Version dated 22 October 2026. The controller is BOHEMIAN GIFTS s.r.o., company identification number 60279354, registered office Zásada 162, 468 25 Zásada, Czech Republic. Contact info@modernglassdesigns.cz with questions or rights requests. We have not appointed a data protection officer.
Data, purposes and legal bases
For orders we process your name, delivery and billing address, email, mobile contact, order contents and history, and payment information necessary to match your payment. We obtain these data from you; payment or delivery confirmations may come from the relevant provider. Data necessary to enter into and perform the contract are processed under Article 6(1)(b) GDPR. Without necessary details we cannot fulfil your order correctly. Your mobile contact is used for delivery and order enquiries, not automatically for marketing.
Records needed to fulfil accounting, tax and other statutory obligations are retained under Article 6(1)(c) GDPR. Complaints, withdrawals, refunds and related communications are processed to perform the contract and comply with legal duties; records necessary to establish or defend claims are also processed for legitimate interests under Article 6(1)(f).
We process data in an optional customer account to provide the account and the functions you request under Article 6(1)(b) GDPR. This also includes additional information you voluntarily enter in the account.
Providing a connection and operating the website requires technical processing of network data, in particular the IP address, request time and requested page. Troubleshooting and security also use application records, such as an event time, error description and related account or order identifier where the event contains them. These data are used to deliver the requested content, diagnose faults, prevent misuse and protect rights under Article 6(1)(f) GDPR. Retention depends on whether a record is still needed to operate the service, investigate a particular fault or security incident, meet a legal obligation or pursue a related claim. Once these grounds cease, we delete or anonymise the data; we do not promise automatic deletion of all records after one fixed period. The hosting provider's internal operational records are also subject to its own obligations and terms.
We do not currently send newsletters. If we introduce them in the future, we will update this policy before doing so and provide an appropriate legal basis and an easy way to unsubscribe. Marketing consent is not a condition of purchase. Previously stored preferences do not in themselves mean that newsletters are currently being sent.
The basket, login and settings you choose use technically necessary cookies and related data to provide the requested service. Optional analytics or marketing technologies require a separate assessment and appropriate consent; making a purchase or reading this notice does not provide that consent. Before introducing new optional measurement, we will provide information about providers, purposes, storage periods and how to make or withdraw a choice. This notice does not itself activate Google Analytics or another measurement service.
Recipients and transfers
WEDOS provides website hosting and email services. Authorised administrative staff and accountants can access orders to the extent needed for their work. The carrier and payment provider selected for your order receive the data needed for delivery and payment processing. We provide data to public authorities where required by law. Providers processing data on our behalf must be bound by appropriate contractual and security obligations.
For international delivery, we disclose data to Czech Post and, depending on the chosen service, the delivering postal operator; customs authorities may also receive necessary data. These mainly comprise the name, delivery address, contact details needed for delivery and shipment details. Your delivery address determines the destination country. Among the offered destinations, the United Kingdom, Switzerland, Turkey and Monaco are outside the EEA. European Commission adequacy decisions under Article 45 GDPR exist for the United Kingdom and Switzerland. Turkey and Monaco have no such decision; for an occasional delivery you request, only a transfer necessary to perform the specific contract may fall under Article 49(1)(b) GDPR. This exception does not cover regular transfers or unrestricted further uses. Czech Post also acts as an independent controller when providing postal services; its privacy information describes international delivery and recipients. You may request information about the recipient and legal mechanism of a specific transfer, and a copy of any safeguards used, at info@modernglassdesigns.cz. We do not claim that standard contractual clauses or US adequacy automatically cover every service. Before introducing another service involving transfers outside the EEA, we must assess its actual arrangements and update this information.
Retention
Customer account data are kept while we provide the account. You may request account closure at info@modernglassdesigns.cz; when handling the request we erase or anonymise data no longer needed for another lawful purpose. Correspondence is retained while handling the enquiry, order, complaint or withdrawal, and afterwards only to the extent needed for legal obligations and related claims. Accounting and tax records have separate statutory retention periods according to the record type; VAT records under Czech VAT law are generally kept for 10 years from the end of the relevant tax period. Claim records are retained for the applicable limitation period and ongoing proceedings. Closing an account therefore does not erase records we must keep. Continued retention is assessed against these purposes; this is neither indefinite retention of all data nor a promise of automatic deletion after a single fixed period. For technically necessary storage on your device, retention depends on the session and the need to retain your basket, login or requested settings; you can also remove that storage in your browser, which may limit those functions.
Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests and always to direct marketing. You may withdraw consent at any time. Erasure does not mean deleting records we must retain by law or for legal claims.
Send requests to info@modernglassdesigns.cz. Identity is verified proportionately, without automatically requiring an identity-document copy. We normally respond within one month; if a lawful extension is necessary we tell you why within that period. You can complain to the Czech Office for Personal Data Protection, www.uoou.gov.cz, or the competent supervisory authority, particularly where you habitually reside, work or consider that an infringement occurred.
Our ordinary processing of orders in PrestaShop does not involve automated individual decision-making, including profiling, that produces legal or similarly significant effects concerning you. We do not automatically score customers or reject orders based on their profiles. Your chosen payment service provider may process data for its own purposes under its own privacy notice; this description of our processing does not replace the provider's separate practices. We publish updates with an effective date and obtain fresh consent when required for a processing change.