Privacy policy
Version V01.08 · effective 27.08.2026
This document is provided as an informational translation. The contract is concluded in Czech. In the event of any discrepancy, the Czech version prevails.
1. Controller
The controller for the Red Teapot online store at www.redteapot.cz is city17 s.r.o. Complete identification details are in the store's Company details section (https://redteapot.cz/pages/company-details). For questions and requests, email info@redteapot.cz.
2. Data and Purposes
Depending on how you use the store, we process data needed for:
- orders, payments, and delivery — identity, contact, billing, payment, and order data;
- customer accounts, returns, complaints, and support — account data, communications, and supporting materials;
- secure store operation — IP address, device and session identifiers, technical logs, and cookie-setting data; and
- marketing — email address, consent or opt-out records, and permitted engagement data.
We obtain data mainly from you and may receive payment, delivery, or service-status data from the relevant provider. Full payment-card details are generally processed by the payment provider, not by the Controller.
3. Legal Bases and Retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Orders, payments, delivery, and customer accounts | performance of a contract | during performance and generally 3 years afterward; account data until account closure |
| Accounting and statutory records | legal obligation | as required by law, generally 5 to 10 years |
| Returns, complaints, and legal claims | contract, legal obligation, and legitimate interests | during handling and generally 3 years afterward; longer during a dispute |
| Inquiries without an order | pre-contract steps or legitimate interests | generally no more than 1 year |
| Security and fraud prevention | legitimate interests | logs generally no more than 12 months; incident data while needed to resolve the incident |
| Marketing and optional cookies | consent or legitimate interests within legal limits | until consent is withdrawn or marketing is declined; according to cookie lifetime |
Required information is needed to enter into and perform a contract or meet a legal obligation. Without it, we may be unable to process an order. Customer accounts, newsletters, and optional cookies are voluntary.
4. Recipients and International Transfers
We disclose data only as necessary to providers of ecommerce and IT platforms, shipping, payments, email, support, accounting, analytics, and marketing services; professional advisers; and public authorities when required by law.
If a provider processes data outside the European Economic Area, the transfer uses a GDPR-recognized mechanism, particularly an adequacy decision or standard contractual clauses.
5. Cookies and Marketing
- We use strictly necessary cookies to operate and secure the store.
- We use analytics and marketing cookies only with legally required consent. Consent can be declined or changed through cookie settings.
- We send newsletters with consent. Within legal limits, we may offer existing customers similar products of our own. Every message provides an opt-out; you may also opt out at info@redteapot.cz.
6. Your Rights
Subject to the GDPR, you may request access, correction, deletion, restriction, or portability; withdraw consent; or object to processing. You may object to direct marketing at any time.
Send requests to info@redteapot.cz. We may reasonably verify identity. We will respond without undue delay, generally within one month; the period may be extended where the GDPR permits.
You also have the right to file a complaint with the Czech Office for Personal Data Protection.
7. Security and Changes
We use appropriate technical and organizational security measures. We do not make automated individual decisions that have legal or similarly significant effects. The current Policy is published in the store with its effective date.