Privacy Policy

1. Controller

The controller for data processing on this website is:

Culinex Gastro s.r.o — Culinex, Dubská 1626, CZ-41501 Teplice. Phone: +420 474 720 143, e-mail: info@culinex.eu

We have not appointed a data protection officer, as there is no legal obligation to do so.

2. What data we process and why

a) When you access the website, our hosting providers process technically necessary access data (IP address, time, page requested, browser type). The purpose is to deliver the page and to defend against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

b) To display language and currency we evaluate the approximate country assignment of your IP address. No personal profile is created; your own selection always takes precedence. Legal basis: Art. 6(1)(f) GDPR.

c) When you place an order we process your master data (name, address, e-mail, telephone, and where applicable company and VAT identification number) as well as order and payment data. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

d) When you register a customer account we additionally process your access credentials. Your password is stored exclusively as a cryptographic hash and is not readable by us. Legal basis: Art. 6(1)(b) GDPR.

e) We retain invoices and documents relevant for tax purposes on the basis of statutory retention obligations. Legal basis: Art. 6(1)(c) GDPR.

f) For the newsletter we process your e-mail address on the basis of your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every e-mail.

g) We log your decision regarding cookies as evidence pursuant to Art. 7(1) GDPR.

h) With your consent we measure how our website is used with Google Analytics 4 (pages viewed, approximate origin, device type) in order to improve our offering and navigation. Legal basis: Art. 6(1)(a) GDPR. Without your consent no analytics cookies are set; you may withdraw your consent at any time with effect for the future.

3. Cookies

We use technically necessary cookies, cookies that store your display preferences and — exclusively with your consent — cookies for audience measurement. We do NOT use advertising or remarketing cookies and do not embed any services from advertising networks.

In detail:

• Session and login cookies — keep you signed in; readable only by the server (httpOnly).
• Basket cookie — associates a basket with your device even without a customer account.
• Language and currency cookie — remembers your display selection (up to 12 months).
• Consent cookie — stores your cookie decision.
• Analytics cookies (Google Analytics 4) — only after your consent. If you decline, they are not set and nothing is stored on your device.

4. Recipients and processors

We only pass on your data insofar as this is necessary for operating the shop and performing the contract. Data processing agreements pursuant to Art. 28 GDPR are in place with our service providers. In particular, we use:

• Hosting and delivery of the website and the shop interface (providers for application and server hosting).
• Database and cache services for storing account, order and session data (servers located in the European Union).
• Object storage for product images and invoice documents.
• Mollie B.V., Netherlands — payment processing. For card payments, the payment data is collected directly by Mollie; we only receive the payment result.
• E-mail delivery service provider for order, account and newsletter e-mails.
• Freight and parcel service providers — transmission of your delivery address for delivery.
• Tax advisors and tax authorities to the extent required by law.
• Google Ireland Limited — audience measurement (Google Analytics 4), solely on the basis of your consent; IP addresses are processed in truncated form. Advertising features are disabled.

To verify a VAT identification number you provide, we transmit it to the European Commission’s VIES verification service.

Transfers to third countries take place only where an adequacy decision of the EU Commission or appropriate safeguards pursuant to Art. 46 GDPR are in place.

5. Retention period

We store personal data only for as long as is necessary for the stated purposes. Order and invoice data are subject to statutory retention periods. Account data is deleted at your request; data subject to a retention obligation is anonymised instead of deleted, so that no personal reference remains.

6. Your rights

Under the GDPR you have the following rights:

• access to the data stored about you (Art. 15 GDPR);
• rectification of inaccurate data (Art. 16 GDPR);
• erasure (Art. 17 GDPR) within the scope of statutory retention obligations;
• restriction of processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• objection to processing based on legitimate interests (Art. 21 GDPR);
• withdrawal of consent given, with effect for the future (Art. 7(3) GDPR).

You can initiate access, data export and deletion yourself in your customer account, or send an informal request to info@culinex.eu.

You also have the right to lodge a complaint with a supervisory authority, in particular the Úřad pro ochranu osobních údajů (Office for Personal Data Protection of the Czech Republic), Pplk. Sochora 27, 170 00 Praha 7.

7. Data security

Transmission takes place exclusively in encrypted form via TLS (HTTPS). Passwords are stored solely as hashes; login attempts are rate-limited and accounts are temporarily locked after repeated failed attempts.

8. Changes to this policy

We adapt this privacy policy when our processing operations or the legal situation change. The version published on this page applies in each case.