Privacy policy

1. Introduction

1.1 This policy explains how PIKASTORE s.r.o., Rybná 716/24, 110 00 Prague 1, Czech Republic, Company ID 19693311, VAT ID CZ19693311 (hereinafter “Capkov,” “we,” or “us”) processes personal data. It applies to:

  • visitors to www.capkov.com (the “Website”);
  • registered users (the “User”); and
  • customers who place an order on the Website (the “Customer”).

1.2 Capkov acts as the data controller—we determine the purposes and means of processing personal data under Regulation (EU) 2016/679 (GDPR) and applicable Czech legislation.

2. Types of Data We Process

2.1 Data Provided by Customers

We process personal data that Customers provide when registering or placing an order, including:

  • first and last name;
  • address and contact details (e‑mail, phone);
  • payment information;
  • additional information (e.g., delivery instructions).

2.2 Data Collected via Cookies

Capkov uses necessary, analytics, and marketing cookies. If you consent to cookies, we may receive data about:

  • pages visited;
  • products viewed;
  • on‑site behaviour.

For details, see our Cookie Policy (available on the Website).

2.3 Automated Processing & Profiling

We use automated analysis of purchasing behaviour to personalise offers. This processing does not have legal or similarly significant effects on the Customer.

2.4 Sensitive Data

Capkov does not process sensitive personal data (e.g., health data, political opinions).

2.5 Customer Lists for Advertising (Google Customer Match, Meta Custom Audiences)

If you have subscribed to our marketing communications, Capkov may share your email address and phone number (and, where available, your name, country and postcode) in hashed form (a one-way fingerprint) with Google Ireland Limited and Meta Platforms Ireland Limited. Hashed data is still personal data. Google and Meta only match it against their user accounts and use it as guidance for targeting Capkov ads, for example so that you are not shown ads for products you have just bought. Data that cannot be matched is deleted and is not used for any other purpose. We remove you from these lists within 30 days of withdrawing your consent, and you remain on a list for no longer than 540 days.

3. Legal Bases for Processing

We process personal data on the following legal grounds:

  1. Performance of a contract (Art. 6 (1)(b) GDPR) – to fulfil your order.
  2. Compliance with a legal obligation (Art. 6 (1)(c) GDPR) – e.g., accounting and tax duties.
  3. Legitimate interests (Art. 6 (1)(f) GDPR) – Website analytics, direct marketing, fraud prevention.


Consent (Art. 6 (1)(a) GDPR) – e.g., for cookies or newsletters.

Customer lists for advertising (section 2.5) – your consent (Art. 6 (1)(a) GDPR).

4. Withdrawal of Consent & Marketing Opt‑Out

You may withdraw consent at any time and unsubscribe from marketing e‑mails by clicking the “Unsubscribe” link in any message or by contacting us at info@capkov.com.

Unsubscribing from our marketing emails (via the link in any email or by contacting us, see section 9) also withdraws your consent to customer-list advertising. We will remove you from the Google and Meta lists within 30 days. You can also turn off personalised ads in your Google account settings (myadcenter.google.com) and in your Facebook and Instagram ad preferences.

5. Who Has Access to Your Data?

5.1 Internal Processing

Personal data are processed by Capkov’s employees and authorised collaborators to the extent necessary for their duties.

5.2 Data Processors (Third Parties)

We may engage trusted service providers solely to deliver services such as:

  • Shipping & logistics (e.g., Zásilkovna, Czech Post, PPL, UPS, DHL, FedEx);
  • Payment services (e.g., Shopify Payments, banks, card processors);
  • Marketing & analytics (e.g., Google, Meta – Facebook/Instagram).
  • Google Ireland Limited (Ireland) – customer list matching for Google Ads (Customer Match), acting as data processor;
  • Meta Platforms Ireland Limited (Ireland) – Custom Audiences for Facebook and Instagram ads, acting as data processor.

Data may be processed in the USA (Google LLC, Meta Platforms, Inc.) under the EU-US Data Privacy Framework and Standard Contractual Clauses.

5.3 International Transfers

We operate from the Czech Republic but ship worldwide. Therefore, personal data may be transferred outside the EU/EEA when required to deliver orders or provide support services (for example, to non‑EU carriers, customs brokers, or cloud providers). In such cases we ensure that:

  • the destination country has an adequacy decision by the European Commission, or
  • we have concluded Standard Contractual Clauses or adopted other appropriate safeguards under Art. 46 GDPR.

6. Data Retention

6.1 Contract Performance

We store personal data as long as necessary to complete and deliver your order. After delivery, data are kept for 10 years to meet accounting and tax obligations.

6.2 Claims & Legal Rights

Data required to resolve claims or legal disputes are retained as long as needed to protect Capkov’s legitimate interests (e.g., until the end of the statutory limitation period).

6.3 Marketing & Cookies

Marketing and cookie data are processed for as long as consent remains valid—i.e., until you withdraw consent or change your browser settings.

6.4 Newsletters

If you unsubscribe from newsletters, your personal data for this purpose will be deleted.

7. Your Rights

7.1 Right to Erasure (“Right to Be Forgotten”)

You may request deletion of your personal data when they are no longer necessary for contractual or legal purposes or for Capkov’s legitimate interests. We will verify your identity before fulfilling such requests.

7.2 Other Rights

  • right of access;
  • right to rectification;
  • right to restriction of processing;
  • right to data portability;
  • right to object to processing.

7.3 Supervisory Authority

If you believe we process your data unlawfully, you may lodge a complaint with the Czech Data Protection Authority (www.uoou.cz).

8. Data Security

8.1 Capkov implements technical and organisational measures to protect personal data against unauthorised access, misuse, or breach.

8.2 Access to data is granted only to authorised personnel to the extent necessary for their role. You are responsible for safeguarding your account credentials and preventing unauthorised access.

9. Contact Us

For questions about data processing or to exercise your rights, contact info@capkov.com.

10. Effective Date

This Privacy Policy is valid and effective from 1  June  2025