside the European Economic Area, transfers take place only where the conditions of the GDPR are met, in particular on the basis of an adequacy decision or appropriate contractual safeguards.

5. Retention period

We retain data for as long as necessary to perform the contract and subsequently for the period required by accounting, tax and consumer-protection legislation or for as long as necessary to protect legal claims. Unsuccessful orders and technical logs are retained only for the time needed to resolve payment, security and operational issues. The access cookie expires no later than the end of the purchased access period.

6. Necessary cookies

The website uses technically necessary cookies for secure sessions, sign-in, form protection and retention of activated paid access. Without them, orders and access cannot be operated reliably. These cookies are not used for advertising profiling.

After moving to a secure SumUp or PayPal page, the use of cookies is also governed by that payment provider’s rules.

7. Your rights

Subject to the conditions of the GDPR, you have the right to request access to your personal data, rectification or erasure, restriction of processing and data portability, and to object to processing based on legitimate interests. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, website uoou.gov.cz.

You may send a request to info@svet-karet.cz. Before processing a request, we may reasonably verify the requester’s identity.

8. Security and changes

We use appropriate technical and organisational measures, in particular encrypted connections, restricted access rights and non-public storage of access and payment identifiers.

This information is effective from 13 July 2026. If the processing changes materially, an updated version will be published on this page.