Privacy Policy (GDPR)

Kopacka Gallery s.r.o.

1. Data Controller

The controller of personal data pursuant to Regulation (EU) 2016/679 (GDPR) is:

Kopacka Gallery s.r.o.

Company ID: 24139629

Registered office: Řehořova 2877/41, Žižkov (Prague 3),

130 00 Prague, Czech Republic

E-mail: galerie@hotelkopacka.com

2. Scope of Personal Data Processing

We process personal data only to the extent necessary and exclusively for legitimate purposes.

Personal data processed may include:

• name and surname,

• email address,

• phone number,

• company name (if provided),

• inquiry content and communication history.

We do not process sensitive personal data.

3. Purpose of Processing

Personal data are processed for the following purposes:

• responding to inquiries submitted via the website,

• communication regarding availability, pricing, condition, and transport of items,

• preparation of individual offers and contractual documentation,

• compliance with legal obligations, where applicable.

This website is not an online store, and no automated purchasing or user accounts are involved.

4. Legal Basis for Processing

Personal data are processed on the basis of:

• Article 6(1)(b) GDPR – performance of pre-contractual measures taken at the data subject’s request,

• Article 6(1)(c) GDPR – compliance with legal obligations,

• Article 6(1)(f) GDPR – legitimate interest (communication with clients and protection of legal claims).

5. Data Retention Period

Personal data are stored:

• for the duration of communication and negotiation,

• for the duration required by applicable legal regulations (e.g. accounting, tax obligations),

• no longer than necessary for the stated purposes.

6. Data Recipients

Personal data may be disclosed only to:

• accounting or legal service providers (if necessary),

• transport partners (only if delivery is agreed),

• public authorities, if required by law.

Personal data are not sold or transferred to third parties for marketing purposes.

7. Transfer Outside the EU

Personal data are not transferred outside the European Union unless strictly necessary (e.g. international shipping), and only in compliance with GDPR requirements.

8. Rights of the Data Subject

The data subject has the right to:

• access personal data,

• rectification of inaccurate or incomplete data,

• erasure of personal data (right to be forgotten),

• restriction of processing,

• data portability,

• object to processing,

• lodge a complaint with a supervisory authority.

In the Czech Republic, the supervisory authority is:

Office for Personal Data Protection (www.uoou.cz)

9. Security of Personal Data

We take appropriate technical and organizational measures to ensure the security of personal data and to prevent unauthorized access, loss, or misuse.

10. Cookies

The website may use essential cookies necessary for its operation.

No profiling or marketing cookies are used without explicit consent.

11. Final Provisions

1. This Privacy Policy is effective as of 1st January 2026.

2. The controller reserves the right to update this Privacy Policy at any time.

3. The current version is always available on the website.