Privacy policy

Last updated: July 21, 2026

1. Data Controller

The Data Controller responsible for your personal data is: Michal Vaněk, Registered office: Jungmannova 883/26, 61200 Brno, Czech Republic, Czech Republic Business ID: 17581508, Email: info@f1-cards.eu (hereinafter referred to as "we", "us", or "our")

 

2. Personal Information We Collect

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. We refer to this automatically-collected information as "Device Information".

When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, PayPal details, etc.), email address, and phone number. We refer to this information as "Order Information".

3. How and Why We Use Your Personal Data (Legal Basis)

Under the GDPR, we must have a valid legal basis to process your personal data. We use your data for the following purposes:

  • To fulfill a contract (Art. 6(1)(b) GDPR): We use your Order Information to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations).
  • To comply with legal obligations (Art. 6(1)(c) GDPR): We are required by Czech tax and accounting laws to retain certain transactional data (invoices) for a statutory period (typically up to 10 years).
  • For our legitimate interests (Art. 6(1)(f) GDPR): We use Device Information to screen for potential risk and fraud (in particular, your IP address), and to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site).
  • Based on your consent (Art. 6(1)(a) GDPR): If you subscribe to our newsletter or accept non-essential cookies, we process your data based on your explicit consent, which you can withdraw at any time.

4. Sharing Your Personal Information

We share your Personal Information with reliable third parties to help us provide our services and fulfill our contracts with you:

  • Shopify: Our online store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products to you. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
  • Payment Processors: We use secure third-party payment gateways (such as Shopify Payments, Apple Pay, PayPal). We do not store your full credit card details on our servers.
  • Shipping Carriers: We share your name, shipping address, and contact details (email/phone) with our delivery partners (e.g. PPL, DHL, Czech Post) solely for the purpose of delivering your order and sending you tracking updates.

5. International Data Transfers

Our store is powered by Shopify, which means your data may be transferred, stored, and processed outside the European Economic Area (EEA), including in Canada and the United States. We ensure that such transfers are protected by appropriate safeguards, primarily the use of Standard Contractual Clauses (SCCs) approved by the European Commission, and Shopify’s compliance with international data protection frameworks.

6. Data Retention

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information. However, please note that we cannot delete data that we are legally required to keep for tax and accounting purposes under Czech law.

7. Your Rights under the GDPR

If you are a resident of the European Economic Area (EEA), you have the following rights regarding your personal data:

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to Erasure ("Right to be forgotten"): You can ask us to delete your personal data, subject to legal retention requirements.
  • Right to Restriction of Processing: You can ask us to suspend the processing of your data.
  • Right to Data Portability: You can request the transfer of your data to you or a third party in a structured, machine-readable format.
  • Right to Object: You can object to the processing of your data, especially for direct marketing purposes.

To exercise any of these rights, please contact us at info@f1-cards.eu. We will respond to your request within 30 days.

8. Complaints

If you believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with the relevant supervisory authority. In the Czech Republic, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů - ÚOOÚ), located at Pplk. Sochora 27, 170 00 Prague 7, Web: www.uoou.cz.

9. Changes to this Privacy Policy

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

10. Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@f1-cards.eu.