Effective from: 01. 01. 2026
Orfeo Office, s.r.o. respects the privacy of its customers, visitors to the online store and other persons whose personal data it processes.
This document provides information about what personal data we process, for what purposes, on what legal basis, how long we retain it, to whom we may disclose it and what rights you have in connection with the processing of personal data.
The controller of personal data is:
Orfeo Office, s.r.o.
Registered office:
Chelčického 95/15
370 01 České Budějovice
Czech Republic
Contact address:
Chelčického 95/13A
370 01 České Budějovice
Czech Republic
Company ID No.: 25176269
VAT ID No.: CZ25176269
E-mail: info@orfeoshop.com
Telephone: +420 734 215 588
Online store: https://www.orfeoshop.co.uk
For the purposes of this document, Orfeo Office, s.r.o. is hereinafter referred to as the “controller”, “we” or “https://www.orfeoshop.co.uk”.
Depending on how you use our services, we may process in particular the following data:
Identification data:
first name, surname, business name, Company ID No., VAT ID No. and, where applicable, VAT identification number.
Contact details:
e-mail address, telephone number, billing address and delivery address.
Order data:
goods ordered, quantity, prices, order number, delivery method, payment method, order status, order history and data required to process orders.
Payment data:
information about the payment method and payment status, amount, transaction identification and other data required to match the payment.
We do not store full payment card details.
Customer account data:
e-mail address, information stored in the customer account, delivery and billing details and order history.
Passwords are stored in a technically secured form; the controller does not use user passwords in openly readable form.
Data relating to complaints, withdrawal from the agreement and customer support:
content of communications, product information, photographs or videos provided by the customer, product serial number, information about the complaint and the method of its resolution.
Technical data:
IP address, date and time of visit, device and browser type, technical logs, data necessary to secure the online store and, depending on cookie settings, online identifiers and data relating to the use of the website.
Marketing-related data:
e-mail address, information about the granting or withdrawal of consent, information about opting out of commercial communications and, where applicable, data about interactions with commercial communications.
If you place an order with us, we process personal data necessary for:
accepting and processing the order,
concluding and performing the purchase agreement,
preparing and dispatching the goods,
arranging delivery,
processing payment,
issuing accounting and tax documents,
communication relating to the order,
processing any withdrawal from the agreement,
complaints and other rights arising from the purchase agreement.
The legal basis is, in particular, performance of the agreement and taking steps prior to entering into the agreement.
We do not require the customer’s consent to process personal data necessary for processing an order.
We also process certain data in order to comply with legal obligations, particularly accounting and tax obligations.
Data marked as mandatory during the ordering process is required for the conclusion or performance of the purchase agreement.
Without data necessary to identify and contact the customer, deliver the goods and, where applicable, issue an invoice, it may not be possible to process the order.
The provision of data for marketing purposes is voluntary and is not a condition of purchase.
For processing online payments, we use in particular the Comgate payment gateway.
When paying by card or using other payment methods, the customer may be redirected to the secure environment of the payment service provider.
Full payment card details are not transmitted to ProdejKavy.cz and are not stored by us.
For the purposes of processing and matching payments, we may in particular process:
order number,
amount,
currency,
transaction identification,
payment status,
variable symbol,
and other data necessary to complete and record the payment.
The payment gateway provider is Comgate a.s., Company ID No. 27924505, with its registered office at Gočárova třída 1754/48b, 500 02 Hradec Králové.
Data relating to standard bank transfers may also be transmitted to the relevant banks, in particular Fio banka, a.s.
Comgate operates the payment gateway used and the current company has Company ID No. 27924505. help.comgate.cz
In order to deliver the ordered goods, we provide the carrier with data necessary for transportation, in particular:
first name and surname of the recipient,
delivery address or selected collection point,
telephone number,
e-mail address,
data required to identify the shipment,
and, where applicable, the cash-on-delivery amount.
For delivery, we use in particular:
Direct Parcel Distribution CZ s.r.o.
Company ID No.: 61329266
Modletice 135
251 01 Říčany u Prahy
The transfer of this data is necessary for performance of the purchase agreement and delivery of the order.
If you create a customer account, we process the data necessary for its operation, in particular your e-mail address, billing and delivery details and order history.
The customer account is used in particular to facilitate future purchases and manage customer information.
You may request deletion of your customer account by e-mail at info@orfeoshop.com.
Deletion of the customer account does not necessarily mean immediate deletion of all data relating to orders already completed if we are required or otherwise have a legitimate reason to retain such data, for example for accounting purposes, complaints or the protection of legal claims.
If you contact us in connection with a complaint, withdrawal from the agreement, damage to a shipment, a query or another request, we process the data necessary to deal with the specific matter.
This may include in particular:
identification and contact details,
order number,
information about the purchased product,
description of the problem,
photographs or videos,
serial number,
communication history,
information about the method of resolution.
Depending on the specific situation, the legal basis is performance of the agreement, compliance with legal obligations or our legitimate interest in properly handling customer requests and protecting legal claims.
If you activate an availability notification for a product, we will use the e-mail address provided to send the requested notification.
We use the data to provide the service you requested.
After the notification has been sent or the request has been cancelled, we no longer need the e-mail address for this specific purpose unless there is another legal basis for its processing.
Activation of an availability alert does not in itself constitute consent to receive a general marketing newsletter.
If you have subscribed to the newsletter and consent is required for its distribution, we use your e-mail address on the basis of that consent.
Consent is voluntary and may be withdrawn at any time, in particular by using the unsubscribe link provided in every marketing e-mail.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
If we obtained your e-mail address in connection with the purchase of our product or service, we may, subject to the conditions laid down by law, use it to send commercial communications relating to our own similar products or services.
Such processing of personal data for direct marketing purposes is based on our legitimate interest.
When we obtain your contact details and in each individual commercial communication, you have the option to easily and free of charge opt out of further communications.
Once you object to direct marketing, we will no longer process your personal data for this purpose.
This arrangement corresponds to Section 7(3) of Act No. 480/2004 Coll. and the interpretation of the Czech Office for Personal Data Protection.
We may determine your satisfaction with your purchase through the Ověřeno zákazníky programme operated by:
Heureka Group a.s.
Company ID No.: 07822774
Karolinská 706/3
186 00 Praha 8 – Karlín
For this purpose, we may provide Heureka Group a.s. with, in particular:
the customer’s e-mail address,
information about the goods purchased,
and necessary information relating to the order.
The purpose is to send a customer satisfaction questionnaire and evaluate the customer’s shopping experience.
We carry out this processing on the basis of our legitimate interest in determining customer satisfaction and improving our services, unless you have opted out of receiving the questionnaire.
You may opt out of receiving the questionnaire during the ordering process or by using the relevant link in the communication sent to you.
If you publish a review through Heureka, Heureka Group a.s. may subsequently process personal data in accordance with its own privacy policy.
The current operator is Heureka Group a.s., Company ID No. 07822774.
We use cookies and similar technologies on our website.
Cookies necessary for the proper functioning of the online store may be used without consent to the extent permitted by law.
Analytics and marketing technologies for which consent is required are activated only in accordance with the user’s settings in the cookie banner.
We may use, in particular, services provided by Google Ireland Limited, such as Google Analytics and Google Ads, as well as other advertising or analytics services used by the online store.
Depending on your settings, the following data may in particular be processed:
online identifiers,
IP address or data derived from it,
information about the device and browser,
pages visited,
interactions with the website,
conversion information,
data relating to the evaluation of advertising.
You may change your consent settings at any time through the cookie settings on the website.
Details of individual cookies, their providers, purposes and duration are provided in our Cookie Policy and in the cookie settings tool.
The Czech Office for Personal Data Protection states that technically necessary cookies do not require consent, whereas consent is required for other cookies, typically analytics and marketing cookies. Google also requires the transmission of appropriate consent signals for measurement, personalisation and remarketing involving users in the EEA.
We process technical data and operational records to the extent necessary for:
ensuring the security of the online store,
protecting customer accounts,
preventing misuse,
detecting technical problems,
protecting our property and rights,
protecting customers and other persons.
The legal basis is our legitimate interest in the secure and proper operation of the online store.
Access to personal data is restricted to persons who need it to perform their employment or contractual duties.
We disclose personal data only to the extent necessary for the specific purpose.
Recipients or processors may include in particular:
carriers, in particular Direct Parcel Distribution CZ s.r.o.,
payment service providers, in particular Comgate a.s.,
banks and financial institutions,
Heureka Group a.s. in connection with the Ověřeno zákazníky programme,
providers of IT services, hosting, databases, e-mail services and technical support,
providers of accounting, tax and legal services,
providers of analytics and advertising services where their use complies with your consent settings,
public authorities where we are required by law to provide the data,
and, where applicable, other persons where disclosure is necessary for performance of the agreement, compliance with a legal obligation or protection of legitimate rights.
We provide each recipient only with the data necessary for the relevant service.
Some providers of technical, analytics or advertising services may process data outside the European Economic Area as part of their services.
Where such a transfer takes place, we use providers and mechanisms that enable the transfer to be carried out in accordance with Chapter V of the GDPR, in particular on the basis of:
an adequacy decision of the European Commission,
a valid framework recognised by the European Commission,
standard contractual clauses,
or another legally permissible mechanism.
For European data processed through Google services, the relevant European entity is Google Ireland Limited; Google also provides mechanisms for any limited transfers outside the EEA.
We do not retain personal data for longer than is necessary for the purpose for which it was collected or as required by law.
In general, we apply in particular the following rules:
Order and contractual relationship data:
for the duration of the contractual relationship and subsequently for the period necessary to protect legal claims.
Accounting and tax documents:
for the period specified by the relevant accounting and tax legislation, in applicable cases for up to 10 years.
Complaints and related communications:
for the duration of the complaint handling process and subsequently for the period necessary to document its course and protect legal claims.
Customer account:
for the duration of its existence; after cancellation of the account, data that we are required to retain for another legal reason may be kept for the corresponding period.
Marketing based on consent:
until consent is withdrawn, but no longer than a period appropriate to the marketing purpose; we regularly review the validity and necessity of marketing data.
Marketing to existing customers:
until an objection is raised or until we no longer have a reasonable basis for using the contact details to offer our own similar products and services.
Technical security records:
for a period appropriate to the purpose of ensuring security and addressing any security incidents.
If a legal dispute, inspection, complaint or other proceedings arise, we may retain the related data for the period necessary to resolve the matter and protect our rights.
In connection with the processing of personal data, and subject to the conditions laid down in the GDPR, you have in particular:
the right of access to personal data,
the right to rectification of inaccurate or incomplete data,
the right to erasure of personal data,
the right to restriction of processing,
the right to data portability,
the right to object to processing based on legitimate interest,
the right to withdraw consent at any time where processing is based on consent,
the right to lodge a complaint with a supervisory authority.
The right to erasure is not absolute. For example, we may not be able to delete certain data where its continued retention is required by law or where we need it for the establishment, exercise or defence of legal claims.
If we process personal data for direct marketing purposes, you have the right to object at any time.
Once you object, we will no longer process your personal data for direct marketing purposes.
You may unsubscribe in particular by using the link provided in every marketing e-mail or by contacting us by e-mail at:
info@orfeoshop.com
Where certain processing is based on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
Withdrawal of consent must not adversely affect services whose provision does not depend on that consent.
You may exercise your rights in particular:
by e-mail at:
info@orfeoshop.com
or in writing at:
Orfeo Office, s.r.o.
Chelčického 95/13A
370 01 České Budějovice
Czech Republic
In order to protect personal data against unauthorised disclosure, we may, in justified cases, require reasonable verification of the applicant’s identity.
We respond to requests within the time limits laid down by the GDPR.
If you believe that the processing of your personal data is in breach of applicable law, you have the right to lodge a complaint with:
Úřad pro ochranu osobních údajů
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
Before lodging a complaint, you may contact us at info@orfeoshop.com, and we will attempt to resolve your matter.
We obtain personal data in particular:
directly from you when you place an order, register or communicate with us,
from your customer account,
in connection with payment and confirmation of its status,
from the carrier in connection with delivery of the shipment,
from the technical systems of the online store,
from cookies and similar technologies according to your settings,
and, where applicable, from publicly available registers where necessary, for example, to verify information relating to a business customer.
We may update this Privacy Policy in particular in the event of changes to:
applicable legislation,
services or suppliers used,
the manner in which personal data is processed,
or the operation of the online store.
The current version will always be published on the ProdejKavy.cz website together with its effective date.
Any new version will not be applied retroactively in a manner that would adversely affect the rights of data subjects.
If you have any questions regarding the processing of personal data or wish to exercise any of your rights, please contact us:
Orfeo Office, s.r.o.
Registered office:
Chelčického 95/15
370 01 České Budějovice
Contact address:
Chelčického 95/13A
370 01 České Budějovice
Company ID No.: 25176269
VAT ID No.: CZ25176269
E-mail: info@orfeoshop.com
Telephone: +420 734 215 588
This Privacy Policy is effective from 01. 01. 2026.
In accordance with the General Data Protection Regulation 2016/679 of 27 April 2016 (GDPR), I hereby grant my consent to the processing of my personal data to the extent of contact details at www.OrfeoShop.co.uk, Chelcickeho 95/13A, 37001 Ceske Budejovice data, email address and telephone number for the purpose of processing:
Personal data will be processed by the company for a period of 10 years from the granting of consent.
Personal data will not be subject to automated individual decision-making, including profiling, within the meaning of Article 22 of the General Regulation when processed for these purposes. The provided personal data will be processed automatically in electronic form or manually in written form.
