Privacy Notice

Last updated: 30 July 2026

1. Controller

BREADWAY a.s., Company ID 04818831, registered office Vlastiborska 2790/4, Horni Pocernice, 193 00 Prague 9, Czech Republic, registered with the Municipal Court in Prague under file no. B 21375 (the "controller"). Contact for all privacy matters: info@breadway.com.

2. Purposes, legal bases and retention periods

Activity	Data	Legal basis	Retention
Website operation and security	IP address, server logs, session identifier, technical browser data	Legitimate interest, art. 6(1)(f) - secure operation and abuse prevention	Server logs for a maximum of 6 months
User account and orders	Identification, contact, delivery, payment and order data	Performance of a contract, art. 6(1)(b); legal obligation, art. 6(1)(c)	For the duration of the contract, then according to limitation, accounting and tax periods (tax documents at least 10 years)
Customer support and complaints	Contact data, content of the communication, order data	Performance of a contract, art. 6(1)(b); legitimate interest, art. 6(1)(f)	4 years after the request has been handled
Newsletter and commercial communications	E-mail address, record of consent or objection	Consent, art. 6(1)(a); for our own similar offers to customers the statutory exemption with an opt-out	Until consent is withdrawn or you unsubscribe, then only a limited suppression record
Website analytics	Online identifier, on-site events, technical and approximate location data	Consent, art. 6(1)(a) and section 89 of Act No. 127/2005 Coll.	As stated in the Cookie Policy; in Google Analytics 4 a maximum of 14 months
Advertising measurement and remarketing	Online identifiers, advertising clicks, conversions	Consent, art. 6(1)(a) and section 89 of Act No. 127/2005 Coll.	As stated in the Cookie Policy, a maximum of 90 days
Recruitment	Contact data, CV, qualifications, communication	Pre-contractual negotiations, art. 6(1)(b); legitimate interest, art. 6(1)(f)	6 months after the selection procedure ends
Talent pool	Contact data, CV	Consent, art. 6(1)(a) - entirely voluntary	A maximum of 12 months, or until consent is withdrawn
Evidencing the cookie choice	Time of the choice, text version, selected categories, technical identifier	Legal obligation, art. 6(1)(c); legitimate interest, art. 6(1)(f)	12 months from consent, 6 months from refusal
Withdrawal from contract / returns	Identification and contact data, order number, reason, bank details	Performance of a contract and legal obligation, art. 6(1)(b), (c)	According to accounting and tax periods, at least 10 years

3. Recipients

Personal data are disclosed only to the extent necessary to the following categories of recipients: the provider of hosting and technical administration of the website and e-shop (processor, EU); payment service providers (GoPay, GP webpay and the controller bank - separate controllers or processors, EU); carriers and delivery services (separate controllers, delivery data only, EU); e-mailing and marketing tool providers (processors); Google Ireland Limited for Google Analytics 4, Google Tag Manager, Google Ads, Google Maps and Google reCAPTCHA (processor, transfers to the USA possible); accounting, tax and legal advisers and auditors; and public authorities where we are required by law.

4. Transfers to third countries

Personal data are processed primarily in the European Union. Google services may involve a transfer to the United States, carried out on the basis of the European Commission adequacy decision (EU-U.S. Data Privacy Framework) or, alternatively, the European Commission standard contractual clauses together with supplementary technical and organisational measures. A copy of the safeguards used is available on request at info@breadway.com.

5. Mandatory and voluntary data

Mandatory fields are marked in our forms. Only data necessary to conclude and perform a contract or to handle your request are mandatory - without them we cannot deliver your order or handle your request. All other data are voluntary and not providing them has no adverse consequences for you. Registration, purchases and use of an account are never conditional on marketing consent, and submitting a job application is never conditional on consent to be added to the talent pool.

6. Cookies

Necessary cookies are used without consent to the extent permitted by section 89(3) of Act No. 127/2005 Coll. Analytics, marketing and functional cookies are used solely on the basis of your consent, which you can change or withdraw at any time via the "Cookie settings" link in the footer of every page. The full list of cookies including providers and storage periods is available in our Cookie Policy.

7. Profiling and automated decision-making

With your consent we may create basic visitor segments for analytics and marketing personalisation. We do not carry out decision-making based solely on automated processing that would have legal or similarly significant effects on you.

8. Your rights

You have the right of access to your personal data, the right to rectification and erasure, the right to restriction of processing, the right to data portability, the right to object to processing based on our legitimate interest, and the right to withdraw consent at any time (withdrawal does not affect the lawfulness of processing carried out before it). Please exercise your rights at info@breadway.com or in writing at the registered office of the controller. We may ask you to prove your identity in order to prevent unauthorised access to your data.

You also have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection (Urad pro ochranu osobnich udaju), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, uoou.gov.cz.

9. Security

We protect personal data by appropriate technical and organisational measures, in particular encrypted transmission (HTTPS), access control, and contractual data processing agreements with all processors.

10. Changes to this notice

We review this notice regularly and update it whenever the services we use change. The current version is always available on this page.