Effective Date: June 13, 2025
Data Controller: MyMiStore s.r.o., Company Reg. No. (IČO): 21535621, Tax ID (VAT): CZ21535621, Registered address: K Radotínu 15, 156 00 Prague 5 – Zbraslav, Czech Republic.
Contact Email: hey@gotuna.com
This Privacy Policy is prepared in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Act No. 110/2019 Coll. of the Czech Republic on personal data processing. This document explains how we collect, use, and protect your personal data in full compliance with EU and Czech law.
1. What Data We Collect
We may collect the following data:
- Identification / Personal Information: name, email address, phone number, shipping address.
- Order & Payment Information: securely processed via certified third-party providers.
- Browsing Data: IP address, device/browser details, cookies.
- Communication History: correspondence and inquiries with our support team.
2. Purpose & Legal Basis of Processing
We process your data on the basis of:
- User Consent: for marketing and non-essential cookies;
- Contractual Necessity: to complete purchases and fulfill deliveries;
- Legal Obligation: for tax, accounting, and security purposes.
Processing purposes:
- Contract performance and customer support.
- Compliance with legal obligations (e.g., statutory tax laws).
- Marketing and personalized product recommendations.
- Based on your explicit consent (e.g., newsletter subscriptions).
- Based on legitimate interest (e.g., fraud prevention and service security).
3. Data Retention
⏱ Up to 10 Years
To comply with statutory legal, accounting, and tax record-keeping requirements.
✋ Until Consent Revocation
Data processed for marketing purposes is stored until you withdraw your consent.
4. Data Sharing & Transfers
Your data may be shared with:
- Payment service providers (e.g., Stripe, PayPal);
- Courier and delivery companies (for order fulfillment);
- Accounting and auditing firms;
- IT and cloud hosting providers;
- Public authorities (where required by mandatory law).
5. Your Rights Under GDPR
You are entitled to:
- Request access to your personal data;
- Request rectification or erasure of data ("right to be forgotten");
- Object to data processing;
- Withdraw previously given consent at any time;
- Request data portability;
- Lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ): https://www.uoou.cz.
6. Data Security Measures
We adopt stringent standards under the Cyber Resilience Act, including:
- End-to-end data encryption;
- Secure and isolated storage systems;
- Multi-Factor Authentication (MFA) access controls;
- Routine security audits;
- Comprehensive incident response roadmap.
7. Policy Updates
We may revise this policy periodically. Any updates will be published on our website.
8. Contact Us
For privacy-related questions, reach out directly to our support team.
Cybersecurity Statement
Effective Date: June 13, 2025
1. Introduction
At Go Tuna, we prioritize cybersecurity to protect our customers, partners, and business operations. This statement sets out our commitment to data protection in accordance with the Cyber Resilience Act and applicable Czech cybersecurity legislation.
2. Security Measures
We deploy the following security protocols:
- Data Encryption: all sensitive information is encrypted using industry-standard protocols.
- Access Control: system access is restricted and protected via MFA.
- Regular Security Audits: to proactively detect and patch vulnerabilities.
- Incident Response Plan: a structured procedure for mitigating security breaches.
3. Customer Data Protection
We guarantee:
- Secure storage of personal and payment data;
- Full compliance with GDPR and DSA;
- Immediate notification in the event of a data breach.
4. Third-Party Cybersecurity
We only partner with vetted vendors who adhere to rigorous cybersecurity standards.
5. Contacts: For security-related inquiries, reach out to:
hey@gotuna.com 