Privacy Policy
1. Who is the data controller?
The controller of your personal data is:
SM Production s.r.o. Company ID: 27203719 VAT ID: CZ27203719 Registered office: Arbesova 492, 272 01 Kladno, Czech Republic Email: info@merch4u.cz Telephone: +420 777 671 036
Correspondence address and showroom:
Merch4U Mlýnská 60/2 160 00 Prague 6 – Bubeneč Czech Republic
This Privacy Policy explains how we process the personal data of visitors to katalog.merch4u.cz, prospective customers, existing customers and other persons who communicate with us.
2. What personal data do we process?
Depending on how you use the website and the course of our cooperation, we may process the following personal data in particular:
- first name and surname;
- company name, Company ID and VAT ID;
- email address and telephone number;
- billing and delivery address;
- the content of your enquiry and other information entered in the enquiry form;
- information about selected products, required quantities and branding methods;
- artwork and other files submitted in connection with an enquiry or order;
- information about quotations, orders, deliveries, invoicing and complaints;
- the content of email, telephone and other communications;
- technical data relating to your use of the website, such as your IP address, device and browser type, date and time of your visit, pages visited, URLs and cookie identifiers;
- any other information that you voluntarily provide to us.
3. Why do we process your data and what is the legal basis?
Handling enquiries
We use the information entered in the enquiry form or sent to us by email to handle your enquiry, prepare a quotation and communicate with you.
The legal basis for this processing is taking steps at your request prior to entering into a contract. If you contact us as an employee or representative of a company, the legal basis also includes our legitimate interest in communicating with customers and business partners.
Fulfilling orders
We process personal data to prepare artwork previews, manufacture and brand textiles, arrange the handover or delivery of goods, issue invoices, handle complaints and conduct other communications related to an order.
The legal basis is the performance of a contract or our legitimate interest in properly fulfilling contracts concluded with legal entities.
Compliance with legal obligations
We retain certain information because we are required to do so under accounting, tax and other applicable laws.
The legal basis is compliance with a legal obligation.
Protection of our rights and security
We may also process personal data to protect our rights, handle complaints and disputes, prevent misuse and ensure the security of our website.
The legal basis is our legitimate interest in protecting legal claims and property and ensuring the secure operation of our services.
Marketing communications
If you consent to receiving our newsletter, we will use your email address to send you Merch4U news, inspiration and offers.
In accordance with applicable legislation, we may also send existing customers offers relating to our own similar products and services. You may object to receiving marketing communications at any time and free of charge.
You can unsubscribe using the link included in every marketing email or by contacting us at info@merch4u.cz.
Analytics and advertising
If you provide your consent through the cookie banner, we may process information about your use of the website to measure traffic, evaluate advertising campaigns and improve our services.
Further information is available in the cookie settings on the website. You may change or withdraw your consent at any time using the Cookie Settings link.
4. Is the provision of personal data mandatory?
Providing information through the enquiry form is voluntary. However, without your contact details and the information required to prepare a quotation, we may not be able to handle your enquiry.
Information required to enter into and perform a contract, issue invoices or deliver goods is a contractual or statutory requirement. Without this information, we may not be able to fulfil your order.
Consent to newsletters, analytics cookies or advertising cookies is voluntary. Refusing consent does not affect your ability to submit an enquiry or use the website’s essential functions.
5. How long do we retain personal data?
We retain personal data only for as long as necessary for the relevant purpose:
- information from enquiries that did not result in a contract is generally retained for three years from the last communication;
- information relating to an order is retained for the duration of the contractual relationship and subsequently for the period required to protect legal claims;
- accounting and tax documents are retained for the period required by law, generally for up to ten years;
- information used to send newsletters is retained until consent is withdrawn, but no longer than three years from the recipient’s last demonstrable activity;
- information used to offer similar services to existing customers is retained until the recipient unsubscribes or objects, generally for no longer than three years from the most recent order;
- information collected through optional cookies is retained for the period stated in the current cookie overview;
- technical and security logs are retained only for the period necessary to secure and monitor the operation of the website.
We may extend these retention periods where reasonably necessary in connection with a complaint, dispute, inspection or the establishment, exercise or defence of legal claims.
6. Who may receive your personal data?
We may disclose personal data, to the extent necessary, to our suppliers and partners, including:
- website, hosting and technical support providers;
- email and newsletter service providers;
- cloud storage and order management service providers;
- accountants, tax advisers, legal advisers and auditors;
- manufacturing and supply partners involved in fulfilling an order;
- transport and courier companies;
- analytics and advertising service providers where you have consented to their use;
- public authorities where disclosure is required by law.
Depending on the current configuration of the website, services provided by Google, Vimeo, Solidpixels and other technical suppliers may be used. We use Mailchimp to distribute our newsletter.
Suppliers processing personal data on our behalf are required to protect the data and use it only for the agreed purposes.
7. Transfers outside the European Economic Area
Some service providers may process personal data outside the European Economic Area, particularly in the United States.
In such cases, the transfer is based on an appropriate legal mechanism, such as an adequacy decision adopted by the European Commission, the recipient’s certification under the EU–US Data Privacy Framework or the Standard Contractual Clauses approved by the European Commission.
8. Cookies
The website uses cookies and similar technologies.
Essential cookies ensure the basic operation and security of the website and do not require consent. We use analytics, preference and advertising cookies only with your prior consent.
When you first visit the website, you can choose whether to accept or reject optional cookies or configure your preferences by category. You can change your choice at any time using the Cookie Settings link in the website footer.
9. Your rights
Subject to the conditions set out in the GDPR, you have the right to:
- obtain confirmation as to whether we process your personal data and request access to it;
- request the correction of inaccurate data or the completion of incomplete data;
- request the deletion of your personal data;
- request the restriction of processing;
- receive your data in a structured, commonly used and machine-readable format and, where applicable, have it transmitted to another controller;
- object to processing based on legitimate interests;
- object to processing for direct marketing purposes at any time;
- withdraw your consent at any time.
The withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
You can exercise your rights by contacting us at info@merch4u.cz. To prevent personal data from being disclosed to an unauthorised person, we may take reasonable steps to verify your identity.
10. Complaints to the supervisory authority
If you believe that we are processing your personal data in breach of applicable legislation, you have the right to lodge a complaint with:
Office for Personal Data Protection Pplk. Sochora 27 170 00 Prague 7 Czech Republic www.uoou.gov.cz
We would appreciate the opportunity to investigate and resolve the matter before you submit a complaint to the supervisory authority.
11. Automated decision-making
We do not use solely automated decision-making that produces legal effects concerning you or similarly significantly affects you.
12. Personal data security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or destruction.
13. Changes to this Privacy Policy
We may update this Privacy Policy, particularly if we change our services, suppliers or legal requirements. The current version will always be available on this page.
Effective from 20 September 2026.