Privacy Policy
This Privacy Policy (hereinafter referred to as the “Policy”) explains how HRAČKOLKA s.r.o., when operating the momkii.com online store, processes personal data, for what purposes it uses such data, to whom it may disclose it and what rights you have in connection with the processing of your personal data.
Data Controller
HRAČKOLKA s.r.o.
Prakšice 331687 56 Prakšice, Zlín Region, Czech Republic
Company ID: 08738297
VAT ID: CZ08738297
The company is registered in the Commercial Register maintained by the Regional Court in Brno, Section C, File 120447.
Contact e-mail:
info@momkii.com
Phone:
+420 603 794 921
As of the current version of this Policy, the Controller has not appointed a Data Protection Officer.
1. What personal data do we process and where do we obtain it?
Personal data means any information relating to an identified or identifiable natural person within the meaning of the GDPR.
We primarily process personal data that you provide to us when placing an order, registering a customer account, communicating with us, making a claim, returning goods, participating in a competition or survey, or subscribing to marketing communications.
Depending on the specific situation, this may include in particular:
- identification data, such as your first name, surname, company name, Company ID and VAT ID;
- contact details, in particular your e-mail address, phone number and billing or delivery address;
- information about orders, purchased goods, delivery and payment methods, claims, returns and other requests;
- information relating to your customer account and purchase history;
- the content of communications with us by e-mail, phone, contact forms or social media, if you use these communication channels;
- information about your marketing communication preferences, participation in competitions or surveys and, where applicable, information you provide to us in this connection;
- technical data relating to your use of the website, in particular your IP address, device, operating system and browser information, information about pages visited and data stored through cookies or similar technologies, where used;
- photographs, videos or other content if you provide them to us, for example as part of a review, competition or other communication.
2. Why do we process personal data and on what legal basis?
Order processing and performance of the contract
We process personal data so that we can accept and process your order, deliver the goods, receive payment, communicate with you and fulfil other rights and obligations arising from the contractual relationship.
The legal basis is the performance of a contract or taking steps prior to entering into a contract pursuant to Article 6(1)(b) of the GDPR.
Compliance with legal obligations
We process certain data in order to comply with obligations imposed by law, in particular in the areas of accounting, taxation and the retention of business records, as well as, where applicable, obligations towards public authorities.
The legal basis is compliance with a legal obligation pursuant to Article 6(1)(c) of the GDPR.
Customer care, claims and protection of our rights
We process personal data when handling your enquiries, claims, withdrawals from contracts and other requests, as well as to the extent necessary for the establishment, exercise or defence of our legal claims.
Depending on the specific situation, the legal basis is the performance of a contract, compliance with a legal obligation or our legitimate interest in protecting and enforcing legal claims pursuant to Article 6(1)(f) of the GDPR.
Direct marketing and marketing communications
If you are our customer, we may, under the conditions laid down by law, use your electronic contact details to send marketing communications concerning our own similar products or services. In such a case, we process personal data on the basis of our legitimate interest in direct marketing pursuant to Article 6(1)(f) of the GDPR and send marketing communications under the conditions of Section 7(3) of Act No. 480/2004 Coll. You may opt out of such communications easily and free of charge at any time.
If you are not our customer, we send marketing communications only where the statutory conditions are met, typically on the basis of your prior consent pursuant to Article 6(1)(a) of the GDPR.
You may unsubscribe at any time using the link included in the marketing communication or by contacting us at info@momkii.com.
Operation, security and improvement of the website
We may process necessary technical data for the purpose of ensuring the secure and reliable operation of the online store, protecting it against misuse and preventing fraudulent activity.
We use optional analytical and marketing cookies or similar technologies only where the statutory conditions are met and in accordance with your settings. More detailed information about the cookies we use, their purposes and duration can be found under Cookie Settings in the website footer.
According to the current version of this Policy, we do not carry out automated individual decision-making within the meaning of Article 22 of the GDPR.
3. Do you have to provide us with personal data?
Providing the data necessary to place and process an order is a contractual requirement. Without this data, it is not possible to conclude the contract or properly process the order.
Providing data for marketing purposes or consenting to the use of optional cookies is voluntary and does not affect your ability to make a purchase from the online store.
4. How long do we retain personal data?
We retain personal data only for as long as necessary for the purpose for which we process it and subsequently only to the extent required to comply with our legal obligations or protect our legal claims.
- data relating to an order and contractual relationship is retained for the period necessary to perform the contract and subsequently for no longer than 10 years after the end of the contractual relationship, where such retention is necessary to comply with legal obligations or protect legal claims;
- data processed on the basis of consent for marketing purposes is retained for no longer than 7 years, or until consent is withdrawn or the purpose of processing ceases to exist, whichever occurs first;
- data relating to claims and defective performance is retained for the period necessary to resolve the relevant matter and subsequently for the period necessary to protect related legal claims;
- data relating to a customer account and direct marketing may be retained for no longer than 5 years from the last relevant activity, unless you object, withdraw your consent or the purpose of processing ceases to exist earlier;
- photographs, reviews or other content published on the basis of an individual agreement are retained for the period specified in that agreement;
- the retention periods of individual cookies and similar technologies depend on their type and the settings stated in the Cookie Settings tool.
5. Who may have access to personal data?
Personal data is processed primarily by our authorised personnel. To the extent necessary, the data may also be disclosed to other recipients or processors, in particular:
- providers of the e-commerce platform and related technical services, in particular the company providing the Upgates solution;
- carriers and other persons involved in the delivery of goods;
- payment service providers and banks, in particular the provider of the Comgate payment gateway;
- providers of accounting, tax, legal, IT and other professional services;
- providers of mailing services, in particular Ecomail;
- providers of analytical and marketing services, in particular services provided by Google and Meta, where these services are used and to the extent corresponding to your cookie settings;
- the operator of the Heureka.cz service to the extent described below;
- public authorities and other authorised persons where disclosure is required by law or by a binding decision.
Some recipients act as our processors and process personal data only in accordance with our instructions. Other recipients, such as carriers, banks or payment service providers, may also act as independent data controllers within the scope of their own activities.
Heureka – Verified by Customers
We use the Heureka – Verified by Customers service to assess customer satisfaction with purchases. For this purpose, we provide the service operator, to the extent necessary, with your e-mail address and information about the goods purchased so that a customer satisfaction questionnaire can be sent to you.
Processing for this purpose is based on our legitimate interest in assessing customer satisfaction with purchases. You may object to receiving questionnaires at any time, in particular by using the link included in the e-mail sent to you.
6. Do we transfer personal data outside the European Economic Area?
Depending on the specific provider, some services, particularly analytical, marketing, mailing or cloud-based tools, may involve the transfer of personal data outside the European Economic Area.
Where such transfers take place, we ensure that they are carried out in accordance with the GDPR and on the basis of an appropriate legal mechanism, such as an adequacy decision issued by the European Commission or appropriate safeguards, in particular Standard Contractual Clauses.
7. What rights do you have?
Subject to the conditions set out in the GDPR, you have in particular:
- the right to obtain information about the processing of your personal data and the right of access to your personal data;
- the right to rectification of inaccurate or incomplete personal data;
- the right to erasure of personal data where the statutory conditions are met;
- the right to restriction of processing;
- the right to data portability where the conditions of the GDPR are met;
- the right to object to processing based on legitimate interests;
- the right to withdraw your consent at any time where processing is based on consent.
If we process personal data for direct marketing purposes, you have the right to object to such processing at any time. Once you object, we will no longer process your personal data for direct marketing purposes.
You may exercise your rights by contacting us at info@momkii.com.
We provide the first copy of the personal data being processed free of charge. For additional copies requested, a reasonable fee based on administrative costs may be charged under the conditions set out in the GDPR.
The right to erasure is not absolute. A request cannot be granted to the extent that further processing is necessary, for example, to comply with a legal obligation or for the establishment, exercise or defence of legal claims. This may apply, for example, to data contained in accounting and tax documents.
If you believe that the processing of your personal data infringes applicable law, you have the right to lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
Payment card details are not stored directly by HRAČKOLKA s.r.o. during the standard payment process; they are processed by the relevant payment service provider in accordance with the terms applicable to the selected payment method.
8. How do we protect personal data?
We have implemented appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or destruction.
Personal data is accessible only to persons who require it in order to perform their work or contractual obligations, and only to the extent necessary for the relevant purpose.
9. Final provisions
This Policy is provided for information purposes. By publishing it, we fulfil our information obligations towards individuals whose personal data we process.
We may update this Policy from time to time, in particular if the way we process personal data, the services we use or applicable legislation changes. The current version is always published on this page.
This Policy is valid and effective from 15 August 2026.