Privacy policy

Updated: 12 September 2026

1. Who processes your personal data

The controller of personal data belonging to visitors and customers of potmehud.cz is Potmehúd s.r.o., company registration number (IČO): 22505989, with its registered office at Nad Konvářkou 309/15, 150 00 Praha 5 – Radlice, Czech Republic. Please contact the controller directly with privacy enquiries or to exercise your rights:

2. What data we process and why

Orders and customer communication. We process the information you provide when buying from us or contacting us: your name, contact and delivery details, billing details, order contents, payment information and related messages. We use this to fulfil your order, arrange delivery and deal with enquiries and complaints. The legal basis is entering into and performing a contract, or taking steps before entering into a contract, under Article 6(1)(b) of the GDPR. We cannot fulfil a purchase without the information necessary for the order.

Legal obligations. We retain information on accounting and tax documents to comply with legal obligations under Article 6(1)(c) of the GDPR.

Protecting our rights and running the website. Necessary records of communication, orders and technical operations may be used to protect legal claims, resolve disputes and keep the website secure. The legal basis is legitimate interests under Article 6(1)(f) of the GDPR. You may object to processing based on legitimate interests.

Marketing messages. If we send you offers, we do so under the conditions of Czech Act No. 480/2004 Coll.: with your consent or, where permitted by law, to our existing customers with an option to opt out. You may withdraw your consent and object to direct marketing at any time using the contact details above. Placing an order does not constitute general consent to marketing.

3. Cookies and Google Analytics

The website uses necessary cookies to operate the shop and store your consent choices. We use Google Analytics 4, measurement ID G-S25VL3HCLV, to measure visits and improve the website. Analytics cookies are enabled only after you consent to statistics; the legal basis for this measurement is your consent under Article 6(1)(a) of the GDPR.

Analytics primarily processes information about the pages you visit, your interactions, the source of your visit and the technical characteristics of your device and browser. The website uses Google Consent Mode: if you reject analytics cookies, limited technical signals may still be sent to Google without analytics cookies, such as your consent status and information about a page loading. Rejecting cookies therefore does not stop all communication with Google.

You can accept, reject or adjust optional cookies using the Cookie settings button. Withdrawing consent does not affect the lawfulness of processing before withdrawal. Details of cookies, their purposes and lifetimes, and how to manage your preferences are available in our Cookie policy. Google Analytics cookies can last for up to two years; cookie lifetimes differ from the retention period for data on Google’s servers.

Contact forms use Google reCAPTCHA to help prevent spam. When it is used, Google may process technical information about your device and your interaction with the form. Information about Google’s processing is available in its Privacy Policy.

4. Who may have access to your data

The shop runs on WordPress with WooCommerce and uses Websupport hosting. Where necessary, data may be accessed by hosting and technical service providers, those handling delivery and payment, and those handling accounting or related legal obligations. The carrier or payment method depends on your choice when ordering. Data may also be disclosed to the relevant authorities where required by law.

Google is also a recipient in connection with Analytics and reCAPTCHA. Its services may involve processing outside the European Economic Area, including in the USA. Google explains the transfer mechanisms it uses, including the EU–US Data Privacy Framework and standard contractual clauses, on its Legal frameworks for data transfers page. You may ask the controller for further information about recipients and safeguards for specific processing activities.

5. How long we keep your data

Retention periods depend on the purpose and type of data. We retain order data while fulfilling the order and meeting related warranty and complaint obligations, and subsequently to the extent needed to establish or defend legal claims during the applicable limitation periods. We retain accounting and tax documents for the periods required by the relevant legislation.

We keep information from general enquiries for as long as needed to respond and handle follow-up communication. We stop using data solely on the basis of consent for that purpose once consent is withdrawn; necessary records of consent or withdrawal may be retained to demonstrate compliance. Analytics data is subject to the retention settings in Google Analytics; you may ask the controller for details about specific data. Once the purpose and any retention obligation no longer apply, we delete or anonymise the data.

6. Your rights

Subject to the conditions of the GDPR, you may request access to your data, rectification, erasure or restriction of processing, and exercise your right to data portability. You may object to processing based on legitimate interests; you may object to direct marketing at any time. You may withdraw consent at any time, as easily as you gave it.

Send requests to pivo@potmehud.cz or use the other contact details above. You also have the right to contact a supervisory authority, in particular the Czech Office for Personal Data Protection.

7. About this document

This document explains how personal data is processed when you use the website and shop. Reading it or placing an order does not constitute consent to every form of processing. Where consent is required, we obtain it separately. We publish the current version on this page.