Privacy policy
Privacy Policy
Effective from 1 November 2026
1. Controller
The controller of your personal data is Factory51 s.r.o., with its registered office at Džbánice 37, 671 71 Džbánice, Czech Republic, Company ID (IČO) 23908602, registered in the Commercial Register maintained by the Krajský soud v Brně (Regional Court in Brno), Section C, File 148096, the operator of the Prixiro store at prixiro.cz and prixiro.eu (“we”, “us”). Contact: info@prixiro.eu, +420 722 176 505, postal address Factory51 s.r.o., Spálená 3, 602 00 Brno, Czech Republic.
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Coll., on the Processing of Personal Data. We have not appointed a data protection officer.
2. What data we process, why, and for how long
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Processing orders, payment, delivery and order-related communication | name, address, email, phone number, order contents, payment details (excluding card number) | performance of a contract (Art. 6(1)(b) GDPR) | for the duration of the contract and then 4 years from delivery of the goods (limitation period plus a reserve for asserting claims) |
| Withdrawals and complaints | data in the withdrawal or complaint, correspondence, photos, refund details | performance of a contract and legal obligation (Art. 6(1)(b) and (c) GDPR) | 4 years from the withdrawal or complaint being handled |
| Accounting and tax | data on tax documents | legal obligation (Art. 6(1)(c) GDPR) | 10 years from the end of the year in which the document was issued |
| Customer account | email, name, addresses, order history | performance of a contract (Art. 6(1)(b) GDPR) | until the account is closed |
| Prixiro+ loyalty programme | email, order history and value, level reached | performance of a contract – programme terms (Art. 6(1)(b) GDPR) | for as long as the account exists |
| Newsletter and WELCOME10 welcome discount | email, name where provided, use of the code | consent (Art. 6(1)(a) GDPR) | until consent is withdrawn (unsubscribe) |
| Offers of similar goods to existing customers | email, purchase history | legitimate interest in direct marketing (Art. 6(1)(f) GDPR, Section 7(3) of Act No. 480/2004 Coll.) | until you object (unsubscribe) |
| Customer support and contact form | name, email, phone number, content of the enquiry | legitimate interest in handling the enquiry, or performance of a contract | while the enquiry is being handled and then no longer than 2 years |
| Fraud prevention and store security | IP address, device and order data | legitimate interest (Art. 6(1)(f) GDPR) | for the period strictly necessary, usually 1 year |
| Traffic measurement and marketing (analytics and marketing cookies) | cookie identifiers, device data and data on website behaviour | consent (Art. 6(1)(a) GDPR, Section 89(3) of Act No. 127/2005 Coll.) | until consent is withdrawn; depending on the type of cookie, no longer than 2 years |
Providing the data needed to process an order is a contractual requirement – without it, we cannot fulfil your order. All other data is provided voluntarily.
3. Who we share data with
We share data only to the extent necessary with the following recipients:
- the operator of the e-commerce platform Shopify (Shopify International Ltd., Ireland) as our processor, including the Shopify Payments service for payments by card, Apple Pay and Google Pay,
- Packeta (Zásilkovna) and, in Cyprus, BOX NOW, and where applicable their partner carriers in the country of delivery – to the extent necessary to deliver the parcel,
- Google Ireland Ltd. (Google Analytics, Google Ads, Google Merchant Center, Google Tag Manager) and Meta Platforms Ireland Ltd. (Meta pixel) – only with your cookie consent,
- providers of email services for sending the newsletter and order messages,
- accountants and tax advisers, and public authorities where required by law.
Independent controllers: Shopify (e.g. when you use Shop Pay or the Shop app), PayPal (Europe) S.à r.l. et Cie, S.C.A. (payment via PayPal), the providers of Apple Pay and Google Pay, and Packeta (e.g. for delivery to a pickup point or Z-BOX) process some data as independent controllers under their own privacy policies. For the collection and transmission of data via the Meta pixel, we are joint controllers with Meta Platforms Ireland Ltd. (Art. 26 GDPR); any further processing is carried out by Meta as an independent controller.
4. Transfers outside the EU
Some recipients (e.g. Shopify, Google, Meta, PayPal) may transfer data outside the EU, in particular to the USA. Such transfers are based on a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses approved by the European Commission.
5. Cookies
On your first visit to the website, we display a cookie banner in which you can give, refuse or customise your consent by category. Without your consent, we store only strictly necessary cookies.
- Strictly necessary cookies (Shopify – cart, checkout, login, security, storing your cookie choice) are used on the basis of our legitimate interest in operating the store; they cannot be switched off.
- Analytics cookies (Shopify Analytics; Google Analytics 4 – Google Ireland Ltd.) are stored only with your consent.
- Marketing cookies (Google Ads and Google Merchant Center via the Google & YouTube app – Google Ireland Ltd.; Meta pixel via the Facebook & Instagram app – Meta Platforms Ireland Ltd.) are stored only with your consent.
- Google Tag Manager is used to manage these tools; it fires analytics and marketing tags only after you have given your consent.
You can withdraw or change your consent at any time in the cookie settings (link in the website footer) or by deleting cookies in your browser. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal.
6. Your rights
You have the right:
- to access your data and obtain a copy of it,
- to have inaccurate data rectified,
- to erasure (the “right to be forgotten”), unless we need the data for legal reasons,
- to restriction of processing,
- to data portability,
- to withdraw your consent at any time (e.g. via the link in every newsletter or in the cookie settings),
- to lodge a complaint with Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz, or with the supervisory authority of the EU country in which you live, work or where the alleged infringement took place.
Right to object: You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest. You may object to processing for direct marketing purposes at any time and without giving reasons (e.g. via the unsubscribe link in every email); in that case we will no longer process your data for that purpose.
We handle requests sent to info@prixiro.eu without undue delay and no later than within one month.
7. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal effects concerning you. Your level in the Prixiro+ loyalty programme is determined automatically solely on the basis of your total spend.
8. Changes to this policy
We may update this policy, for example when we introduce a new tool. The current version is always published on this page together with its effective date.