Privacy Policy

Last updated: 10 September 2026

This Privacy Policy explains how VALMIO s.r.o. collects, uses, stores and protects personal data when you visit our websites, purchase our products, create an account, subscribe to marketing communications or otherwise interact with us.

This Privacy Policy applies to the processing of personal data subject to the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and, where applicable, other European data protection laws, including the UK GDPR and applicable Swiss data protection legislation.

1) Data Controller and Contact Details

The controller responsible for the processing of your personal data is:

VALMIO s.r.o.
Stará Kysibelská 598/31
360 01 Karlovy Vary
Czech Republic
Company ID (IČO): 09132406
VAT ID (DIČ): CZ09132406
Registered in the Commercial Register maintained by the Regional Court in Plzeň
File No.: C 39287/KSPL
Email: info@valmio.eu
Tel.: +420 601 001 585

We have not appointed a Data Protection Officer. If you have any questions regarding the processing of your personal data or wish to exercise your data protection rights, please contact us using the details above.

2) Personal Data We Collect

Depending on how you interact with us, we may process the following categories of personal data:

Identification and contact information: name, surname, billing address, delivery address, email address and telephone number;
Order and transaction information: products purchased, order history, order value, discounts, delivery method, payment status, returns, exchanges and complaints;
Payment information: payment method and transaction identifiers. We do not normally receive or store full payment card details where payment is processed by an external payment provider;
Customer account information: login information, saved addresses, preferences and account activity;
Customer service information: emails, messages, enquiries, complaints and other communications with us;
Marketing information: newsletter subscriptions, consent status, marketing preferences and interactions with marketing communications;
Website and technical information: IP address, browser type, device information, operating system, website activity, pages viewed, referral information and similar technical data;
Cookie and advertising information: identifiers and information collected through cookies, pixels and similar technologies, subject to your consent where required by law;
Reviews and user-submitted content: reviews, comments, photographs or other information you voluntarily submit to us.

3) Why We Process Your Personal Data and Legal Bases

3.1 Orders and performance of the contract

We process personal data necessary to accept, process and deliver your order, process payments, communicate with you about your purchase, handle returns, exchanges, complaints and warranty claims, and provide related customer service.

Legal basis: performance of a contract or steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)) and compliance with legal obligations (GDPR Art. 6(1)(c)).

3.2 Customer support and communication

We process your contact details and communications when you contact us regarding our products, orders, services, complaints or other enquiries.

Legal basis: performance of a contract (GDPR Art. 6(1)(b)) or our legitimate interest in providing effective customer service and managing our business relationships (GDPR Art. 6(1)(f)).

3.3 Accounting, tax and legal obligations

We process and retain certain information relating to orders, payments and invoices in order to comply with accounting, tax, consumer protection and other legal obligations.

Legal basis: compliance with legal obligations (GDPR Art. 6(1)(c)).

3.4 Website operation, security and fraud prevention

We may process technical information to operate and protect our websites, prevent fraud and abuse, detect security incidents, troubleshoot technical problems and maintain the reliability of our services.

Legal basis: our legitimate interests in operating secure and reliable online services (GDPR Art. 6(1)(f)).

3.5 Analytics and website improvement

Where permitted and, where required, with your consent, we use analytics technologies to understand how visitors use our websites, measure website performance and improve our products, services and customer experience.

Legal basis: consent (GDPR Art. 6(1)(a)) where required, or legitimate interests where processing is permitted without consent.

3.6 Marketing and personalised offers

We may use information about your purchases, product interests, preferences and interactions with our marketing communications to provide more relevant product recommendations, offers and marketing content.

For example, we may use previous purchase information to determine which product categories or offers may be more relevant to you and to avoid sending irrelevant or excessive marketing communications.

Marketing communications are sent only where we have an appropriate legal basis under applicable law. This may include your consent or, where permitted by applicable law, marketing to existing customers in connection with similar products or services.

You can unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us at info@valmio.eu.

Withdrawing consent or unsubscribing from marketing does not affect transactional or service communications necessary for your orders, payments, returns, complaints or other contractual matters.

4) Cookies and Similar Technologies

Our websites use cookies and similar technologies. Some cookies are necessary for the website to function, while others may be used for analytics, personalisation and advertising.

Where required by applicable law, non-essential cookies and similar technologies are activated only after you have provided your consent through our cookie settings or consent banner.

You may change or withdraw your cookie preferences at any time through the cookie settings available on our website.

4.1 Essential cookies

Essential cookies are necessary for functions such as shopping carts, checkout, login, security, fraud prevention, language or region settings and other functions required to provide our website and services.

4.2 Analytics cookies

Where enabled and subject to applicable consent requirements, we may use analytics services such as Google Analytics to understand website usage and improve our services.

4.3 Advertising and marketing technologies

Where enabled and subject to your consent where required, we may use advertising and measurement technologies provided by services such as:

Google Ads;
Meta / Facebook / Instagram;
Microsoft Advertising;
Pinterest;
other advertising or analytics partners used by our websites from time to time.

These services may process information about your device, browsing activity and interactions with our websites in order to measure advertising effectiveness or provide personalised advertising where you have consented to such processing.

4.4 Managing cookies

You can manage your cookie preferences through our cookie consent tool and, where applicable, through your browser settings. Disabling essential cookies may affect the functionality of the website, shopping cart or checkout.

5) E-commerce Platforms and Service Providers

We use third-party service providers to operate our online stores and fulfil our obligations to customers.

Depending on the website, these providers may include:

E-commerce and hosting providers, including Shopify and other platforms used to operate our online stores;
Payment service providers used to securely process payments;
Delivery and logistics providers used to deliver and return orders;
Email and communication providers used to send transactional and, where permitted, marketing communications;
Analytics and advertising providers used in accordance with your privacy and cookie preferences;
IT, hosting and technical service providers that support the operation, security and maintenance of our systems;
Accounting, legal and professional advisers where necessary for our business or legal obligations.

We disclose only the personal data reasonably necessary for the relevant service or purpose.

6) Delivery and Payment Partners

When necessary to complete your order, we may share your name, address, telephone number, email address and relevant order information with delivery companies, fulfilment providers and other logistics partners.

Payment information may be processed directly by payment gateways, banks, card networks or other payment service providers. These providers may process certain personal data under their own privacy policies and legal obligations.

7) International Transfers of Personal Data

Some of our service providers may process personal data outside the European Economic Area, the United Kingdom or Switzerland.

Where personal data is transferred internationally, we use appropriate safeguards required by applicable data protection law. These may include an adequacy decision, Standard Contractual Clauses approved by the European Commission or other legally recognised transfer mechanisms.

8) Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required by law.

Retention periods depend on the type of information and may include:

Order, invoice and accounting information: for the period required under applicable accounting and tax legislation, which may generally be up to 10 years;
Customer account information: while the account remains active and for a reasonable period afterwards, unless earlier deletion is requested and no legal reason requires further retention;
Customer service and complaint records: for as long as reasonably necessary to manage the matter and establish, exercise or defend legal claims;
Marketing information: until consent is withdrawn, the customer unsubscribes or the information is no longer required for the relevant marketing purpose;
Consent and opt-out records: for as long as reasonably necessary to demonstrate compliance with applicable law;
Technical and security data: for a period reasonably necessary for security, fraud prevention, troubleshooting and system protection.

When personal data is no longer required, it is deleted, anonymised or otherwise securely disposed of, unless continued retention is required by law.

9) Security of Personal Data

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, disclosure or destruction.

These measures may include access controls, encryption in transit, authentication measures, backups, system monitoring and restrictions on access to personal information.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

10) Your Data Protection Rights

Subject to the conditions provided by applicable data protection law, you may have the right to:

access your personal data;
correct inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
receive your data in a portable format where applicable;
object to processing based on legitimate interests;
object at any time to direct marketing;
withdraw consent at any time where processing is based on consent;
lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, please contact us at info@valmio.eu.

We may request information necessary to verify your identity before responding to certain requests.

We will respond within the period required by applicable data protection law. Under the GDPR, this is normally within one month, although this period may be extended in certain circumstances.

11) Marketing Profiling and Automated Processing

We may use limited profiling to personalise marketing communications and product recommendations.

Such profiling may take into account information such as previous purchases, product categories, customer preferences and interactions with previous communications in order to determine which products or offers may be more relevant to you.

This processing may be performed using automated tools. We do not use such profiling to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

You may object to the use of your personal data for direct marketing, including related profiling, at any time.

12) Children's Privacy

Our online stores and products are intended for general retail customers and are not specifically directed at children.

We do not knowingly seek to collect personal data directly from children for marketing purposes. If you believe that personal data relating to a child has been provided to us inappropriately, please contact us.

13) Links, Embedded Content and Third-Party Services

Our websites may contain links to third-party websites or embedded content such as videos, social media features, maps, payment services or other external services.

When you interact with third-party services, those providers may process personal data in accordance with their own privacy policies. We encourage you to review the privacy information provided by the relevant third party.

14) Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, legal obligations or data processing practices.

The current version will be published on this page together with the date of the latest update.

15) Complaints and Supervisory Authority

If you have concerns regarding how we process your personal data, we encourage you to contact us first at info@valmio.eu.

You also have the right to lodge a complaint with the competent data protection authority in your country of residence, place of work or place of the alleged infringement.

Our lead supervisory authority in the Czech Republic is:

Úřad pro ochranu osobních údajů (ÚOOÚ)
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
www.uoou.cz

16) Contact Us

For questions about this Privacy Policy or the processing of your personal data, please contact:

VALMIO s.r.o.
Stará Kysibelská 598/31
360 01 Karlovy Vary
Czech Republic
Company ID (IČO): 09132406
VAT ID (DIČ): CZ09132406
Email: info@valmio.eu
Tel.: +420 601 001 585