01Data controller
- Company
- Kozlů rodinná s.r.o.
- Registered office
- Lány na Důlku 4, 530 02 Pardubice
- Company ID (IČO)
- 23144513
- VAT ID
- CZ23144513
- info@topcarne.eu
registered in the Commercial Register kept by the Regional Court in Hradec Králové, section C, file 55461
For anything about personal data, contact us at info@topcarne.eu. We have not appointed a Data Protection Officer, as we are not required to.
02What data, why, and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Handling and delivering your order, and communication about it | name, email, phone, address, order contents, payment and delivery method | performance of a contract (Art. 6(1)(b) GDPR) |
| Accounting and tax | data on tax and accounting documents | legal obligation (Art. 6(1)(c) GDPR) |
| One reminder about an unfinished cart | email, first name, cart contents, language — saved once you enter your email at checkout | legitimate interest (Art. 6(1)(f) GDPR); can be switched off any time |
| A review request after delivery, and a reminder of an unfinished card payment | email, name, order number and contents | legitimate interest; review requests can be switched off any time |
| Reviews | displayed name, rating and text; purchase verified through the order (email stored only as a one-way hash) | consent given by submitting the review (Art. 6(1)(a) GDPR) |
| Contact form and emails | name, email, message, order number if given | legitimate interest in answering you, or performance of a contract |
| SMS news (only if ticked at checkout) | phone | consent; can be withdrawn any time |
| Visit statistics and referrals (influencers) | cookie identifier, IP address, approximate location (city, country), device and browser, traffic source | legitimate interest in understanding traffic and paying partner commissions |
| Security and abuse prevention | IP address, technical logs | legitimate interest |
Providing the data needed for an order is a contractual requirement — without it we cannot process the order. We make no automated decisions with legal effects about you, and we never sell data.
03Who receives your data
Each recipient gets only what it needs:
- WebSupport s.r.o. — website and database hosting (EU).
- Stripe Payments Europe, Ltd. — card payments (Ireland; only Stripe processes card details).
- Zásilkovna s.r.o. (Packeta) and other carriers — delivery (name, phone, email, address or pick-up point).
- Brevo (Sendinblue SAS) — sending emails (France).
- Google Ireland Ltd. — Firebase for notifying our staff of new orders, and Google Fonts for the site's typefaces (your IP address is passed on when a page loads).
- ip-api.com — approximate location (city, country) from the IP address for visit statistics.
- our accountant and tax adviser, and public authorities where the law requires it.
Some of them (Stripe, Google, ip-api.com) may process data outside the EU, especially in the USA — always under a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.
04How long we keep it
- Orders and documents — 10 years from the end of the year of the order (VAT and accounting law).
- Saved cart for the reminder — 60 days from the last change, then deleted automatically.
- Reviews — while published; we delete one on request.
- Enquiries and emails — as long as needed to deal with them, at most 3 years.
- Visit statistics — at most 2 years.
- List of unsubscribed addresses — permanently, as a one-way hash of the email, so reminders never reach you again.
05Cookies
Cookies are small files a website stores in your browser. We use only our own cookies, with no third-party advertising or tracking services:
| Cookie | Purpose | Lifetime |
|---|---|---|
| cart | cart contents | 7 days |
| language | chosen language | 1 year |
| tc_orders | remembered orders (tracking, and a verified review without typing your email) | 2 years |
| PHPSESSID | session — securing forms and checkout | until the browser closes |
| tc_ref | crediting a purchase to an influencer's referral and its discount | per link, usually 30 days |
| tc_vid | anonymous identifier for visit statistics | 400 days |
Card payment and pick-up point selection load Stripe and Zásilkovna services, which may use their own cookies under their own policies. You can delete or block cookies at any time in your browser settings; without the "cart" cookie, however, the cart will not work.
06Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest. Consent can be withdrawn at any time.
Cart reminders and review requests can be switched off with one click on the "Don't send…" link in any such email. For anything else, write to info@topcarne.eu — we respond within one month.
You may also complain to the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, uoou.gov.cz.
This policy is effective from 28 September 2026. Our Terms and Conditions are here.