GDPR - how do we protect your personal data?
❓ What is GDPR for?
We are Atelier AR+AT and we run the e-shop you’re currently visiting. In order to process your order – to craft and deliver everything you choose from us – we need to process some of your personal data. We value your trust, and therefore we protect and process your personal data in accordance with the current GDPR legislation. We're happy to clearly explain what that means.
🍀 Who are “we” – AR+AT
Atelier AR+AT
VAT ID number: 71278478
Billing address: Hyacintová 2819/6, Záběhlice, Prague 10, 106 00
Contact & recclamation address: P.O.Box 61, Prague 5, 150 00
🛍️ What we do with your data when you place an order
When you place an order, we process the data you enter in the order form. This mainly includes your name, email, phone number, address, and the products you choose.
We need this information to fulfill our contract with you, and by law we must store it for 10 years from the date of your purchase (in the form of an invoice, prepayment records, etc.).
If you file a complaint or return – either within the 14-day statutory withdrawal period or for other reasons – we also process the related data. This includes your name, email, phone number, address, and the reason for the complaint, along with documentation of the process. We retain these records (claim forms, refund receipts, etc.) for 10 years after resolution.
This data processing is permitted by the GDPR Regulation – to fulfill our legal obligations to you and to protect our interests.
📬 Newsletters from the Magical Forest
We add your email address to our mailing list so we can occasionally send you news, magical stories, or invitations from the Magical Forest.
This is allowed under Czech Act No. 480/2004 Coll., but you always have the right to unsubscribe from these messages at any time.
If you choose to remain subscribed, we will store your email address for 3 years after your last order.
📜 Registration and your user account
If you register on our website, we will process your login credentials and information about your orders in your user profile.
This allows you to simplify future purchases. Such processing is entirely voluntary and continues as long as you keep your account active.
By clicking to complete your registration, you give us your consent to process the data you provided during registration.
If you delete your account, you also automatically withdraw your consent, and we will delete all data from your account.
🚚 Who has access to your data?
We don’t share your data lightly! However, some companies may process it to help us send your order or request feedback. Remember, that only the company you choose in your order will handle your data.
The following partners may access your data:
- Shoptet s.r.o., the e-shop platform provider. Their Privacy Policy: Personal Data Processing Policy
- PPL, our contracted delivery service. Their Privacy Policy: Personal Data Processing Policy
- Zásilkovna, our contracted delivery service. Their Privacy Policy: Data Protection Policy
- Česká pošta, our contracted delivery service. Their Privacy Policy: Data Protection Policy
- Balíkovna, our contracted delivery service. Their Privacy Policy: Law and GDPR
- ComGate, our payment gateway (card payments). Their Privacy Policy: Personal Data Processing
- Seznam Zboží.cz, a price comparison and review platform. They may process your data only with your consent to provide a review. Their Privacy Policy: Data Protection Policy
- Heureka Group a.s., a price comparison and review platform. They may process your data only with your consent to provide a review. Their Privacy Policy: Data Protection
🛡️ Your rights and how to contact us
You have the right and the option to contact us at any time – either via email at info@ar-at.cz or by phone at +420 702 27 28 37.
You can ask for information about which personal data we process about you, request it to be updated or corrected, or ask for restriction, erasure, or a copy of your data.
If you believe that we are not handling your data properly, please let us know! You have the right to lodge a complaint with the Data Protection Authority or pursue your rights through legal action.
These terms are effective from August 01, 2024.
Updated: April 12, 2025