Privacy policy

Privacy Policy

This Privacy Policy document is presented to you in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (commonly referred to as “GDPR”), to inform you about how we protect and process the personal data of our clients and business partners. We respect the privacy of our clients and business partners. Your personal data is handled confidentially and in accordance with data protection legislation.


1. Data Controller

The data controller is George and Stephen, s.r.o., Company ID: 08397503, registered office at Ve Žlíbku 1800/77, Horní Počernice, 193 00 Prague 9, Czech Republic. The Managing Director is Mgr. Štěpán Skopový.


2. Processing of Personal Data

The purpose of processing personal data is always related to the nature of our business. We process the personal data of our clients and business partners, including address, identification, and contact information:
Client: name and surname, delivery address (street, number, city, postal code, country), email, phone number (for delivery purposes).
Business Partner: company name, company address, contact person’s name and surname, Company ID, VAT ID, bank account number, phone number, and email.


3. Legal Basis and Purpose of Processing Personal Data

Personal data is mainly used for the provision of our services and related administrative tasks (commercial, employment, etc.). In accordance with Article 6(1) of the GDPR, the data controller processes and stores personal data for the following legal reasons:
• the data subject has given consent for one or more specific purposes;
• processing is necessary for the performance of a contract to which the data subject is a party, or for carrying out pre-contractual measures at the request of the data subject;
• processing is necessary for compliance with a legal obligation to which the controller is subject;
• processing is necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

Purpose of data processing:
a) Contract performance:
• identification and address data (for private individuals – name, surname, delivery address; for businesses/organizations – company name, billing address, delivery address, Company ID, VAT ID, contact person’s name and surname),
• electronic contact details (phone number, email address).
These are essential for entering into a contract—without them, we cannot conclude the agreement.

b) Direct marketing:
• identification and address data (private individual – name, surname; business/organization – company name),
• electronic contact details (phone, email).

c) Communication via contact form:
• identification and address data (name, surname),
• electronic contact details (phone, email).
Processing is based on our legitimate interest in communicating with clients and potential or future clients (inquiries, complaints, questions, etc.).


4. Method of Processing Personal Data

Personal data is processed both manually and automatically, using appropriate technical and organizational measures to ensure data protection. Data may be processed using third-party software systems under conditions stipulated by applicable data protection laws. Any cooperation with third parties is contractually regulated to ensure compliance with data protection principles. All data is processed within the territory of the Czech Republic.


5. Data Retention Period

For contractual relationships, data is retained for the duration of the contract and for the necessary period after the contract ends, to fulfill all obligations. For consent-based data processing, data is kept until consent is withdrawn or for a maximum of 10 years. In payroll-related cases, we follow legally defined retention periods for documents.


6. Data Subject Rights

Clients/employees/business partners have the right to request information regarding their personal data free of charge. This request can be submitted in person at our company address or in writing to George and Stephen, s.r.o., Ve Žlíbku 1800/77, Horní Počernice, 193 00 Prague 9, or by email to: info@mrmango.cz. The requested information will be provided without undue delay, within one month at the latest.

You also have the following rights regarding your personal data:
• right to object to data processing,
• right to rectify your data,
• right to restrict processing,
• right not to be subject to automated decision-making, including profiling,
• right to data portability,
• right to erasure (“right to be forgotten”),
• right to withdraw consent.

If you have any doubts or concerns about the processing of your personal data, you may request clarification or correction from us or any involved third party. You also have the right to file a complaint with the supervisory authority:
The Office for Personal Data Protection (ÚOOÚ)
Pplk. Sochora 27, Prague 7, Postal Code 170 00

We will not further process or share your personal data beyond what is outlined in this document unless required to do so by law.

This document is valid and effective as of June 1, 2021.