1. Introduction
This Privacy Policy explains how KRAGO Acc s.r.o., Company ID No.: 07827911, with its registered office at Londýnská 730/59, 120 00 Prague 2, Czech Republic, email: kragoacc@gmail.com, telephone: +420 773 444 777 (the “Controller”, “we”, “us” or “our”), processes personal data in connection with the operation of the online store available at https://krago.store.
We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), applicable laws of the Czech Republic, and other relevant European Union legal regulations.
2. Identity and Contact Details of the Controller
Controller:
KRAGO Acc s.r.o.
Company ID No.: 07827911
Registered office: Londýnská 730/59, 120 00 Prague 2, Czech Republic
Email: kragoacc@gmail.com
Telephone: +420 773 444 777
The company is registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 308299.
3. What Personal Data We Process
We may process, in particular, the following categories of personal data:
- identification data (for example first name, last name);
- contact data (for example email address, telephone number, delivery and billing address);
- order and contractual data (for example ordered goods, payment method, delivery method, order history, communication regarding the order);
- payment-related data to the extent necessary for payment processing;
- communication data contained in emails, forms, messages or other correspondence;
- technical and online data relating to the use of the website, including cookies and similar technologies, where applicable;
- marketing and subscription data, if you subscribe to our newsletter or consent to marketing communications.
4. Purposes and Legal Bases for Processing
We process personal data for the following purposes:
4.1 Performance of a contract and steps prior to entering into a contract
We process personal data in order to:
- receive and process orders;
- conclude and perform purchase contracts;
- deliver goods;
- communicate with customers regarding orders, returns, complaints and related matters;
- provide customer support.
Legal basis:
- performance of a contract under Article 6(1)(b) GDPR;
- taking steps at the request of the data subject prior to entering into a contract under Article 6(1)(b) GDPR.
4.2 Compliance with legal obligations
We process personal data in order to comply with our legal obligations, in particular in the fields of:
- accounting and tax law;
- consumer protection law;
- handling complaints and consumer rights;
- keeping mandatory business records.
Legal basis:
- compliance with a legal obligation under Article 6(1)(c) GDPR.
4.3 Protection of legitimate interests
We may process personal data where necessary for our legitimate interests, in particular for:
- protection and enforcement of legal claims;
- internal administration and record keeping;
- prevention of fraud, abuse and unlawful conduct;
- ensuring the security and proper operation of the website and online store;
- communicating with customers in justified cases regarding previous purchases.
Legal basis:
- legitimate interest under Article 6(1)(f) GDPR.
4.4 Marketing communications and newsletters
If you subscribe to our newsletter or otherwise consent, we may process your personal data to send you information about promotions, discounts, news and offers relating to our products.
Where permitted by law, we may also send commercial communications to existing customers in connection with similar products previously purchased from us, subject to the right to object at any time.
Legal basis:
- consent under Article 6(1)(a) GDPR, where consent is required;
- legitimate interest under Article 6(1)(f) GDPR, where permitted by applicable law for direct marketing to existing customers.
4.5 Website analytics, advertising and cookies
We may process technical data, online identifiers and behavioral data in connection with the use of cookies, analytics tools and marketing technologies, including tools provided by third parties.
Necessary cookies are used on the basis of our legitimate interest in the secure and proper functioning of the website. Analytical, statistical and marketing cookies are generally used only on the basis of your consent, unless applicable law provides otherwise.
Further details are set out in our Cookie Policy.
5. Recipients of Personal Data
We may disclose personal data, to the extent necessary, to the following categories of recipients:
- providers of e-commerce, hosting and technical infrastructure services, including the operator of the online store platform;
- payment service providers and payment processors;
- carriers and logistics partners;
- accountants, tax advisers, legal advisers and other professional advisers;
- IT service providers, administrators and software providers;
- providers of analytics, advertising and marketing tools;
- providers of newsletter, CRM or customer communication tools;
- public authorities or other entities where disclosure is required by law.
We only disclose personal data where necessary and on an appropriate legal basis.
6. Transfers to Third Countries
Some of our service providers or technology partners may be located outside the European Union or the European Economic Area, or may process personal data there, especially where globally used digital tools, cloud services, analytics or advertising tools are involved.
Any such transfer takes place only in accordance with Chapter V GDPR, in particular on the basis of an adequacy decision, standard contractual clauses, or other appropriate safeguards, where required.
7. Retention Period
We retain personal data only for as long as necessary for the relevant purpose of processing, including:
- for the duration of the contractual relationship and for the time necessary to perform related obligations;
- for the period required by applicable legal regulations, especially accounting, tax and consumer law;
- for the period necessary to protect and enforce legal claims;
- until consent is withdrawn, where processing is based on consent, unless another legal basis justifies further retention.
Specific retention periods may vary depending on the type of data and purpose of processing.
8. Whether the Provision of Data Is Mandatory
Providing personal data required for the conclusion and performance of a contract is necessary. If such data is not provided, it may not be possible to conclude the contract or deliver the goods.
Providing data for newsletters or marketing is voluntary. Failure to provide such data does not affect your ability to purchase goods from us.
9. Automated Decision-Making and Profiling
We do not carry out automated decision-making that would produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.
If analytics, advertising or marketing tools are used based on your consent, limited profiling or audience segmentation may occur for campaign measurement or content personalization. Such processing does not involve solely automated decisions with legal or similarly significant effects.
10. Your Rights
Under the GDPR, you have the right to:
- request access to your personal data;
- request rectification of inaccurate or incomplete personal data;
- request erasure of personal data, where the legal conditions are met;
- request restriction of processing;
- object to processing based on legitimate interest;
- withdraw consent at any time, where processing is based on consent;
- request data portability, where legally applicable;
- lodge a complaint with a supervisory authority.
11. Supervisory Authority
If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the Czech supervisory authority:
Office for Personal Data Protection
[https://www.uoou.cz](https://www.uoou.cz)
12. Contact
If you have any questions regarding the processing of personal data, you may contact us at:
Email: kragoacc@gmail.com
Telephone: +420 773 444 777
13. Final Provisions
We may amend or update this Privacy Policy where necessary, especially if there is a change in legal requirements, the scope of processing, or the technologies and services used. The current version is always published on our website.
Effective as of: 02 April 2026