legal

Privacy Policy

Information on personal data processing on the WeStřik website, during orders, payments, personal pickup and 18+ confirmation. Effective from 15 July 2026.

1. Data controller

The data controller is Gastro Lovčenka s.r.o., ID No.: 17596343, VAT ID: CZ17596343, registered address K vodě 3200/6, Záběhlice, 106 00 Prague 10, Czech Republic, registered in the Commercial Register under file No. C 373705 maintained by the Municipal Court in Prague.

Contact e-mail for privacy matters: info@westrik.cz. Phone: +420 735 117 497.

The controller operates the WeStřik online store at https://www.westrik.cz.

2. Personal data we process

We process mainly identification data, contact data, order data, payment data, personal pickup data, customer communication data, data concerning complaints or withdrawal, technical data necessary for website operation, customer account data if a customer account is used, and a technical record of 18+ age confirmation.

When proceeding to the payment/order area, the website stores a technical record with the order that the customer checked the 18+ confirmation, including confirmation time, method and required age. We do not store date of birth, ID document number or other ID document data.

3. Purposes of processing

We process personal data for website operation, order handling, payment processing, personal pickup, 18+ age confirmation, customer support, complaints, withdrawal, invoicing, accounting and tax obligations, protection of legal claims, website security and transactional e-mail communication.

4. Legal bases

We process personal data based on performance of a contract, compliance with legal obligations, legitimate interest of the seller, consent where required, and responsible sale of alcoholic beverages only to persons over 18 years of age.

5. Orders, payments and personal pickup

The online store uses Shopify Storefront API and a custom frontend in Next.js. Shopify serves as the e-commerce backend and order/payment environment. The frontend is hosted on Vercel infrastructure.

Payments are processed through Shopify Payments. Available payment methods may include Shop Pay, Visa, Mastercard, American Express, Maestro, UnionPay, Apple Pay and Google Pay if available before payment.

The current standard way of receiving an order is personal pickup. Personal data is processed to the extent necessary for preparing the order, handover, customer communication and accounting.

6. 18+ age confirmation

Because WeStřik sells an alcoholic beverage, the controller must take measures to ensure that purchase and receipt of goods are not enabled for persons under 18 years of age.

The WeStřik website stores the technical confirmation of the entry 18+ layer for approximately 2 hours in a cookie and browser storage.

The mandatory age confirmation in the purchase panel is stored as an order audit attribute in Shopify cart and order/payment data to the extent necessary to document that the customer made the age declaration.

We do not store copies of identity documents, date of birth or ID document numbers.

7. Customer communication and marketing e-mails

Customer communication takes place through Shopify, Shopify Messaging and the e-mail addresses info@westrik.cz, reklamace@westrik.cz and fakturace@westrik.cz. Communication data is processed to handle requests, complaints, questions or other matters.

If the customer gives consent to receiving commercial communications, or if another lawful basis applies, the controller may process the e-mail address for sending commercial communications. The customer may unsubscribe at any time.

8. Recipients and transfers

Personal data may be disclosed mainly to Shopify, Vercel, Shopify Payments, Money S3 and the accounting department of WeStřik/Gastro Lovčenka s.r.o., providers of e-mail and IT services, Shopify applications used in the online store and public authorities where required by law.

Some service providers may process personal data outside the European Union or European Economic Area. Such transfers take place only under GDPR conditions, especially on the basis of an adequacy decision, standard contractual clauses or other appropriate safeguards.

9. Retention

Order, accounting and tax-document data is retained for the period required by law and for the period necessary to protect the seller's rights.

The entry 18+ confirmation is stored for approximately 2 hours in a cookie and browser storage. The purchase-panel age confirmation is stored as an order audit attribute in Shopify cart and order/payment data.

Complaints are retained for the period necessary to handle them and protect legal claims.

10. Rights of data subjects

The data subject has in particular the right of access, rectification, erasure, restriction of processing, data portability, the right to object to processing based on legitimate interest, the right to withdraw consent and the right to lodge a complaint with the Office for Personal Data Protection.

11. Contact and complaint authority

Requests concerning personal data may be sent to info@westrik.cz or in writing to Gastro Lovčenka s.r.o., K vodě 3200/6, Záběhlice, 106 00 Prague 10, Czech Republic.

If the data subject believes that personal data protection rules are being breached, they may contact the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.