This policy explains how the online store mychampion.cz processes the personal data you provide when making a purchase, creating an account, or contacting us. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. on personal data processing.
1. Who processes your data (the controller)
The data controller is:
- Grigorii Buznitckii, self-employed (OSVČ)
- Company ID (IČO): 23547324
- Registered address: Slavojova 664/11, 140 00 Prague 4 – Nusle, Czech Republic
- Website: mychampion.cz
- Data protection contact: gdpr@mychampion.cz
2. What data we process
We process only the data necessary to fulfil your order and operate the store:
- Identification and contact data: first and last name, e-mail, phone number, delivery and billing address.
- Order data: purchased goods, quantity, price, order history.
- Product personalisation data: engraving text (a child’s name, nickname or number), selected variant. This data may relate to a child; it is provided by the parent or legal guardian and we process it to the minimum extent necessary for production.
- User account data (optional): if you create an account, we store your login e-mail, password (in encrypted form), saved addresses and order history.
- Abandoned order data: if you enter your e-mail during checkout but do not complete the purchase, we may send you a reminder.
- Technical data: IP address, browser data and cookies necessary for the operation of the store and the shopping cart.
3. Why we process the data and on what legal basis
- Processing and production of your order, related communication and delivery — performance of a contract (Art. 6(1)(b) GDPR).
- Maintaining your user account, if you create one — performance of a contract (Art. 6(1)(b) GDPR).
- Compliance with legal obligations (accounting and tax records) — legal obligation (Art. 6(1)(c) GDPR).
- Abandoned order reminders — legitimate interest in completing the purchase (Art. 6(1)(f) GDPR). You may object to this processing at any time.
We do not use the data for profiling and we do not sell it. We send marketing messages only with your consent or as permitted by law.
4. Who we share the data with
We do not pass your data to third parties for their own purposes. To fulfil your order we use only the necessary processors, who process the data solely on our instructions (Art. 28 GDPR):
- Hosting / server infrastructure: Hetzner Online GmbH (Germany, EU).
- E-mail delivery: Zoho (EU data centre, zoho.eu).
- Shipment delivery: the carrier you choose for delivery (e.g. Zásilkovna, Czech Post, PPL) — only the data necessary for delivery.
- Accounting: an accounting services provider for bookkeeping and tax documents.
We do not currently use an online payment gateway. Once introduced, we will update this policy. All data is stored within the European Union / EEA; we do not transfer data outside the EU/EEA.
5. How long we keep the data
- Order and personalisation data is kept for as long as necessary to fulfil the order and then for the limitation periods applicable to potential complaints and claims.
- Accounting and tax documents are kept for the period required by law (accounting records usually 5 years under Act No. 563/1991 Coll. on accounting).
- User account data is kept for as long as the account exists; after its deletion we erase it (except data we are required to keep by law).
6. Cookies
We use technical cookies that are necessary for the operation of the store, the shopping cart and login. These cookies are required to provide the service. You can restrict the use of cookies in your browser settings; some store features may then not work correctly.
7. Your rights
You have the right to access your data, to its rectification, erasure, restriction of processing, portability, and the right to object to processing. Send your request to gdpr@mychampion.cz.
You also have the right to lodge a complaint with the supervisory authority: the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, website: uoou.gov.cz.
8. Security
We take appropriate technical and organisational measures to protect the data (encrypted HTTPS connection, restricted access to data). Providing the data is voluntary; however, without the data necessary for production and delivery, the order cannot be fulfilled.
9. Effective date
This policy is effective as of 17 June 2026. The current version is always available on this page; we will inform you of any material changes.