Privacy Policy

Last updated: 18 October 2026

1. Controller

The controller of personal data processed through onemorepuff.eu is PUFFY s.r.o., Uralská 689/7, 160 00 Praha 6 – Bubeneč, Czech Republic, Company ID 24370321 („we“). Contact: info@onemorepuff.com.

2. What data we process

• Technical data – IP address, browser type, pages visited and time of visit, in server logs of our hosting provider (WEDOS Internet, a.s., Czech Republic) to keep the website secure and running. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Orders – name, delivery address, e-mail, phone and order details, to fulfil the contract (Art. 6(1)(b) GDPR) and to meet accounting and tax obligations (Art. 6(1)(c) GDPR). Card payments are processed by Stripe Payments Europe, Ltd.; we never see your full card details.
• Reservations and e-mails – if you write to us, we process your e-mail address and message to reply (Art. 6(1)(f) GDPR).
• Marketing cookies – only with your consent (Art. 6(1)(a) GDPR). See our Cookie Policy.

3. Recipients

Hosting provider WEDOS Internet, a.s.; payment provider Stripe; carriers delivering your order; our accountant; and, if you consent to marketing cookies, Meta Platforms Ireland Ltd. (Meta Pixel). Stripe and Meta may transfer data to the USA under the EU–US Data Privacy Framework.

4. Retention

Order data are kept for as long as required by accounting and tax law (generally up to 10 years). Server logs follow the hosting provider’s standard retention. Cookie data are kept for the periods listed in the Cookie Policy. E-mails are kept as long as needed to handle your request.

5. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time (for cookies use „Cookie settings“ in the footer). You can lodge a complaint with the Czech data protection authority, Úřad pro ochranu osobních údajů (uoou.gov.cz).