Privacy Policy

I. Basic Provisions

  1. Person Responsible for Data Protection:
    1. Name: Jan Grác
    2. Identification Number: 63703408
    3. VAT Identification Number (VAT ID No.): CZ5908191685
    4. Head Office: Grymovská 256/1a, 750 02 Přerov IV-Kozlovice, Czechia
    5. Contact: [email protected], +420 601 120 181
  2. The controller has not appointed a Data Protection Officer.

II. Sources and Categories of Personal Data Processed

  1. We process the following personal data: first name, surname, address, e-mail, telephone number, identification number, VAT identification number (VAT ID No.).
  2. You provide this data when placing an order or we obtain it from your order.

III. Legal Basis and Purpose of the Processing of Personal Data

  1. Legal Basis:
    1. Contract fulfilment (Art. 6 para. 1 lit. b) GDPR)
    2. Legitimate interest (marketing) (Art. 6 para. 1 lit. f) GDPR)
    3. Your consent (marketing) (Art. 6 para. 1 lit. a) GDPR in conjunction with Section 7 para. 2 Act No. 480/2004 Coll.)
  2. Purpose of Processing:
    1. Fulfilment of orders and contractual obligations
    2. Sending of commercial communications and marketing activities
  3. There is no automated decision-making pursuant to Art. 22 GDPR.

IV. Retention Period

  1. Retention Period:
    1. For 15 years after the termination of the contractual relationship
    2. For 5 years or until consent is withdrawn (for marketing purposes)
  2. We delete the personal data after the retention period has expired.

V. Recipients of Personal Data (Subcontractors)

  1. Recipients of personal data are persons involved in the delivery of goods, services, and the processing of payments.
  2. Personal data may be transferred to third-party providers of mailing (MailChimp), cloud (Amazon), and analytics services (Meta-Pixel, Google Tag Manager, Google Analytics 4, Microsoft Clarity, PostHog).

VI. AI Assistants and the MCP Server

  1. AI assistants (e.g. ChatGPT or Claude) can search our catalogue through our public MCP server at https://www.pethardware.com/mcp. The server does not create orders, does not change any data in our shop and does not ask for any personal data.
  2. For each request we store: the request text and its parameters, the IP address it came from, the name and version of the assistant application, a session identifier, the language, the time and a summary of the response (number of results and a preview). We do not receive the name or e-mail of the person using the assistant unless they type them into the request; the IP address, however, is personal data.
  3. Purpose: operating and securing the server and improving catalogue answers. Legal basis: legitimate interest (Art. 6 para. 1 lit. f) GDPR).
  4. We delete these records, and anonymise the request text passed to a language model (point 5), within 4 months of the request at the latest. They may remain in monthly database backups, which we keep for no more than 12 months, until the backup is deleted.
  5. A request to the "get_customer_answer" tool may be passed to OpenRouter (USA) and to the language model provider that selects the best answer from our published FAQ; we use the OpenRouter setting that excludes providers that collect data.
  6. How the assistant itself handles the conversation is governed by its operator's policy (e.g. OpenAI or Anthropic).

VII. Security of Personal Data

  1. We have taken technical and organisational measures to protect your personal data.
  2. Only authorised persons have access to personal data.

VIII. Your Rights

  1. You have the right to access your personal data, to have it rectified or erased, to restrict its processing, to data portability and to object to the processing.
  2. Where we process data on the basis of your consent, you may withdraw it at any time.
  3. To exercise these rights, simply write to [email protected] (contact details in point I.1).
  4. You have the right to lodge a complaint with a supervisory authority. The authority competent for the controller is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz). You may also lodge a complaint with the supervisory authority of the EU country where you habitually reside.

IX. Final Provisions

  1. By placing an order, you confirm that you have read and accepted this privacy policy.
  2. We may change this privacy policy. We will publish the new version on the website and send it to you by email.

This privacy policy is valid from 3 July 2024. Last updated on 2 November 2026.



Didn't find what you were looking for?

FAQ Contact us