Privacy Policy

Processing of Personal Data

GrRUM Distillery processes personal data in accordance with applicable Czech legislation and Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

We protect your personal data and use it solely for the purpose of processing orders, communicating with customers, and ensuring the proper operation of our online store.

What Personal Data Do We Process?

We may process the following personal data:

• Full name

• Billing and delivery address

• Telephone number

• Email address

• Information related to orders and payments

• IP address and technical website usage data

For self-employed individuals and business customers, additional information such as Company ID Number (IČO) or registered business address may also be processed.

Why Do We Process Personal Data?

Personal data is processed primarily for the following purposes:

• Processing and fulfilling orders

• Delivering goods

• Customer communication

• Accounting and compliance with legal obligations

• Ensuring website security and functionality

• Marketing activities, where consent has been provided

Age Verification (18+)

Due to the sale of alcoholic beverages, customer age verification may be required in accordance with applicable Czech legislation.

Customers may be asked to provide proof of age when completing an order, prior to receiving a shipment, or upon delivery.

Age verification may be carried out by:

• GrRUM Distillery

• Contracted shipping partners

• Delivery service providers

No copies of identity documents are made or stored during the age verification process.

Who May Receive Personal Data?

Personal data may only be shared with trusted service providers responsible for:

• Shipping and delivery services

• Payment processing services

• Accounting and administrative services

• Website and e-commerce platform operation

These parties receive access only to the data necessary for the performance of their services.

Personal data is not transferred outside the European Union unless required by specific technical services used in the operation of the website.

Data Retention Period

Personal data is retained only for as long as necessary to fulfil contractual and legal obligations.

Accounting and tax records may be retained for the period required by applicable Czech legislation.

Your Rights

You have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion of personal data

• Restrict processing

• Object to processing

• Request data portability

• Lodge a complaint with the relevant data protection authority

Personal Data Security

GrRUM Distillery implements appropriate technical and organisational measures to protect personal data against misuse, loss, unauthorised access, or disclosure.

Cookies

Information regarding the use of cookies can be found in our separate section:

Cookie Policy

Contact

If you have any questions regarding the processing of personal data, please contact us:

GrRUM Distillery
Email: gr-rum@post.cz
Website: www.gr-rum.cz