Effective from 1 September 2026
1. Controller
The personal data controller is MIZUAL SCENT s.r.o., Company ID 29751306, Plzeňská 3352/156, 150 00 Prague 5 – Smíchov, e-mail info@mizual.cz, telephone +420 608 324 451. A data protection officer has not been appointed.
2. What data do we process and why
- Order and Contract: identification and contact details, billing and delivery details, ordered goods, payment, shipping, and communication; the legal basis is the performance of a contract and steps prior to entering into a contract.
- Customer Account: email, profile, addresses, and order history; performance of a contract and account management.
- Complaints and Withdrawal: order details, defect, requested resolution, and communication; performance of legal obligations and the contract.
- Accounting and Legal Obligations: documents and transaction data; performance of a legal obligation.
- Security and Legal Claims: technical records, fraud prevention, and protection of rights; legitimate interest in secure operation and defense against claims.
- Marketing: email and information about interaction with mailings; consent, or statutory possibility to send offers to existing customers with easy opt-out.
- Analytics and Advertising: online identifiers and website usage data; for optional cookies, only based on consent.
You must provide the data necessary for an order or legal obligation, otherwise, it may not be possible to conclude or fulfill the contract. We do not perform automated decision-making with legal or similarly significant effects; security systems may flag an order for manual review.
3. Recipients and Processors
We transfer data only to the necessary extent, especially to the following categories of recipients:
- Shopify and its contractual providers for e-shop operations, customer accounts, hosting, and Shopify Payments,
- payment companies, banks, and Apple Pay and Google Pay wallets according to the selected payment method; for bank transfers, Air Bank a.s.,
- carriers Zásilkovna/Packeta and PPL according to the chosen delivery method,
- Google Ireland Limited for Google Analytics and Google Ads tools, and Meta Platforms Ireland Limited for advertising tools, only according to consent settings,
- providers of email marketing, reviews, accounting and invoicing, customer support, and future loyalty programs, if they are actually involved in the respective service,
- public authorities, if required by law.
Specific optional technologies are listed in the cookie settings. We will update these policies before implementing any new service that changes the scope of processing.
4. Transfer Outside the EEA
Some suppliers may process data outside the European Economic Area. In such cases, we rely on adequacy decisions, standard contractual clauses of the European Commission, or other legal safeguards. Information about specific safeguards will be provided upon request.
5. Storage Period
- orders, contractual, and accounting documents for the period required by legal regulations, usually up to 10 years,
- complaint data for the period of its resolution and then for the period necessary to protect rights, usually 3 years,
- ordinary inquiries usually 12 months from resolution, unless there is a reason to keep them longer,
- account until its cancellation and then only to the extent necessary for legal obligations and claims,
- marketing until consent is withdrawn or unsubscribed; inactive contacts are regularly reviewed,
- cookies according to their lifespan indicated in the cookie preferences, for no longer than necessary for their purpose.
6. Your Rights
You have the right to access, rectify, erase, restrict processing, data portability, and object to processing based on legitimate interest. You can withdraw consent at any time without affecting prior lawfulness. Please send requests to info@mizual.cz; we may reasonably verify your identity before processing.
You can file a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
7. Policy Changes
We update policies when services or legal requirements change. The current date is stated at the beginning.