Privacy Policy

We are GB Moments s.r.o., with its registered office at Evropská 2758/11, 160 00 Prague, Company ID No. 19621558.

E-mail: obchod@giftbaskets.cz
Phone: +420 725 878 546

We operate an e-shop at giftbaskets.cz.

For the sale of goods and the operation of our website, we process certain personal data.

The processing of personal data is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”), as well as Act No. 110/2019 Coll., on the processing of personal data, and related legislation.

I. Processing of personal data

A. Processing of personal data when using the contact form

If you enquire about our products and services, we will process the contact details that you provide to us, mainly through the enquiry form. These include:

First name and surname
E-mail address
Phone number, if you provide it
Any other data that you provide to us in your enquiry / order

For what reason?

We use these details to contact you and agree on the delivery of gift baskets.

On what legal basis?

This processing is based on Article 6(1)(b) GDPR – negotiations on a contract or taking steps prior to entering into a contract at your request. In the case of general enquiries that are not directly aimed at concluding a contract, the processing may also be based on our legitimate interest in handling communication pursuant to Article 6(1)(f) GDPR.

How long will we process the personal data?

If we do not establish further cooperation, we will process your data for no longer than 3 years (36 months) from our last communication.

B. Processing of personal data in the case of a purchase

If you make a purchase from us, we will process the data that you provide. This mainly includes billing details:

First name and surname of the buyer and, where applicable, of the shipment recipient
E-mail address
Phone number
Company ID number
VAT ID, provided that you are a VAT payer and provide it
Company name
Street and house number
City
Postal code
Country
Any other data stated in the enquiry / order

For what reason?

We need to process personal data in order to perform our contract – to deliver our goods to you. We will also use your contact details to communicate with you regarding the status of your order, any complaints, or your enquiries.

We will also process personal data in order to comply with our legal obligations, mainly for accounting and tax purposes, and where applicable for handling complaints and other matters.

If you order goods for a third person (e.g. a gift recipient), we also process that person's personal data to the extent necessary to deliver the order and perform the contract. If you provide us with such data, you are responsible for ensuring that you are authorised to provide it to us for this purpose.

On what legal basis do we process personal data?

This processing is based on Article 6(1)(b) GDPR – performance of a contract, and Article 6(1)(c) GDPR – compliance with our legal obligation, and in justified cases also on Article 6(1)(f) GDPR – our legitimate interest in protecting legal claims and keeping records of contractual relationships.

How long will we process the personal data?

For the duration of the contractual relationship and thereafter for 5 years after its termination, unless legislation requires a longer period or longer retention is necessary to protect our legal claims. We keep accounting and tax documents for the period required by law.

C. Newsletters (commercial communications)

If you are a purchasing customer and you did not refuse this when making the purchase, we will use your e-mail address to send you our news.

On what legal basis?

This is permitted by Section 7(3) of Act No. 480/2004 Coll., on certain information society services, provided that you did not refuse this when making the purchase. We will send commercial communications only in relation to our own similar products or services.

How long will we process the personal data?

For the duration of the customer relationship, but no longer than until you express your disagreement, unsubscribe, or object to processing for direct marketing purposes. You can unsubscribe at any time by e-mail or contact us at obchod@giftbaskets.cz. Unsubscribing is also possible via the link included in each commercial communication, if used.

II. Who will have access to the data?

Your data will remain with us. However, certain companies or other persons work for us and may access the data because they help us operate our e-shop. These include:

the operator of the Shoptet e-shop platform (Shoptet a.s., with its registered office at Dvořeckého 628/8, Břevnov, 169 00 Prague 6, Company ID No. 289 35 675, registered with the Municipal Court in Prague, Section B, Insert 25 395)
companies involved in the dispatch of goods and delivery of shipments (the name and business name of the company will be provided to you based on a confirmed order)
the company involved in the processing of payments (Česká spořitelna, a.s., Olbrachtova 1929/62, 140 00 Prague 4, Czech Republic)
any providers of IT, hosting, accounting, tax, legal or marketing services, if their involvement is necessary

Your personal data may also be disclosed to the following other entities:

Hotel Bílá Růže, Fráni Šrámka 169, 397 01 Písek. Gift baskets are assembled at this address.

We process personal data only within the territory of the European Union.

III. What else should you know?

Our company has not appointed a data protection officer.

Our company does not make decisions based on automated processing or profiling.

If you have any questions about personal data, please contact us at obchod@giftbaskets.cz.

IV. Use of cookies

Cookies are text files containing a small amount of information that are downloaded to your device when you visit our website. Cookies are then sent back to the website, or to another website that recognises them, on each subsequent visit.

Cookies perform various tasks, such as enabling efficient navigation between pages, remembering your preferences and generally improving the user experience. They can also help ensure that online advertisements are better tailored to you and your interests.

We use the following cookies on our website:

Necessary cookies: these are required for the operation of the website, for example to enable login to secure parts of the website and other basic website functionality. This category of cookies is used without consent only where it is necessary for the operation of the website or for a service that you have expressly requested.
Analytical/statistical cookies: these enable us, for example, to recognise and determine the number of visitors and to monitor how visitors use the website. They help us improve how the website works, for example by enabling users to find what they are looking for more easily. We run these cookies only with your prior consent.
Advertising cookies: these are used to track preferences and enable advertising and other content to be displayed that best matches your interests and online behaviour. We run these cookies only with your prior consent.

Please note that third parties (including external service providers, for example) may also use cookies and/or access data collected by cookies on the website.

Cookies used:

Cookie name	Purpose
critical_css	Helps us load the website as quickly as possible during the first visit.
session	Indicates an existing user session.
sessid	Enables user identification.
rememberme	Enables persistent user login.
_gat_UA-XXX	We use it to reduce the amount of information exchanged between your web browser and Google servers for statistical purposes.

The current overview of cookies used may change depending on the website settings and tools used.

Further information about cookies and the current list of cookies can be found in the cookie banner or in the settings of your web browser.

Consent may be given through the checkbox included in the so-called cookie banner. You can also later refuse cookies in your browser settings, or set the use of only certain cookies.

Further information on managing cookies in individual browsers can be found at the following links:

Internet Explorer – https://support.microsoft.com/cs-cz/help/17442/windows-internet-explorer-delete-manage-cookies
Google Chrome – https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=cs
Firefox – https://support.mozilla.org/cs/kb/povoleni-zakazani-cookies
Safari – https://support.apple.com/cs-cz/guide/safari/sfri11471/mac
Opera – https://help.opera.com/cs/latest/security-and-privacy/
Microsoft Edge – https://docs.microsoft.com/cs-cz/sccm/compliance/deploy-use/browser-profiles

V. Your rights in connection with personal data processing

The GDPR gives you, among other things, the right to contact us and request information about what personal data we process, request access to such data and have it updated or corrected, or request restriction of processing. You may request a copy of the personal data being processed, request erasure of personal data in certain situations and, in certain cases, you have the right to data portability. You may object to processing based on legitimate interest.

If processing is based on your consent, you have the right to withdraw that consent at any time. If we process personal data for direct marketing purposes, you have the right to object to such processing at any time.

If you believe that we are not handling your data properly, you have the right to lodge a complaint with the Office for Personal Data Protection, or to assert your claims before a court.

These Privacy Policy terms are effective from 1 June 2026.