Privacy Policy
Last updated: June 2025
1. Data Controller
The controller of personal data is Kopec InnoTech s.r.o., IČ: 21847126, Grafická 3365/1, Smíchov, 150 00 Praha 5, Czech Republic (operating MerchCrate, hereinafter "MerchCrate" or "we"). Contact: merchcrate@kopecinnotech.com.
2. What Data We Process
When you place an order, we collect the following personal data:
- Full name
- Email address
- Phone number (optional)
- Delivery address
- Company registration number / VAT ID (for business purchases)
- Logos and artwork you provide to us
3. Purpose of Processing
We use your data exclusively for:
- Processing and delivering your order
- Communicating with you regarding your order
- Issuing invoices and fulfilling legal obligations
- Sending confirmations and visualizations
We do not sell or share your data with third parties for marketing purposes.
4. Legal Basis
Processing is necessary for the performance of a contract (Art. 6(1)(b) GDPR) and for compliance with the controller's legal obligations (Art. 6(1)(c) GDPR).
5. Retention Period
We retain data for as long as necessary to process your order, and thereafter for the period required by law (generally 5 years for tax and accounting records).
6. Cookies
This website uses cookies and similar local storage to improve functionality and, optionally, to analyze traffic. You can accept or decline non-essential cookies on your first visit. See our Cookie Policy for the full list and what each one is used for. Cookies are not required for the core functions of the order form.
7. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Have your data erased ("right to be forgotten")
- Restrict processing
- Data portability
- Lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz)
To exercise your rights, contact us at merchcrate@kopecinnotech.com.