Privacy Policy

Personal Data Processing Policy

Bloomrose s.r.o., with its registered office at Dlouhá 3403/2b, 702 00 Ostrava – Moravská Ostrava, Company ID No. 29539552, operating the online shop at www.bloomrose.cz, processes personal data when providing its services and operating the online shop in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”).

I. PROCESSING OF PERSONAL DATA

1. Contact forms and enquiries

Data processed: full name, address, email address and telephone number.
Purpose: handling your enquiry and subsequent communication.
Legal basis: Article 6(1)(b) GDPR – taking steps prior to entering into a contract.
Retention period: no longer than 6 months after the most recent communication, unless another legal basis requires longer retention.

2. Purchase of goods

Data processed: full name, address, email address, telephone number and billing details.
Purpose: performance of the contract, particularly delivery of goods, communication with the customer, handling claims, returns and withdrawal from the contract.
Legal basis:
- Article 6(1)(b) GDPR – performance of a contract;
- Article 6(1)(c) GDPR – compliance with legal obligations, particularly accounting and tax obligations.
Retention period: for as long as necessary to perform the contract and protect legal claims; accounting and tax records are retained for the period required by law, generally 10 years.

3. Newsletters and marketing communications

Data processed: email address.
Purpose: sending news, marketing communications and offers for similar goods.
Legal basis:
- consent under Article 6(1)(a) GDPR where you have subscribed;
- legitimate interests under Article 6(1)(f) GDPR in conjunction with Section 7(3) of Czech Act No. 480/2004 Coll. where you are an existing customer and we send offers for similar goods.
Retention period: until consent is withdrawn or an objection is raised, but no longer than 5 years after the most recent purchase or active interaction.

You may unsubscribe at any time using the link included in every marketing email or by sending a request to info@bloomrose.cz.

II. RECIPIENTS OF PERSONAL DATA

We process personal data internally. To the extent necessary, it may also be processed by or disclosed to the following partners:

Shoptet a.s. – operation of the online shop;
Zásilkovna and PPL CZ – delivery of orders;
GoBalík – shipment management;
payment service and payment-gateway providers;
Retino – claims and returns system;
Google Ireland Limited;
Seznam.cz, a.s. – Sklik;
Heureka Group a.s.;
Microsoft – Clarity service.

Retino

We use Retino to handle claims, returns and customer communication. The following data may be processed through this service:

full name;
contact and address details;
email address and telephone number;
order details;
information relating to a claim, withdrawal from the contract or return of goods.

This data is processed solely for the purpose of handling the customer’s relevant request.

Transfers outside the European Union

When using marketing, analytics and certain external services, personal data may be transferred outside the European Union, for example to Google or Microsoft. Such transfers take place only in accordance with applicable law and using appropriate safeguards, particularly an adequacy decision or the European Commission’s Standard Contractual Clauses.

III. AUTOMATED DECISION-MAKING AND PROFILING

We use analytics and marketing tools such as Google Analytics and Microsoft Clarity. These tools may involve profiling user behaviour for traffic analysis and marketing purposes. We do not use automated decision-making that produces legal or similarly significant effects for customers.

IV. COOKIES

We use the following types of cookies on our website:

Essential cookies: ensure the website functions correctly and do not require consent.
Analytics cookies: are used to measure website traffic and user behaviour and are activated only after consent has been given.
Marketing cookies: are used to personalise advertising and for remarketing and are activated only after consent has been given.

Tools and cookies used:

Google Analytics 4;
Google Ads;
Microsoft Clarity;
Sklik (Seznam.cz);
PHPSESSID.

Analytics and marketing cookies are stored only after consent has been given through the cookie banner. You may change or withdraw your consent at any time through the cookie settings on our website. Cookies can also be managed in your browser settings.

V. YOUR RIGHTS

In relation to the processing of your personal data, you have the right to:

request access to your personal data;
request correction of inaccurate data;
request erasure of personal data;
request restriction of processing;
object to processing;
exercise the right to data portability;
withdraw consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

If you believe that data-protection rules have been breached, you have the right to lodge a complaint with the Czech Office for Personal Data Protection or seek a remedy before the competent court.

VI. CONTACT DETAILS

For any questions or requests concerning personal data, please contact us at info@bloomrose.cz.

This Privacy Policy takes effect on 1 August 2026.