Privacy and Cookie Policy
PRIVACY AND COOKIE POLICY
Vailax s.r.o. | vailax.eu | Effective from 18 October 2026
Introduction
We are Vailax s.r.o., with our registered office at Ovocný trh 572/11, Staré Město, 110 00 Prague, Czech Republic, Company ID No.: 06659144, VAT ID No.: CZ06659144, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 286481.
We operate the online store vailax.eu.
In connection with the sale of goods, processing of orders, communication with customers and operation of our website, we process certain personal data.
The processing of personal data is governed primarily by Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, hereinafter referred to as the “GDPR”) and other applicable legislation.
Vailax s.r.o. is the controller of your personal data.
Contact details of the data controller:
Email: info@vailax.eu
Phone: +420 608 111 876
Address: Ovocný trh 572/11, Staré Město, 110 00 Prague, Czech Republic
I. Processing of Personal Data
A. Processing of Personal Data When Using the Contact Form
If you contact us through the contact form, by email or by telephone, we process the personal data you provide.
This may include:
First and last name.
Email address.
Telephone number, if provided.
Content of your message.
Why do we process this information?
We use this information to respond to your enquiry, provide the requested information and communicate with you regarding our products or services.
What is the legal basis for processing?
Where the communication relates to entering into a contract, processing is based on Article 6(1)(b) GDPR.
In other cases, processing may be based on our legitimate interest in responding to enquiries and communicating with customers under Article 6(1)(f) GDPR.
How long do we retain this information?
We retain personal data for as long as necessary to respond to your enquiry and conduct any related follow-up communication.
Where necessary to protect our legitimate interests, particularly in connection with complaints, disputes or legal claims, personal data may be retained after the communication has ended, for as long as necessary for that purpose.
Once the reasons for retaining the data no longer apply, we will delete or anonymise it, unless applicable law requires further retention.
B. Processing of Personal Data When Making a Purchase
When you make a purchase through our online store, we process the personal data necessary to fulfil your order.
This may include:
First and last name.
Billing and delivery addresses.
Telephone number.
Email address.
Details of the goods ordered.
Payment information and order status.
Why do we process this information?
We process personal data primarily to:
Accept and process orders.
Deliver purchased goods.
Process payments.
Issue accounting and tax documents.
Handle complaints, returns and warranty claims.
Communicate with customers.
Comply with legal obligations.
Protect our legal rights and legitimate interests.
What is the legal basis for processing?
We process personal data primarily under:
Article 6(1)(b) GDPR – performance of a contract.
Article 6(1)(c) GDPR – compliance with a legal obligation.
Where justified, we may also process personal data under Article 6(1)(f) GDPR – legitimate interests, particularly the establishment, exercise or defence of legal claims.
How long do we retain this information?
Personal data relating to orders is retained for as long as necessary to fulfil contractual obligations, process orders, handle complaints, returns and warranty claims, and respond to related customer requests.
We may also retain personal data for as long as necessary to protect our legitimate interests, particularly in connection with potential disputes and the establishment, exercise or defence of legal claims.
Accounting and tax documents are retained for the periods required by applicable legislation, generally 5 or 10 years depending on the type of document.
Retention periods may vary depending on the category of personal data, the purpose of processing and applicable legal obligations.
Once the relevant retention period has expired, personal data will be deleted or anonymised unless another lawful reason for further retention exists.
C. Newsletters and Marketing Communications
If you are an existing customer and have not opted out of receiving marketing communications when making a purchase, we may use your email address to send information about similar products and news.
This is permitted under Section 7(3) of Czech Act No. 480/2004 Coll., on Certain Information Society Services, subject to the applicable legal conditions.
If you are not an existing customer, we will send you marketing communications only with your appropriate consent.
How long do we retain this information?
For marketing communication purposes, we may retain your personal data for up to 5 years after your last purchase or until you opt out of receiving marketing communications, whichever occurs first.
You may unsubscribe at any time using the unsubscribe link included in our marketing emails or by contacting us at info@vailax.eu.
II. Who Has Access to Your Personal Data?
Your personal data is primarily processed by Vailax s.r.o.
However, we also use third-party companies and service providers to operate our online store.
Personal data may be shared, to the extent necessary, with the following recipients:
1. Payment Service Provider
Stripe – processing online payments and related payment transactions.
2. Delivery Companies
Zásilkovna – delivery of purchased goods.
PPL – delivery of purchased goods.
We provide delivery companies only with the personal data necessary to deliver your order, particularly your name, delivery address, telephone number and email address.
3. Technical Operation of the Online Store
VEDOS – provider of web hosting and related technical services used to operate our online store.
Personal data may also be accessed, where necessary, by persons responsible for the administration, maintenance and technical support of the online store.
4. Accounting and Administrative Services
External accountants, tax advisers and other authorised persons, to the extent necessary to comply with legal obligations.
Transfers of Personal Data Outside the European Union
Some service providers, particularly payment service providers, may process personal data outside the European Economic Area (EEA).
Where such transfers occur, appropriate safeguards must be implemented in accordance with the GDPR.
These safeguards may include an adequacy decision adopted by the European Commission or Standard Contractual Clauses approved by the European Commission.
III. Additional Information About Personal Data Processing
We have not appointed a Data Protection Officer.
As part of the ordinary operation of our online store, we do not carry out automated individual decision-making that produces legal effects or similarly significant effects concerning customers.
We retain personal data only for as long as there is an appropriate legal basis for its processing.
Retention periods depend primarily on the nature of the personal data, the purpose of processing, applicable legal obligations and the need to protect legal claims.
If you have any questions regarding the processing of your personal data, please contact us:
Email: info@vailax.eu
Phone: +420 608 111 876
IV. Use of Cookies
Cookies are small text files that are stored on your device when you visit a website.
They help ensure the proper functioning of the website, shopping cart and other essential features of the online store.
Categories of Cookies
1. Strictly Necessary Cookies
Our website uses only basic technical cookies that are strictly necessary for the proper functioning of the online store.
These cookies are used primarily to:
Ensure the shopping cart functions correctly.
Process orders.
Maintain website security.
Provide essential online store functions.
Store necessary technical settings.
Strictly necessary cookies may be used without prior consent where they are genuinely required to provide a service requested by the user.
2. Analytics and Marketing Cookies
We currently do not use analytics or marketing cookies designed to track website traffic, create advertising profiles or deliver targeted advertising.
We do not use Google Analytics, Google Ads, Meta Pixel or Sklik to track website visitors through cookies.
If we introduce services requiring visitors’ consent in the future, we will obtain the necessary consent before activating the relevant cookies and update this Privacy and Cookie Policy accordingly.
Cookie Retention Periods
The retention periods of strictly necessary technical cookies depend on their specific purpose and the technical configuration of the online store.
Some cookies are temporary and are automatically deleted when the browser session ends.
Other cookies may be stored for as long as necessary to provide the relevant website functionality.
Managing Cookies
Strictly necessary technical cookies are used to provide essential online store functions and do not require prior consent.
You can delete or restrict cookies through your internet browser settings.
Please note that disabling strictly necessary cookies may affect the functionality of certain parts of the online store, including the shopping cart and checkout process.
Managing Cookies in Web Browsers
Further information about managing cookies can be found in the help sections of the following browsers:
Google Chrome
Mozilla Firefox
Safari
Opera
Microsoft Edge
V. Your Rights Regarding Personal Data
Under the conditions set out in the GDPR, you have the following rights regarding the processing of your personal data:
Right of Access
You may request information about the personal data we process about you and obtain a copy of that data.
Right to Rectification
If your personal data is inaccurate or incomplete, you may request that it be corrected or completed.
Right to Erasure
In circumstances specified by the GDPR, you may request the deletion of your personal data.
The right to erasure is not absolute. We may continue to retain certain personal data where necessary to comply with legal obligations or for the establishment, exercise or defence of legal claims.
Right to Restriction of Processing
Under certain circumstances, you may request that the processing of your personal data be restricted.
Right to Data Portability
Where the applicable legal conditions are met, you may request to receive your personal data in a structured, commonly used and machine-readable format.
Right to Object
You may object to the processing of your personal data where such processing is based on our legitimate interests.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Right to Lodge a Complaint
If you believe that your personal data is not being processed in accordance with applicable data protection legislation, you have the right to lodge a complaint with the Czech supervisory authority:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
If you reside in another EU Member State, you may also lodge a complaint with the competent data protection supervisory authority in your country of habitual residence, place of work or the place of the alleged infringement.
You may also seek a judicial remedy before a competent court.
To exercise your rights, please contact us at info@vailax.eu.
VI. Final Provisions
We may update this Privacy and Cookie Policy, particularly in response to changes in the services we use, our personal data processing practices or applicable legislation.
The current version is always available on vailax.eu in the Privacy Policy section.
This Privacy and Cookie Policy is effective from 18 October 2026.