Privacy policy

This is an English translation of the Czech Privacy Policy. In the event of any discrepancy, the Czech version prevails.

This Privacy Policy explains how personal data is collected, used and protected in connection with the website rekorder.cz (the “Website”), in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”).

Data controller:

Rekordér Studio s.r.o.

registered office: Plzeňská 3352/156, Smíchov, 150 00 Prague 5, Czech Republic

Company ID (IČO): 30104025

registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 457354

E-mail: matej@rekorder.cz, phone: +420 778 418 605

(the “Controller”)

The Controller has not appointed a data protection officer. You can send any questions to matej@rekorder.cz.

I. Processing of Personal Data When You Make a Purchase

1.1. In connection with your Order, we process the following personal data:

• first and last name, delivery and billing address,
• e-mail address and phone number (if provided),
• Order details (purchased Goods, price, shipping and payment method, order history),
• for business customers, company name, company ID and VAT ID,
• payment details (transaction result and identifier); payment card details are processed by the payment service provider and the Controller has no access to them,
• User Account details, if you have created one.

1.2. Purposes and legal bases of processing:

• conclusion and performance of the Contract, including delivery of the Goods and handling of withdrawals and Complaints – Art. 6(1)(b) GDPR,
• compliance with legal obligations, in particular accounting and tax obligations – Art. 6(1)(c) GDPR,
• protection of the Controller’s legal claims and fraud prevention – legitimate interest under Art. 6(1)(f) GDPR.

1.3. We process personal data for the duration of the Contract and thereafter for the period necessary to protect legal claims (usually 4 years from the last performance). We keep accounting records for the period required by law (in particular 5 years under the Accounting Act, or longer under tax regulations). We process User Account data until the account is deleted.

II. Marketing Communications (Newsletter)

2.1. We may send customers who have made a purchase marketing communications about similar goods under Section 7(3) of Act No. 480/2004 Coll., on Certain Information Society Services, and on the basis of our legitimate interest (Art. 6(1)(f) GDPR), unless you declined this option when making the purchase.

2.2. If you subscribe to the newsletter through a form on the Website, we process your e-mail address on the basis of your consent (Art. 6(1)(a) GDPR).

2.3. You can unsubscribe at any time free of charge using the link in each e-mail or by writing to matej@rekorder.cz. After you unsubscribe, we will not send you any further marketing communications. We process your e-mail address for marketing purposes for no longer than 5 years from your last purchase or until you unsubscribe.

III. Recipients of Personal Data

3.1. We disclose personal data only to the extent necessary to the following recipients (processors or, where applicable, independent controllers):

• e-commerce platform and newsletter provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland,
• payment processing (Shopify Payments): Stripe Payments Europe, Limited, Ireland, and other providers of payment methods offered at checkout (e.g. Klarna, Apple, Google),
• shipping: Zásilkovna s.r.o. (Packeta), Českomoravská 2408/1a, 190 00 Prague 9, Czech Republic, and its partner carriers in the destination country,
• collection and display of reviews: Judge.me,
• analytics and advertising: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (only with your consent to the relevant cookies),
• the Controller’s e-mail and office services provider,
• the Controller’s external accountant and tax advisor,
• public authorities, where required by law.

3.2. Some recipients or their parent companies may process data outside the European Economic Area, in particular in the USA (Google LLC, Meta Platforms, Inc.) and Canada (Shopify Inc.). Such transfers are based on European Commission adequacy decisions (Canada; the USA for companies certified under the EU–US Data Privacy Framework) or on standard contractual clauses approved by the European Commission.

IV. Cookies

4.1. Cookies are small text files that the Website stores on your device.

4.2. We use strictly necessary cookies, without which the Website cannot function (e.g. cart, checkout, security, storing your cookie choice), on the basis of legitimate interest (Art. 6(1)(f) GDPR) and Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications.

4.3. We use analytics and marketing cookies only with your prior consent (Art. 6(1)(a) GDPR), which you give in the cookie banner. You can withdraw or change your consent at any time in the cookie banner on the Website or by deleting cookies in your browser settings.

4.4. Overview of cookies used:

Tool	Provider	Purpose	Type	Storage period
Shopify	Shopify International Limited, Ireland	Operation of the e-shop, cart, checkout, security, storing consent	Necessary	session up to 1 year
Shopify Analytics	Shopify International Limited, Ireland	Traffic and sales statistics	Analytics	up to 1 year
Google Analytics	Google Ireland Limited, Ireland	Measuring traffic and behaviour on the website	Analytics	up to 2 years
Google Ads	Google Ireland Limited, Ireland	Measuring and targeting ads in Search, on YouTube and in the Display Network	Marketing	up to 13 months
Meta Pixel (Facebook, Instagram)	Meta Platforms Ireland Limited, Ireland	Measuring and targeting ads on Facebook and Instagram	Marketing	up to 3 months
Judge.me	Judge.me	Displaying reviews	Necessary / functional	according to the provider’s settings

V. Security of Personal Data

5.1. The Controller has taken appropriate technical and organisational measures to protect personal data, including restricting access to authorised persons only and using secure processor services.

VI. Your Rights

6.1. In connection with the processing of personal data, you have the right:

• to access your personal data and obtain a copy,
• to have inaccurate data rectified,
• to erasure, if there is no longer a reason for processing and no legal obligation prevents it,
• to restriction of processing,
• to portability of data processed on the basis of consent or a contract,
• to object to processing based on legitimate interest; you may object to processing for direct marketing purposes at any time, after which we will no longer process your data for that purpose,
• to withdraw your consent at any time, without affecting the lawfulness of processing before its withdrawal.

6.2. You can exercise your rights by e-mail at matej@rekorder.cz. We will respond to your request without undue delay and no later than within one month.

6.3. You have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, https://uoou.gov.cz, or with the supervisory authority in your country of residence.

6.4. We do not carry out automated decision-making or profiling with legal effects concerning you.

VII. Final Provisions

7.1. The Controller may update this Privacy Policy. The current version is always published on the Website.

This Privacy Policy takes effect on 2 November 2026.