Privacy Policy
1. Introductory Provisions
This Privacy Policy forms an integral part of the Terms and Conditions of everyday bar s.r.o. and explains how we process personal data of customers and Website users.
everyday bar s.r.o., registered office Soukenická 1529/26, Nové Město, 110 00 Praha 1, Czech Republic, IČO: 21646635, DIČ: CZ21646635, acts as the data controller. You can contact us at hello@everydaybar.com.
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Czech data protection legislation.
2. Categories of Personal Data
We may process the following personal data:
- first name and surname,
- shipping and billing address,
- email address and phone number,
- company name and VAT ID, if applicable,
- order and transaction details,
- communication history with our customer support,
- technical data such as IP address, browser type, and device information,
- cookie and usage data.
3. Purposes and Legal Bases for Processing
We process personal data on the following legal bases:
Fulfilment of the Purchase Contract (Article 6(1)(b) GDPR) — processing and fulfilling orders, delivery, customer communication, and subscription management.
Compliance with legal obligations (Article 6(1)(c) GDPR) — invoicing, accounting, tax compliance, and record-keeping required by law.
Consent (Article 6(1)(a) GDPR) — sending newsletters and promotional emails, participation in surveys and marketing campaigns. You may withdraw consent at any time by emailing hello@everydaybar.com or by unsubscribing via the link in any email.
Legitimate interests (Article 6(1)(f) GDPR) — improving Website functionality and user experience, analytics, fraud prevention, and online advertising and remarketing. Where processing is based on legitimate interest, we have assessed that it does not override your fundamental rights and freedoms.
4. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected:
- order and invoice data: as required by tax and accounting obligations,
- email address: for 5 years from the date of the order,
- subscription data: for the duration of the subscription and required legal periods,
- marketing data: until consent is withdrawn,
- customer support communication: as long as necessary to resolve inquiries.
Personal data may also be retained for up to 15 years from the conclusion of the Purchase Contract, corresponding to the limitation period for damage claims.
After expiration of retention periods, data is securely deleted or anonymized.
5. Cookies and Similar Technologies
Our Website uses cookies and similar technologies to ensure proper functionality, improve performance, analyze traffic, and display relevant advertisements.
Cookie consent is managed via the cookie banner on the Website. You can manage or withdraw cookie consent at any time through your browser settings or the cookie preferences tool.
6. Online Advertising and Profiling
We use online advertising services including Meta, Google, and Klaviyo to display relevant advertisements and analyze campaign performance.
This may involve profiling — automated processing of personal data to evaluate user preferences or behaviors for marketing purposes. Such profiling does not produce legal effects, does not significantly affect users, and is used solely for marketing optimization. You may object to this processing at any time.
7. Disclosure to Third Parties
We may disclose personal data to trusted processors who act solely on our instructions and under contractual data protection obligations, including:
- payment providers (Shopify Payments),
- delivery and logistics partners (GLS),
- accounting and legal service providers,
- analytics and advertising platforms (Meta, Google),
- email and customer support tools (Klaviyo),
- subscription management tools (Smartrr).
8. International Data Transfers
Some of our processors are located outside the European Economic Area, including the United States. Such transfers are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or equivalent legal mechanisms ensuring an adequate level of data protection.
9. Financial Data
Payment transactions are processed exclusively through third-party payment providers (Shopify Payments). We do not store credit card data. Relevant provider privacy policy: https://www.shopify.com/legal/privacy
10. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. Data transmission is protected using SSL encryption. Despite these safeguards, no system can guarantee absolute security.
11. Your Rights
Under the GDPR, you have the right to:
- access your personal data and obtain a copy,
- rectify inaccurate or incomplete data,
- erase data where no legal basis for further processing exists,
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time,
- lodge a complaint with a supervisory authority.
To exercise any of these rights, email us at hello@everydaybar.com. We will respond without undue delay and no later than 30 days.
12. Supervisory Authority
You may lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů):
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
Website: www.uoou.cz
13. Policy Updates
We may update this Privacy Policy from time to time. The current version is always available on the Website. Continued use of the Website constitutes acceptance of the updated Policy.
everyday bar s.r.o. · Soukenická 1529/26, Nové Město, 110 00 Praha 1, Czech Republic · IČO: 21646635 · DIČ: CZ21646635 · hello@everydaybar.com