Processing of personal data

Privacy Policy (GDPR)

1. Introduction

The company Mutiara Pearl s.r.o., registered at Ke Stírce 338/51, 18200 Prague, Czech Republic, ID: 19446446, registered with the Municipal Court in Prague, file number C 386726 (hereinafter referred to as the "Controller"), is the controller of your personal data.

This document explains what data we process, for what purposes and legal grounds, how long we retain them, and what rights you have.

2. Scope of Processed Data

We process the following personal data:

• Name and surname

• Email address

• Telephone number

• Billing and delivery address

• IP address

• Order information (product, date, value)

• Communication and interaction history

• Registration and login details

3. Purposes and Legal Grounds for Processing

Your personal data is processed for the following purposes:

4. Data Retention Period

• Orders and invoices: 10 years as required by accounting and tax laws

• Marketing data: until consent is withdrawn (or maximum 3 years after last activity)

• Registered accounts: until the account is active or up to 5 years from last login

5. Recipients of Personal Data

Your data may be shared with the following processors:

• Courier companies: DPD, Packeta, Czech Post, DHL

• Payment providers: PayPal, Caomgate

• IT and hosting providers: Upgates

• Marketing and analytics tools: Google (Analytics, Ads), Meta (Facebook, Instagram)

6. Cookies

We use cookies to ensure website functionality, personalize content, and analyze traffic. More details are provided in a separate cookie policy.

7. Automated Decision-Making and Profiling

We do not use automated decision-making that produces legal effects. Profiling may be used for marketing purposes.

8. Data Subject Rights

You have the right to:

• Access your personal data

• Rectify or erase your data

• Restrict processing

• Object to processing

• Data portability

• Withdraw your consent at any time

To exercise your rights, please contact us: eshop@buka.cz

These rights are granted under the GDPR and apply across the EU, including Ireland.

9. Supervisory Authority

If you believe that the processing of your personal data violates the applicable legislation, you have the right to file a complaint with the competent supervisory authority.

As our company is established in the Czech Republic, the competent supervisory authority is:

The Office for Personal Data Protection
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
https://www.uoou.cz

However, under the GDPR, you may also choose to file a complaint with a supervisory authority in your country of residence or where the alleged infringement occurred.

For Ireland, the authority is:
Data Protection Commission (DPC)
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
https://www.dataprotection.ie

10. Contact

• Controller: Mutiara Pearl s.r.o.

• Registered address: Ke Stírce 338/51, 18200 Prague, Czech Republic

• Email: eshop@buka.cz

• Phone: +420 222 521 250