Privacy Policy

We are Grig Distribuce s.r.o., Company ID 09361103, with its registered office at Svatopluka Čecha 2672/100, Královo Pole, 612 00 Brno, Czech Republic, registered with the Regional Court in Brno under file no. C 118646/KSBR.

We operate this online store. To provide our services, sell goods and run this website, we process some personal data.

The processing of personal data is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR").

Processing of personal data

If you use the contact form

If you enquire about our products and services, we work with the contact details you give us, mainly through the enquiry form. These are in particular: first name and surname, e-mail address, postal address, telephone.

Why? We use them to contact you and agree further details about goods and services.

On what legal basis? This is processing under Article 6(1)(b) GDPR — negotiations on a contract, or steps taken at your request prior to entering into a contract.

For how long? If no further cooperation follows, we will process your data for a maximum of 10 years from our last communication.

If you make a purchase

If you buy from us, we work with the details you fill in. These are mainly billing details: first name, surname, address, e-mail address and telephone.

Why? We need the personal data to perform our contract — to deliver our goods to you. We also use the contact details to communicate with you about the status of your order, and about complaints or your questions. We further process personal data to fulfil our obligations under the law, mainly for accounting and tax purposes and for handling complaints.

On what legal basis? This is processing under Article 6(1)(b) GDPR — performance of a contract — and Article 6(1)(c) GDPR — compliance with our legal obligation.

For how long? For the duration of our service and then for 10 years from the last provision of such a service or delivery of goods.

We also process your personal data to the extent of the goods and services you ordered from us, our communication and other details of the contract concluded between us. We also store our communication and the information you gave us before the contract was concluded, in case we conclude a contract together, as part of pre-contractual negotiations.

Newsletters (commercial communications)

If you are a purchasing customer and did not opt out during the purchase, we will use your e-mail address to send you our news.

On what legal basis? This is permitted by Section 7(3) of Act No. 480/2004 Coll., on Certain Information Society Services, provided you did not opt out during the purchase. Where consent is required, we process on the basis of your consent under Article 6(1)(a) GDPR.

For how long? 10 years from your last purchase. You can unsubscribe at any time using the link in any message or by contacting us at grig@grig.cz.

Who has access to the data?

Your data stays with us. Even so, some companies and other persons work for us and gain access to the data because they help us run our store. These are:

the operator of the e-commerce platform on which this store runs (Shopify International Ltd., Ireland);
companies involved in dispatching goods (Packeta / Zásilkovna, GLS);
companies involved in processing payments (the payment gateway operator and card schemes, and the provider of your online banking);
the provider of our e-mailing service;
companies helping us evaluate our campaigns (Google, Meta) — only if you give consent to analytics or advertising cookies;
companies providing customer care and our accountants.

We have data processing agreements in place with these parties so that your data is safe.

We may also pass your personal data to public authorities where it is in our interest or where they request it.

Personal data is processed within the European Union. Where any processor transfers data outside the EU, we ensure it is covered by an adequacy decision or by standard contractual clauses.

What else you should know

We have appointed a data protection officer:

Tomáš Andrlík
Svatopluka Čecha 2672/100, 612 00 Brno, Czech Republic
e-mail: grig@grig.cz
telephone: +420 732 854 316

We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you.

If you have questions about personal data, contact us at grig@grig.cz or call +420 732 854 316.

Use of cookies

Cookies are text files containing a small amount of information which are downloaded to your device when you visit our website. On each subsequent visit they are sent back to the website, or to another website that recognises them.

Cookies perform various tasks — for example they enable efficient navigation between pages, remember your preferences and generally improve the user experience. They can also make online advertising better tailored to you and your interests.

We use the following categories of cookies on this website:

Necessary cookies — required for the website to work, for example to keep your cart and to log in to secured parts of the site. This category cannot be disabled.
Analytical / statistical cookies — allow us to recognise and count visitors and to see how visitors use the site. They help us improve how the site works. We only run these with your prior consent.
Advertising cookies — used to track preferences and to show advertising and other content best matching your interests and online behaviour. We only run these with your prior consent.

Please note that third parties, including providers of external services, may also use cookies and access data collected by cookies on this website.

Consent can be expressed through the checkbox in the cookie banner. You can also subsequently refuse cookies in your browser settings, or set your browser to accept only some of them. Instructions are available in the help pages of your browser.

Your rights in connection with the processing of personal data

GDPR gives you, among other things, the right to contact us and ask what personal data of yours we process, to request access to that data and have it updated or corrected, or to request restriction of processing. You may request a copy of the personal data processed, request erasure of personal data in certain situations, and in certain cases you have the right to data portability. You may object to processing based on legitimate interest. Where processing is based on consent, you may withdraw that consent at any time; this does not affect the lawfulness of processing before withdrawal.

If you think we do not handle your data correctly, you have the right to lodge a complaint with the Office for Personal Data Protection of the Czech Republic (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz), or with the supervisory authority in your EU country of residence, or to bring your claims before a court.