Zapo HP

GDPR & Cookies

Privacy policy.

Effective: 1 May 2026

1. Controller

The controller of personal data is ZAPO HP, s.r.o., Reg. No 26259613, VAT CZ26259613, with registered office at Vladislav 281, 675 01 Vladislav, Czech Republic. Contact: info@zapo-hp.cz, +420 603 202 359.

2. What data we process

When handling an inquiry or order we process the following categories of data:

  • Identification data (name, company / club)
  • Contact details (e-mail, phone, delivery address)
  • Billing details (Reg. No, VAT, registered office) — if the inquiry turns into an order
  • Content of the message / inquiry

3. Purposes and legal basis

Handling an inquiry. Processing is necessary for negotiation of a contract (Article 6(1)(b) GDPR).

Performance of a contract. Processing of billing data and order information (Article 6(1)(b) and (c) GDPR — legal obligation to keep accounting records).

Marketing & references. Only on the basis of explicit consent (Article 6(1)(a) GDPR), which can be withdrawn at any time at info@zapo-hp.cz.

4. Retention period

Data from inquiries without a subsequent order is kept for at most 12 months. Data on completed orders is kept for the period required by accounting and tax regulations (typically 10 years).

5. Recipients of data

We pass on data only to entities necessary for performance of a contract or required by law:

  • Couriers for order delivery (Zásilkovna, PPL)
  • Accounting and tax adviser
  • Operator of the inquiry form (Formspree.io) — only the form content
  • Public authorities to the extent of legal obligations

6. Your rights

In accordance with the GDPR, you have the right to:

  • Access the data we process about you
  • Rectification of inaccurate data
  • Erasure of data (where not necessary for contract performance or legal obligations)
  • Restriction of processing
  • Data portability to another controller
  • Object to processing
  • Lodge a complaint with the Czech Office for Personal Data Protection (uoou.cz)

7. Cookies

The zapo-hp.cz website uses two categories of cookies and equivalent storage:

Functional (always active)

Required for basic operation of the website. Without them the site does not work. Consent is not required for these (Article 6(1)(f) GDPR — legitimate interest).

  • zapo-consent — localStorage, stores your cookie choice. Lifetime 365 days.

Analytics (optional)

Help us understand how you use the website (where you click, which pages you visit). They activate only after consent is given (Article 6(1)(a) GDPR).

  • Google Analytics 4 (_ga, _ga_*) — provider Google Ireland Ltd. Lifetime up to 2 years. IP anonymisation enabled.
  • Microsoft Clarity (_clck, _clsk) — provider Microsoft Corporation. Lifetime up to 1 year.

We do not use any third-party marketing or tracking cookies (Facebook Pixel, Google Ads remarketing, etc.).

8. Contact for data protection

Send requests to exercise rights, questions or complaints to info@zapo-hp.cz. We respond within 30 days.