Privacy Policy

The operator of the e-shop CANDELUXO s.r.o. on the website www.candeluxo.com ID 222 08 658 Kaprova 42/14, 110 00 Prague 1 processes personal data provided by the Buyer for the purpose of fulfillment and additional confirmation of the Terms and Conditions, for the purpose of processing the electronic order, realization of delivery, settlement of payments and necessary communication between the contracting parties for the period required by special legislation.

Basic Provisions

1. The controller of personal data pursuant to Section 5(o) of Act No. 18/2018 on the Protection of Personal Data, as amended (hereinafter referred to as the "Act") is CANDELUXO s.r.o., ID No. 222 08 658, with registered office at Kaprova 42/14, 110 00 Prague 1 (hereinafter referred to as the "Controller");

2. Contact details of the administrator are: e-mail: info@candeluxo.com, tel.: +420 607 533 230;

3. Personal data means any information identifying a natural or legal person.

Sources of Processed Personal Data

1. The Controller processes personal data provided to it with the consent of the Buyer and obtained by the Controller on the basis of the performance of the Purchase Agreement and the processing of the electronic order in the online store www.candeluxo.com.;

2. The Controller processes only the identification and contact data of the Buyer necessary for the performance of the Purchase Agreement;

3. The Controller processes personal data for the purpose of delivery, settlement of payments and for the necessary communication between the contracting parties for the period required under specific legislation. Personal data will not be disclosed and will not be transferred to other countries.

Purpose of Processing Personal Data

The controller processes the personal data of the buyer for the following reasons:

1. For the purpose of registration on the website www.candeluxo.com pursuant to Section 13(1)(a) of Act No. 18/2018 on the Protection of Personal Data;

2. For the purpose of processing the buyer's electronic order (name, address, e-mail, telephone number);

3. For the purpose of fulfilling the rights and obligations arising from the contractual relationship between the Purchaser and the Administrator;

4. The provision of personal data is a necessary requirement for the performance of the purchase contract. Without the provision of personal data, the contract cannot be concluded.

Retention Period of Personal Data

1. The Controller retains personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between the Buyer and the Controller and for 3 years after the termination of the contractual relationship;

2. After the expiry of the retention period, the Controller is obliged to delete the data.

Recipients and Processors of Personal Data

The third party that receives the Buyer's personal data are the Controller's subcontractors. The services of these subcontractors are necessarily related to the successful performance of the purchase contract and the electronic order between the Controller and the Buyer.

The administrator's subcontractors are:

  • Webnode AG (e-shop system);
  • Česká pošta, s.p. (delivery service);
  • Zásilkovna s.r.o. (delivery service);
  • Google Analytics (website analysis);

Buyer's rights

Under the terms of the Act, the buyer has the right:

1. To access your personal data;

2. To correct personal data;

3. To delete personal data;

4. To object to processing;

5. On the portability of data;

6. Withdraw consent to the processing of personal data in writing or electronically at the following e-mail address: info@candeluxo.com;

7. File a complaint with the Office for Personal Data Protection if he/she believes that his/her right to personal data protection has been violated.

Security of Personal Data

1. The Controller declares that it has taken all appropriate technical and organisational measures necessary to secure the Buyer's personal data;

2. The Controller has taken technical measures to secure the data storage of personal data, in particular password-protection of computer access, use of antivirus software and regular maintenance of computers.

Final Provisions

1. By submitting an electronic order on the website www.candeluxo.com, the buyer confirms that he/she has been informed of the terms and conditions of personal data protection and that he/she accepts them in their entirety;

2. The buyer agrees to these rules by checking the box in the order;

3. The Controller is entitled to change these Rules at any time. The Administrator is obliged to publish the new version of the Rules on its website.


These Rules come into force on 1.12.2024.