Privacy Policy

I. Data Controller

1. The controller of personal data within the meaning of Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (“GDPR”), is:

Col de Bonte s.r.o.
Company ID No.: 294 13 184
registered office at Široká 124/15, Josefov, 110 00 Prague 1, Czech Republic
registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 205052
(hereinafter referred to as the “Controller”).

2. Contact details of the Controller:

Address: Široká 124/15, Josefov, 110 00 Prague 1, Czech Republic
Email: info@myskino.cz

3. The Controller has not appointed a Data Protection Officer.

II. Personal Data We Process

In connection with the operation of our online store and the provision of our services, we may process in particular the following categories of personal data:

• identification data, in particular first name and surname, and where applicable company name, Company ID No. and VAT ID No.,

• contact details, in particular delivery and billing address, email address and telephone number,

• information relating to orders, purchased goods, prices, payments, delivery, complaints and returns,

• information relating to a customer account, where such an account has been created on the relevant online store,

• information contained in communications with the customer,

• technical data relating to the use of the website, in particular IP address, device information, browser information and website usage data,

• data obtained through cookies and similar technologies where you have consented to their use or where they are necessary for the operation of the website,

• data relating to subscriptions to commercial communications and marketing preferences.

We obtain personal data primarily directly from you when you place an order, register, communicate with us or use our website.

Where necessary, we may also obtain data from our contractual partners, such as payment service providers or delivery companies, in connection with the processing of your order.

III. Purposes and Legal Bases for Processing

1. Processing Orders and Performing Contracts

We process your personal data for the purposes of:

• receiving and processing your order,

• entering into and performing a purchase agreement or other contract,

• delivering goods,

• processing payments,

• communicating with you in connection with your order,

• handling complaints, returns and other contractual rights.

The legal basis for this processing is the performance of a contract or taking steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR.

Providing the personal data necessary to process your order is a contractual requirement. Without such data, we are unable to properly process your order.

2. Compliance with Legal Obligations

We process certain personal data because we are required to do so by applicable laws and regulations, in particular those relating to:

• accounting,

• tax obligations,

• consumer protection,

• record-keeping and handling of complaints.

The legal basis for this processing is compliance with a legal obligation pursuant to Article 6(1)(c) GDPR.

3. Protection of Our Rights and Legitimate Interests

We may also process personal data to the extent necessary for:

• protecting and enforcing our legal claims,

• keeping records of contractual relationships,

• preventing fraud and misuse of our services,

• ensuring the security of our websites and information systems,

• defending ourselves in the event of a legal dispute.

The legal basis for this processing is the legitimate interests of the Controller pursuant to Article 6(1)(f) GDPR.

4. Commercial Communications to Existing Customers

If you are our customer, we may, subject to the conditions laid down by applicable law, send you commercial communications relating to our own similar products or services.

The legal basis for processing personal data is generally the legitimate interests of the Controller pursuant to Article 6(1)(f) GDPR, together with Section 7(3) of Act No. 480/2004 Coll., on Certain Information Society Services.

You may opt out of receiving commercial communications at any time, easily and free of charge, in particular by using the unsubscribe link included in each commercial communication.

If you object to the processing of your personal data for direct marketing purposes, we will no longer process your personal data for that purpose.

5. Newsletter and Marketing to Persons Who Are Not Customers

If you are not our customer, we will send you commercial communications only if you have given us the relevant consent.

The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR, together with Section 7(2) of Act No. 480/2004 Coll., on Certain Information Society Services.

Consent is voluntary and may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Analytics, Personalisation and Online Advertising

If you give us your consent through the cookie settings, we may use analytics and marketing tools for the purposes of:

• measuring website traffic and usage,

• evaluating the effectiveness of advertising,

• personalising content,

• displaying more relevant advertising,

• remarketing and conversion measurement.

The legal basis for processing personal data in such cases is your consent pursuant to Article 6(1)(a) GDPR.

You may change or withdraw your consent at any time through the cookie settings available on the website.

IV. Retention Periods

We retain personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by applicable law.

In particular:

• data necessary for the performance of a contract is retained for the duration of the contractual relationship and subsequently for the period necessary to protect and enforce legal claims,

• data contained in accounting documents is retained for the period required by applicable accounting legislation,

• tax documents are retained for the period required by applicable tax legislation, generally for up to 10 years where such an obligation applies,

• data processed on the basis of consent is processed until the consent is withdrawn or until the purpose of the processing ceases to exist,

• data used for direct marketing on the basis of legitimate interests is processed until you object to such processing or until our legitimate interest ceases to exist,

• data relating to cookies is retained for the period specified in the cookie settings or in the information relating to the individual cookies used.

After the relevant retention period has expired, we will delete or anonymise the personal data unless further retention is required by law or is necessary to protect our rights.

V. Recipients of Personal Data

Personal data may be disclosed, to the extent necessary, to persons who provide services required for the operation of our online store and the fulfilment of our obligations.

These may include in particular:

• providers of e-commerce platforms, web hosting and IT services,

• payment service providers,

• carriers and logistics service providers,

• accounting, tax and, where applicable, legal advisers,

• customer support providers,

• email marketing service providers,

• providers of analytics and marketing tools,

• operators of services used for customer reviews and conversion measurement.

Depending on the particular online store and your consent settings, we may use services provided in particular by Google, Meta (Facebook and Instagram), Seznam.cz (for example Sklik or Zboží.cz) and Heureka Group.

The specific tools that are active on a particular website and further information about their use are provided in the cookie settings or in separate information concerning the use of cookies.

We may also disclose personal data to public authorities where required to do so by applicable law.

VI. Transfers of Personal Data Outside the European Economic Area

Some of our service providers or their contractual partners may process personal data outside the European Union or the European Economic Area, in particular in the United States of America.

Where such transfers take place, we ensure that they are carried out in accordance with Chapter V of the GDPR.

Transfers may in particular be based on:

• an adequacy decision adopted by the European Commission,

• the EU–US Data Privacy Framework, where the recipient is duly certified,

• standard contractual clauses approved by the European Commission,

• or another transfer mechanism permitted under the GDPR.

VII. Cookies and Similar Technologies

We use cookies and similar technologies on our websites.

Strictly Necessary Cookies

Cookies that are necessary for the proper functioning of the website and for the provision of a service you have expressly requested may be used without your consent.

These may include cookies required for:

• operation of the shopping cart,

• logging into a customer account,

• remembering website settings,

• website security,

• storing information about your cookie preferences.

Analytics and Marketing Cookies

We use analytics, marketing and other non-essential cookies only with your prior consent.

You may give, refuse or subsequently change your consent through the cookie settings tool available on the website.

Refusing non-essential cookies does not affect your ability to use the online store normally or purchase goods.

VIII. Your Rights

Subject to the conditions set out in the GDPR, you have in particular:

• the right of access to your personal data pursuant to Article 15 GDPR,

• the right to rectification of inaccurate or incomplete personal data pursuant to Article 16 GDPR,

• the right to erasure of personal data pursuant to Article 17 GDPR,

• the right to restriction of processing pursuant to Article 18 GDPR,

• the right to data portability pursuant to Article 20 GDPR,

• the right to object to processing based on legitimate interests pursuant to Article 21 GDPR,

• the right to withdraw your consent at any time, where processing is based on consent.

Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time. Once you object, we will no longer process your personal data for direct marketing purposes.

You may exercise your rights using the Controller’s contact details specified in Article I above.

If you have concerns about the lawfulness of the processing of your personal data, you also have the right to lodge a complaint with the Office for Personal Data Protection of the Czech Republic.

IX. Automated Decision-Making and Profiling

The Controller does not carry out automated individual decision-making within the meaning of Article 22 GDPR that produces legal effects concerning you or similarly significantly affects you.

In connection with online advertising, and where you have given the relevant consent, standard marketing analysis or the creation of user groups based on activity on the website may take place. Such processing does not in itself constitute automated individual decision-making within the meaning of Article 22 GDPR.

X. Security of Personal Data

The Controller has implemented appropriate technical and organisational measures to protect personal data, taking into account the nature, scope and risks of the processing.

In particular, we use measures aimed at:

• securing access to information systems,

• ensuring secure data transmission,

• managing access permissions,

• protecting customer accounts and passwords,

• regularly updating the systems used,

• backing up data and protecting it against loss or unauthorised access.

Personal data is accessible only to persons who require access in order to perform their employment or contractual duties and who are subject to appropriate confidentiality and data protection obligations.

XI. Final Provisions

This Privacy Policy is intended to provide information about how personal data is processed. Your consent is not required for processing that is necessary to process an order, perform a contract or comply with the Controller’s legal obligations.

We request consent only where consent is actually the relevant legal basis for processing under applicable law, for example for certain forms of marketing or non-essential cookies.

The Controller may update this Privacy Policy from time to time, in particular in response to changes in applicable law, technologies used or the manner in which personal data is processed. The current version will always be published on the relevant website.

This Privacy Policy is effective as of 5 October 2026.