Coming Soon: A new website about Prague for kids – in English! Family-friendly tips, maps, games & adventures – all in one place.
Customer support:00420 724 214 774
    Home / PRIVACY POLICY

    PRIVACY POLICY

    Effective from 6 October 2026

    This Privacy Policy explains how Family Friendly Prague collects, uses and protects your personal data when you visit our website, use our online store, create an account, place an order, contact us or subscribe to our newsletter.

    I. Data Controller

    The controller of your personal data within the meaning of Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), is:

    Ing. Růžena Jeleneková
    Business ID No.: 66922933
    Registered office: Sedmikrásková 833/1, 103 00 Prague – Kolovraty, Czech Republic

    E-mail: info@familyfriendlyprague.com
    Phone: +420 724 214 774
    Website: www.familyfriendlyprague.com
    Online store: eshop.familyfriendlyprague.com

    hereinafter referred to as “we”, “us” or the “Controller”.

    We have not appointed a Data Protection Officer, as we are not legally required to do so.

    II. What Personal Data We Process

    Depending on how you use our Website and Online Store, we may process the following categories of personal data:

    1. Identification and contact details

    This may include:

    • first and last name;

    • billing and delivery address;

    • e-mail address;

    • telephone number;

    • company name, Business ID or VAT number, where applicable.

    2. Order and payment information

    This may include:

    • products ordered;

    • order number;

    • order date and status;

    • price and payment information;

    • selected payment method;

    • delivery method;

    • information relating to returns, complaints and refunds.

    We do not normally receive or store complete payment card details. Card payments are processed by the relevant payment service provider.

    3. Customer account information

    If you create a customer account, we may process information connected with that account, such as:

    • login and account identification information;

    • order history;

    • saved delivery and billing information;

    • preferences and other account settings.

    Passwords are stored in a protected form by the technical provider of the Online Store.

    4. Communication with us

    If you contact us by e-mail, telephone, contact form or another communication channel, we may process:

    • your contact details;

    • the content of your message;

    • information necessary to respond to your enquiry or resolve your request.

    5. Marketing and newsletter information

    If you subscribe to our newsletter or receive marketing communications where permitted by law, we may process:

    • your e-mail address;

    • your name, if provided;

    • newsletter preferences;

    • information about your consent or objection to marketing;

    • information about delivery and interaction with newsletters, where permitted by applicable law and your settings.

    6. Technical and website usage data

    When you use our Website or Online Store, certain technical information may be processed, such as:

    • IP address;

    • browser and device information;

    • date and time of access;

    • technical logs;

    • information necessary for security and correct operation of the Website;

    • cookie identifiers and similar technologies, where applicable.

    Further information about cookies and similar technologies is provided in our Cookie Policy and through the cookie settings available on the Website.

    III. Why We Process Personal Data and Our Legal Bases

    We process personal data only where we have a lawful basis for doing so.

    1. Processing orders and performing the purchase agreement

    We process personal data in order to:

    • accept and process your order;

    • receive payment;

    • deliver your goods;

    • communicate with you about your order;

    • handle returns and complaints;

    • provide customer service.

    Legal basis: performance of a contract or steps taken at your request before entering into a contract under Article 6(1)(b) GDPR.

    Providing the personal data necessary to process an order is required for entering into and performing the purchase agreement. Without this information, we may not be able to process your order.

    2. Compliance with legal obligations

    We process certain personal data where necessary to comply with legal obligations, including accounting, tax, consumer protection and other statutory obligations.

    Legal basis: Article 6(1)(c) GDPR.

    3. Protection of our legal rights

    We may retain and use information where necessary to establish, exercise or defend legal claims, prevent misuse of our services, protect our property or resolve disputes.

    Legal basis: our legitimate interests under Article 6(1)(f) GDPR.

    Our legitimate interest consists in protecting our rights, preventing fraud and misuse and ensuring the proper operation of our business.

    4. Marketing to existing customers

    Where permitted by applicable law, we may use the electronic contact details of existing customers to send information about our own similar products or services.

    You may object to this use when providing your contact details and may unsubscribe from marketing communications at any time, free of charge, using the unsubscribe link contained in each marketing e-mail or by contacting us.

    Legal basis: our legitimate interest under Article 6(1)(f) GDPR together with applicable rules governing electronic marketing.

    5. Newsletter and other marketing based on consent

    If you are not an existing customer, we will send newsletters and other electronic marketing communications where you have given the required consent.

    Legal basis: your consent under Article 6(1)(a) GDPR and applicable electronic communications legislation.

    You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

    6. Website analytics and marketing technologies

    Where we use non-essential analytics, advertising or similar technologies requiring consent, they are activated only after you have provided the relevant consent through our cookie settings.

    Legal basis: consent under Article 6(1)(a) GDPR, where consent is required.

    Necessary technical technologies required for the operation, security and functionality of the Website may be used without marketing consent where permitted by law.

    IV. How Long We Keep Personal Data

    We retain personal data only for as long as necessary for the purpose for which it was collected and for the periods required by applicable law.

    In particular:

    Order and contractual data

    Personal data connected with purchases is retained for the period necessary to perform the purchase agreement and subsequently for the period necessary to protect our legal rights and comply with statutory obligations.

    Accounting and tax records

    Personal data contained in accounting and tax documents is retained for the periods required by applicable Czech and EU legislation.

    Certain accounting records are generally required to be retained for 5 years, while certain tax and VAT records may need to be retained for 10 years.

    Where transactions are recorded for the purposes of the EU One Stop Shop (OSS) VAT scheme, the relevant records may be retained for 10 years where required by applicable legislation.

    Customer accounts

    Information connected with a customer account is retained for as long as the account remains active and thereafter for a reasonable period where necessary to comply with legal obligations, resolve disputes or protect our rights.

    You may ask us to delete your customer account at any time. Some information may nevertheless need to be retained where required by law.

    Marketing based on consent

    Where personal data is processed on the basis of consent, we process it until the consent is withdrawn or until the purpose of processing ceases to exist.

    Information documenting that consent was given or withdrawn may be retained for as long as necessary to demonstrate compliance with our legal obligations.

    Existing-customer marketing

    Where marketing is based on our relationship with an existing customer, we process the relevant electronic contact details until you object to such processing or until there is no longer a legitimate reason to retain them for this purpose.

    Communications

    Correspondence and customer enquiries may be retained for a reasonable period depending on their nature and whether they relate to an order, complaint, legal obligation or potential legal claim.

    V. Who May Receive Your Personal Data

    We share personal data only where necessary for the purposes described in this Privacy Policy.

    Recipients or processors may include:

    E-commerce and hosting providers

    Providers responsible for operating and technically supporting the Website and Online Store, including the Shoptet e-commerce platform.

    Payment providers

    Banks, payment gateways and other payment service providers used to process payments, depending on the payment method selected during checkout.

    Delivery providers

    Postal operators, courier companies and collection-point providers involved in delivering your order.

    Only the data necessary to arrange and complete delivery is provided to the relevant delivery provider.

    E-mail and marketing service providers

    Providers used to manage newsletters and customer communications, including Ecomail, where applicable.

    Accounting, tax and professional advisers

    Accountants, tax advisers, legal advisers and other professional service providers where access to personal data is necessary for providing their services.

    IT and security providers

    Providers supplying hosting, technical support, data storage, website security and other IT services.

    Public authorities

    Personal data may be provided to public authorities, courts, tax authorities or other bodies where required by law or a legally binding request.

    We require processors acting on our behalf to process personal data only according to our instructions and to provide appropriate protection for that data.

    VI. Transfers Outside the European Economic Area

    We primarily use service providers operating within the European Union or European Economic Area.

    However, certain technical, analytics, marketing, cloud or other service providers may process personal data outside the European Economic Area, depending on the services enabled on the Website.

    Where personal data is transferred outside the European Economic Area, we ensure that an appropriate legal mechanism is used as required by the GDPR. This may include:

    • a European Commission adequacy decision;

    • the European Commission’s Standard Contractual Clauses;

    • another legally recognised safeguard under the GDPR.

    Further information about transfers connected with individual cookies or third-party technologies, where applicable, is provided through our Cookie Policy or cookie settings.

    VII. Cookies and Similar Technologies

    Our Website and Online Store may use cookies and similar technologies.

    Necessary cookies

    Necessary cookies are used to provide essential functions such as:

    • maintaining the shopping cart;

    • account login;

    • security;

    • processing orders;

    • remembering essential technical settings.

    These technologies may be used without consent where they are strictly necessary for providing the service requested by the user.

    Analytics and marketing cookies

    Analytics, advertising and other non-essential cookies are used only where permitted by law and, where required, after you have provided your consent.

    You can accept, reject or change your preferences through the cookie settings available on the Website.

    Refusing non-essential cookies does not prevent you from using the basic functions of the Website or placing an order.

    Detailed information about the cookies currently used, their providers, purposes and storage periods is available in our Cookie Policy / Cookie Settings.

    VIII. Automated Decision-Making and Profiling

    We do not carry out solely automated decision-making within the meaning of Article 22 GDPR that produces legal effects concerning you or similarly significantly affects you.

    We may use basic segmentation or personalisation for marketing purposes, for example according to newsletter preferences, purchase history or interests, where permitted by applicable law.

    Such processing does not result in decisions producing legal or similarly significant effects.

    IX. Your Rights

    Subject to the conditions set out in the GDPR, you have the following rights:

    Right of access

    You have the right to ask whether we process your personal data and, where applicable, to obtain access to that data and related information.

    Right to rectification

    You have the right to have inaccurate personal data corrected and incomplete data completed.

    Right to erasure

    You may request deletion of your personal data where the conditions set out in Article 17 GDPR are met.

    The right to erasure is not absolute. We may retain information where processing is required by law or necessary for establishing, exercising or defending legal claims.

    Right to restriction of processing

    You may request restriction of processing in the circumstances specified in Article 18 GDPR.

    Right to data portability

    Where processing is based on consent or a contract and carried out by automated means, you may have the right to receive personal data you provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller.

    Right to object

    You have the right to object to processing based on our legitimate interests.

    Where personal data is processed for direct marketing purposes, you have the right to object at any time. If you object to processing for direct marketing, we will no longer process your personal data for that purpose.

    Right to withdraw consent

    Where processing is based on consent, you may withdraw your consent at any time.

    Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.

    Right to lodge a complaint

    If you believe that your personal data has been processed in breach of applicable data protection law, you have the right to lodge a complaint with a supervisory authority.

    Our competent supervisory authority is:

    Office for Personal Data Protection
    Úřad pro ochranu osobních údajů
    Pplk. Sochora 27
    170 00 Prague 7
    Czech Republic

    E-mail: posta@uoou.gov.cz
    Website: uoou.gov.cz

    If you live in another EU Member State, you may also lodge a complaint with the supervisory authority in your country of habitual residence, place of work or the place of the alleged infringement.

    X. How to Exercise Your Rights

    You can exercise your data protection rights or ask questions about the processing of your personal data by contacting us at:

    E-mail: info@familyfriendlyprague.com

    or:

    Ing. Růžena Jeleneková
    Sedmikrásková 833/1
    103 00 Prague – Kolovraty
    Czech Republic

    We may ask you to provide information necessary to verify your identity where reasonably required to protect your personal data.

    We will respond to requests within the time limits required by applicable data protection legislation.

    XI. Security of Personal Data

    We take appropriate technical and organisational measures to protect personal data against:

    • unauthorised access;

    • loss or destruction;

    • misuse;

    • alteration;

    • unauthorised disclosure.

    Access to personal data is limited to persons and service providers who need it for the relevant purpose and who are subject to appropriate confidentiality and data protection obligations.

    No method of electronic storage or transmission over the internet can guarantee absolute security, but we take reasonable measures appropriate to the nature and risks of the processing.

    XII. Children’s Personal Data

    Our Online Store is intended for adults making purchases.

    We do not knowingly request children to provide personal data for the purpose of purchasing goods.

    Where our Website includes content intended for families or children, this does not mean that we intentionally collect personal data directly from children unless expressly stated otherwise.

    XIII. Changes to this Privacy Policy

    We may update this Privacy Policy where necessary, for example due to changes in legislation, our services or the way we process personal data.

    The current version will always be published on our Website or Online Store together with its effective date.

    Where a change materially affects the way we process personal data, we will provide additional notice where required by law.

    Effective date: 6 October 2026