← Back to homepage
Pavel Szabo, s.r.o. Version: 07/2026

Privacy Policy

1. Data Controller

Pavel Szabo, s.r.o.

Company ID (IČ): 09800581, VAT ID (DIČ): CZ09800581

Registered in the Commercial Register, File No. C 84384, kept by the Regional Court in Ostrava

Na Vyhlídce 772/7, 739 32 Vratimov, Czech Republic

E-mail: info@pavelszabo.cz

Web: https://music.pavelszabo.cz

The Controller declares that all personal data is processed as strictly confidential, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll. on the Processing of Personal Data.

2. Purposes of Personal Data Processing

  • Performance of the contractual relationship – processing orders, registration, conclusion of the contract (legal basis: Art. 6(1)(b) GDPR)
  • Sending commercial communications – e-mail, SMS marketing (legal basis: Art. 6(1)(a) GDPR – your consent)
  • Accounting and tax purposes – bookkeeping (legal basis: Art. 6(1)(c) GDPR)
  • Statistical purposes – anonymized traffic analysis (legal basis: Art. 6(1)(a) GDPR – your consent)
  • Displaying advertisements – personalization based on preferences (legal basis: Art. 6(1)(a) GDPR – your consent)
  • Legitimate interest – defense in the event of a dispute, network security (legal basis: Art. 6(1)(f) GDPR)

3. Personal Data Retention Period

We process personal data for the period strictly necessary to secure the rights and obligations arising from the mutual legal relationship:

  • Orders and contracts: 10 years (tax obligation)
  • Marketing (with consent): until consent is withdrawn, max. 3 years
  • Cookies: max. 12 months

4. Rights of the Data Subject

As a data subject, you have the following rights:

  • Right of access to personal data (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure ("right to be forgotten", Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent at any time, without affecting the lawfulness of prior processing
  • Right to lodge a complaint with the supervisory authority – Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz

5. Cookies

We use cookies on our website in accordance with Section 89 of Act No. 127/2005 Coll. on Electronic Communications.

5.1 Cookie Categories

  • Necessary cookies – ensure basic website functions (login, cart, security). Legal basis: Art. 6(1)(b) GDPR. Duration: max. 12 months.
  • Analytical cookies – anonymously collect data about traffic. Legal basis: Art. 6(1)(a) GDPR (your consent). Duration: max. 12 months.
  • Marketing cookies – track behavior for targeted advertising. Legal basis: Art. 6(1)(a) GDPR (your consent). Duration: max. 12 months.

5.2 Consent Management

Analytical and marketing cookies require your active consent, which you can give through the cookie bar on your first visit to the website. You can withdraw or change your consent at any time by clicking the cookie icon in the bottom-left corner of the page.

6. Sharing Data with Third Parties

To personalize content, analyze traffic, and display advertisements, we use third-party services:

Payment processing:

  • Stripe – our payment processor and, for digital products, our Merchant of Record (Stripe Managed Payments). Stripe processes payments, calculates and remits applicable taxes, and handles billing, refunds, and related transaction support. Stripe acts as an independent data controller for payment and tax data. See the Stripe Privacy Policy.

Analytical services:

  • Google Analytics (Google Ireland Ltd.) – traffic analysis
  • Microsoft Clarity (Microsoft Corporation) – session recordings, heatmaps
  • Ecomail.cz, s.r.o. – e-mail marketing and analytics

Marketing services:

  • Google Ads (Google Ireland Ltd.) – remarketing, conversions
  • Meta (Facebook, Instagram) – remarketing, conversions
  • Seznam.cz / Sklik – remarketing

7. Transfer to Third Countries

Your personal data may be transferred outside the European Union, in particular to the USA. Such transfers take place on the basis of:

  • EU-US Data Privacy Framework (DPF) – the European Commission's adequacy decision of July 10, 2023. Google, Meta, and Microsoft are certified under this framework.
  • Standard Contractual Clauses (SCC) approved by the European Commission as a supplementary mechanism
  • Additional technical and organizational measures to protect data

Processors concerned: Google LLC, Meta Platforms Inc., Microsoft Corporation.

8. Automated Decision-Making

We do not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR that would have legal effects or similarly significantly affect you.

9. Contact

To exercise your rights or for questions regarding the processing of personal data, contact us:

E-mail: info@pavelszabo.cz

Web: https://music.pavelszabo.cz