Personal Data Protection Policy

Principles of working with your data

We are Jakub Malý, with registered office at Paprsková 1339/10a, Company ID No. 03183742, e-mail: info@brainrotshop.cz, tel.: +420 775 505 477.

We operate the e-shop on the website brainrotshop.cz.

For the provision of our services, the sale of goods and the operation of our website, we process certain personal data.

The processing of personal data is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).


I. Processing of Personal Data

Processing of personal data when using the contact form

If you request our products and services, we will work with the contact details you provide to us, mainly via the enquiry form. These are: first name, surname, e-mail address, telephone number, address.

For what purpose?
We use these details to contact you in order to further arrange the goods and services.

On what legal basis?
This is processing under Article 6(1)(b) GDPR – taking steps at your request prior to entering into a contract, and negotiations about a contract.

For how long will we process personal data?
If we do not establish further cooperation, we will process your data for a maximum of 4 years from our last communication.


Processing of personal data in case of purchase

If you make a purchase with us, we will work with the data you provide to us. These are mainly billing details: first name, surname, address, telephone number, e-mail address.

For what purpose?
We need to process personal data in order to fulfil our contract – to deliver our goods or services to you. We will also use the contact details to communicate with you regarding the status of your order, and if necessary regarding complaints or your queries.

We will further process personal data in order to fulfil our statutory obligations (in particular for accounting and tax purposes, and, where applicable, for the handling of complaints and similar matters).

On what legal basis do we process personal data?
This is processing under Article 6(1)(b) GDPR – performance of a contract, and Article 6(1)(c) GDPR – compliance with our legal obligations.

For how long will we process personal data?
For the duration of the provision of our service and thereafter for 5 years from the last provision of such service or delivery of goods.


Newsletters (commercial communications)

If you are a purchasing customer and did not opt out at the time of purchase, we will use your e-mail address to send you our news.

On what legal basis?
This is allowed by Section 7(3) of Act No. 480/2004 Coll., on certain Information Society Services, provided you did not reject this use at the time of purchase.

For how long will we process personal data?
For 5 years from your last purchase. You may unsubscribe from our mailing list at any time via a link in the e-mail or by contacting us at: info@brainrotshop.cz.


II. Who will have access to the data?

Your data will remain with us. However, some companies or other persons work for us and therefore may have access to the data because they help us run our e-shop. These are:

  • the operator of the e-shop platform Shoptet (Shoptet a.s., with registered office at Dvořeckého 628/8, Břevnov, 169 00 Prague 6, Company ID No. 289 35 675, registered with the Municipal Court in Prague, Section B, Insert 25 395).

We process personal data only within the territory of the European Union.


III. Use of Cookies

Cookies are text files containing small amounts of information which are downloaded to your device when you visit our website. Cookies are then sent back to the website at each subsequent visit, or to another website that recognises them.

Cookies perform various functions, such as enabling efficient navigation between pages, remembering your preferences and generally improving the user experience. They can also ensure that online advertisements are better tailored to you and your interests.

On our website we use the following cookies:

  • Necessary cookies: required for the operation of the website; for example, they allow you to log in to secure areas of the site and support other basic functions. This category of cookies cannot be disabled.

  • Analytical/statistical cookies: these allow us, for example, to recognise and count visitors and to see how visitors move around the website. They help us improve the way the website works, for example by making it easier for users to find what they are looking for. We use these cookies only with your prior consent.

  • Advertising cookies: used to track preferences and to display advertisements and other content that best correspond to your interests and online behaviour. We use these cookies only with your prior consent.

Please note that third parties (including, for example, providers of external services) may also use cookies and/or have access to data collected by cookies on the website.

Cookies used:

Technical name Provider Purpose / description of cookies Duration
[•] [•] [•] Session / Persistent ([•] hours)

Further information about cookies and their current list can be found via individual internet browsers, most often in the Developer Tools section.

Consent may be given via the checkbox contained in the cookie bar. You can subsequently refuse cookies in your browser settings or allow only some of them.

More information on managing cookies in particular browsers can be found at the following links:


IV. Your Rights in Relation to Personal Data Processing

The GDPR gives you, among other things, the right to contact us and request information about which of your personal data we process, to request access to such data and to have them updated or corrected, or to request restriction of processing. You may request a copy of the personal data processed, request that we erase the personal data in certain situations, and in certain cases you have the right to data portability. You may object to processing based on legitimate interest.

If you believe that we are not handling your data correctly, you have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), or to bring your claims before a court.

These conditions are effective as of 1 July 2025.