Privacy Policy

Privacy policy for the SPOLUM Drum online shop
Effective from 12 July 2026

1. Controller and contact details

The controller is Alexandr Jerechinský, Company ID (IČO): 14124661, registered office at Litoměřická 834/19d, Prosek, 190 00 Prague 9, Czech Republic (the “Controller”). The Controller operates the Czech shop under the Buben štěstí brand and its international presentation under SPOLUM Drum.

Privacy contact: info@spolum.com, +420 731 511 998. Main warehouse and operational contact: Neveklovice 44, 294 13 Neveklovice.

2. Data we process

Depending on how you use the shop, we mainly process your name, billing and delivery address, email, telephone number, company details, order contents and history, chosen shipping and payment method, communications, complaint and return information, customer-account data and technical website-use data such as IP address, cookie identifiers and security logs.

We do not receive or store payment-card details. They are entered directly with the payment provider. We receive only the payment-result information needed to match and process the order.

3. Purposes and legal bases

We process data to accept and fulfil orders, arrange payment and delivery, communicate with customers and handle withdrawals and complaints on the basis of performing a contract or taking pre-contractual steps.

Accounting and tax documents, statutory records and cooperation with public authorities are processed to comply with legal obligations. Protecting legal claims, preventing fraud, securing the website and producing basic internal statistics are based on the Controller’s legitimate interests.

Commercial communications are sent where permitted by law or with consent and always provide a simple opt-out. Optional analytics and marketing cookies are used only on the basis of consent given through the cookie banner.

4. Recipients

Data is disclosed only as necessary to hosting and IT providers, payment gateways and banks, carriers and pickup networks, accounting and tax advisers, email and analytics providers and public authorities where required by law.

Recipients act as processors or independent controllers according to the service. Transfers outside the European Economic Area use appropriate GDPR safeguards, particularly an adequacy decision or standard contractual clauses.

5. Retention

Order data is kept while the contract is performed and afterwards for the period needed to protect legal claims, generally no longer than three years unless the law requires longer. Accounting and tax documents are retained for the statutory period, usually up to ten years. Account data is retained until the account is closed and afterwards only as required for legal obligations and claims.

Marketing data is processed until consent is withdrawn or the user unsubscribes, and no longer than reasonably appropriate to the customer relationship. Technical logs are kept only for the period needed for security and incident resolution.

6. Your rights

You may request access, correction, erasure or restriction, data portability, object to processing based on legitimate interests and withdraw consent at any time without affecting earlier lawful processing.

Send requests to info@spolum.com. We may reasonably verify your identity and will respond without undue delay, generally within one month. You may also complain to the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.

7. Automated decisions and security

We do not make decisions based solely on automated processing that produce legal or similarly significant effects. We use appropriate technical and organisational safeguards and limit access to people who require the data for their work.

8. Earlier orders and changes

Orders concluded before 12 July 2026 remain with the seller and controller stated in their confirmations and documents. This policy does not itself transfer an earlier customer database or marketing consents to the new Controller.

We may update this policy when services or legal requirements change. The current wording and effective date are always published on this page.