Privacy Policy
Privacy Policy
In accordance with EU Regulation 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. on personal data processing
Effective date: 1 January 2025 | Version 1.0
1. Data controller
Hookah Market s.r.o.
Address: Prague, Czech Republic
E-mail: info@hookahmarket.cz
Phone: +420 725 588 029
2. What data we collect
When placing an order:
- First and last name
- Delivery and billing address
- E-mail address
- Phone number
- Order data and purchase history
When registering an account:
- E-mail and password (encrypted)
- Profile data
Automatically (cookies and analytics):
- IP address
- Browser and device type
- Pages visited, referral source
3. Purposes and legal bases for processing
| Purpose | Legal basis |
|---|---|
| Performance of the purchase contract | Art. 6(1)(b) GDPR — performance of a contract |
| Invoicing, accounting | Art. 6(1)(c) GDPR — legal obligation |
| Order delivery (sharing data with Zásilkovna) | Art. 6(1)(b) GDPR — performance of a contract |
| Marketing communications (with consent) | Art. 6(1)(a) GDPR — consent |
| Improving the website, analytics | Art. 6(1)(f) GDPR — legitimate interest |
| Age verification (18+) | Act No. 65/2017 Coll. — legal obligation |
4. Sharing data with third parties
We share data only with the following categories of recipients:
- Zásilkovna s.r.o. — for delivery (name, address, phone)
- Accounting service — for maintaining financial records
- Payment gateway — for processing payments (card data is not stored by us)
- Analytics services (Google Analytics) — in anonymized form
We do not sell your data to third parties.
5. Data retention period
| Data type | Retention period |
|---|---|
| Order data, invoices | 10 years (Czech tax law) |
| Account data | Until account deletion + 3 years |
| Marketing consents | Until consent is withdrawn |
| Cookies / analytics | Up to 26 months |
6. Your rights (GDPR)
Right of access
You can request a copy of all data we hold about you.
Right to rectification
You can update inaccurate or outdated data.
Right to erasure
The "right to be forgotten" — deletion of data where legal grounds exist.
Right to restriction
Restriction of processing while data is contested.
Right to portability
Receiving your data in a machine-readable format.
Right to object
Objection to processing for direct marketing purposes.
To exercise your rights, email: info@hookahmarket.cz
You also have the right to lodge a complaint with the Office for Personal Data Protection (ÚOOÚ).
7. Data security
We apply technical and organizational safeguards: SSL encryption, restricted access to data, regular security audits. Passwords are stored exclusively in encrypted form.