MYCRUSH logo

Principles of working with your data (GDPR) MyCrush.cz

4/15/2026

MyCrush s.r.o.
Company ID No.: 23302810
File No.: C 46764 maintained by the Regional Court in Plzeň
Date of registration: 21 May 2025
Registered office: náměstí Generála Píky 2703/27, Východní Předměstí, 326 00 Plzeň
E-mail: info@mycrush.cz

We operate an e-shop on the website www.mycrush.cz. For the provision of our services, the sale of goods, and the operation of the website, we process certain personal data.

The processing of personal data is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on the Processing of Personal Data.

What personal data we process

  • Identification data: first name, last name, Company ID No./VAT ID No. (if you purchase on behalf of a company).
  • Contact data: e-mail, telephone number, delivery address, and billing address.
  • Order data: purchased products, payment method, bank account number, complaints.
  • Website usage data: IP address, cookies, device, browser, browsing history.
  • Account settings: saved addresses, login details, newsletter settings, wishlist.
  • Derived data: demographic data (age, gender, preferences) inferred from website behavior.

Purposes of processing and legal bases

We process personal data for the following purposes:

  • Performance of a contract: processing the order, delivering the goods, communication about the order status.
  • Compliance with legal obligations: accounting and tax purposes, document retention (10 years).
  • Customer support: handling inquiries, complaints, communication via e-mail, telephone, or chat.
  • Legal basis: Article 6(1)(b) GDPR – performance of a contract.
  • Product reviews and ratings: if you decide to leave a review, we process your name (or nickname), e-mail, and review text.
  • Legal basis: Article 6(1)(f) GDPR – legitimate interest (verification of the authenticity of reviews).
  • Contests and marketing campaigns: if you participate in a contest, we process the data necessary for its organization (name, e-mail, delivery address).
  • Legal basis: Article 6(1)(a) GDPR – consent.
  • Content personalization and recommendations: we use data about your behavior on the website (cookies, order history) to tailor our offer.
  • Legal basis: Article 6(1)(f) GDPR – legitimate interest; for marketing cookies, Article 6(1)(a) GDPR – consent.
  • Legitimate interest: direct marketing to customers, service improvement, fraud prevention.
  • Consent: newsletters, marketing cookies, personalized offers.

Retention period

  • Order data: 10 years (tax and accounting obligations).
  • Account data: for the duration of the active account, up to 10 years from the last purchase.
  • Newsletter: 2 years from consent or the last purchase.
  • Cookies: according to browser settings, up to 13 months.
  • Reviews: for the duration of publication on the website, up to 5 years.
  • Contests: for the duration of the contest and 1 year after its end.

Transfer of data to third parties

We transfer your data only to partners who help us operate the business:

  • carriers (e.g. Zásilkovna, DPD, PPL, Česká pošta),
  • payment service providers,
  • e-shop platform provider,
  • e-mailing service provider.

We process data only within the territory of the EU. If data were to be transferred outside the EU, we would ensure protection through standard contractual clauses.

Cookies and analytics

  • Necessary cookies: for website functionality (without consent).
  • Analytical and marketing cookies: only on the basis of consent.
  • Consent may be withdrawn at any time via the cookie bar or browser settings.


Your rights

Under the GDPR, you have the right:

  • to access personal data and to have it corrected or erased,
  • to restriction of processing,
  • to object to processing,
  • to data portability,
  • to withdraw consent to processing,
  • to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).

Security and safeguards

    • We use technical and organizational measures (encryption, secure servers, restricted access).
    • Your data is considered confidential.
    • No automated decision-making or profiling takes place.

    Contact

      If you have any questions, contact us by e-mail at: info@mycrush.cz. No data protection officer has been appointed in our company.

      This document fulfills the information obligation of the personal data controller under Articles 13 and 14 GDPR.