Privacy policy

This policy explains what personal data we process on this website, why we process it and what rights you have.

Who is the controller

The data controller is Benedict Group s.r.o., Krátká 2440/13, 100 00 Praha 10, company ID 17062292.

For anything concerning personal data, contact us at info@benedict.beer.

[to be added: whether a data protection officer has been appointed]

What data we process

This website sells gift vouchers and keeps customer accounts for the loyalty programme. A voucher can be bought without an account, as a guest. There are no comments here.

Gift voucher order

Your name, e-mail, billing address and, optionally, a phone number. Without them we cannot process the order or issue an invoice. Vouchers are digital, so we do not process a delivery address.

Legal basis: performance of a contract.

Payment

You pay by card through Stripe, or by bank transfer. Your card details never reach us — you enter them directly with Stripe. We only learn whether the payment went through.

Legal basis: performance of a contract.

Voucher delivery

We send the voucher as a PDF to your e-mail address, using the Resend service.

Legal basis: performance of a contract.

Voucher records

We pass the order to our internal system BenOS, which issues the voucher and keeps its balance so it can be redeemed in our venues.

Legal basis: performance of a contract.

Accounting and tax records

We keep issued documents for as long as tax and accounting rules require.

Legal basis: compliance with a legal obligation.

Customer account

You can create an account during checkout or on its own. It holds your e-mail, username and password (stored as a hash, never in readable form) and whatever details you fill in yourself. An account is not needed to buy — without one you check out as a guest.

Legal basis: performance of a contract.

Loyalty programme

Once signed in, your account shows the balance of your loyalty card, its movements and your spending in our venues. The website does not store any of it — it displays the data on request from BenOS, where the loyalty card lives.

Legal basis: performance of a contract.

Newsletter

You switch the subscription on and off yourself in your customer account. You can withdraw consent there at any time; withdrawal does not affect what we sent before.

Legal basis: consent.

Who we share data with

We do not sell your data and we do not pass it to anyone for marketing. It is processed on our behalf by:

  • Stripe — card payment processing.
  • Resend — sending e-mail (order confirmation, the voucher).
  • Hetzner Online GmbH — website hosting; the servers are in the European Union.
  • BenOS — our own system, where the voucher is issued and its redemption is recorded.

[to be added: whether any processor transfers data outside the EU, and on what basis]

Cookies

We only use technical cookies the site cannot work without: the cart, the checkout flow, signing in to your customer account and to the admin area, and your language choice. Stripe may set its own cookies during payment.

There are no analytics or advertising cookies on this site — no Google Analytics tag, no Meta pixel, no other tracking script.

How long we keep data

We keep orders and accounting documents for the period we are legally required to archive them. Data tied to a voucher is kept for its validity period and for as long as needed to settle it afterwards.

[to be added: the specific retention periods for orders, accounting documents and the loyalty programme]

Your rights

In relation to your personal data you have the right:

  • of access — to learn what data we hold about you,
  • to rectification of inaccurate data,
  • to erasure, where we have no legal ground to keep processing,
  • to restriction of processing,
  • to portability of the data you gave us,
  • to object to the processing.

For anything concerning personal data, contact us at info@benedict.beer.

You also have the right to lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz).

Changes to this policy

We may update this policy when the way we process data changes. The current version is always on this page.

[to be added: effective date]