Privacy Policy
Privacy Policy
Effective from March 13, 2026 | Last updated: April 9, 2026
California Foods s.r.o.
Company ID (IČO): 06938841 | Tax ID (DIČ): CZ06938841
Registered office: Pod Skalkou 52/24, Přerov II-Předmostí, 751 24 Přerov, Czech Republic
Email: info@kitchenlaunchpad.cz | Phone: +420 774 541 911
1. Introduction
California Foods s.r.o. (hereinafter “Controller”) operates the website kitchenlaunchpad.cz and processes personal data of its customers and website visitors in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on the processing of personal data.
This Privacy Policy explains what personal data we collect, for what purposes we process it, how long we retain it, and what rights you have regarding the protection of your personal data.
2. What Personal Data We Process
2.1. Data Provided by the Customer
| Data Category | Examples | Purpose |
|---|---|---|
| Identification data | Name, surname, company name, Company ID | Contract conclusion and performance, invoicing |
| Contact data | Email, phone number, address | Communication, document delivery, invoicing |
| Business premises data | Premises name, type of activity, process descriptions, ingredient lists, allergen information | Generation of HACCP documentation and allergen tables |
| Payment data | Payment information (not card numbers — those are processed exclusively by GoPay) | Payment processing, accounting |
| Registration data | Email, name, password (hashed) | User account creation for the Pricing Calculator |
| Booking data | Name, email, phone, business idea description, consultation date and time | Consultation booking and delivery, Google Calendar sync |
2.2. Data Collected Automatically
| Data Category | Examples | Purpose |
|---|---|---|
| Technical data | IP address, browser type, operating system, screen resolution | Website functionality, security |
| Cookies and analytics data | Visit statistics, browsing behaviour | Service improvement, analytics (with consent only) |
3. Purposes and Legal Bases for Processing
| Purpose | Legal Basis | Retention Period |
|---|---|---|
| Contract performance (service delivery, document generation, consultations) | Art. 6(1)(b) GDPR — performance of a contract | Duration of the contractual relationship + 3 years |
| Invoicing and accounting | Art. 6(1)(c) GDPR — legal obligation | 10 years under Czech accounting law |
| Customer communication | Art. 6(1)(b) GDPR — performance of a contract | Duration of the contractual relationship + 3 years |
| User account management (Pricing Calculator) | Art. 6(1)(b) GDPR — performance of a contract | Duration of account existence + 3 years after deletion |
| Consultation bookings | Art. 6(1)(b) GDPR — performance of a contract | Duration of the contractual relationship + 3 years |
| Analytics and service improvement | Art. 6(1)(a) GDPR — consent | Until consent is withdrawn, max. 26 months |
| Legitimate interests (security, fraud prevention, temporary logging of IP addresses on failed login attempts) | Art. 6(1)(f) GDPR — legitimate interest | 3 years |
4. Recipients of Personal Data
Your personal data may be shared, to the extent necessary, with the following recipients:
- Google Analytics (Google Ireland Limited) — web analytics tool for measuring website traffic. Processing occurs only on the basis of your consent given via the cookie banner. IP addresses are anonymised. The Controller has accepted Google’s Data Processing Terms (DPA). Measurement ID: G-G0E4ZJ4YE9.
- GoPay (GOPAY s.r.o.) — processing of online card payments. GoPay processes payment data in compliance with the PCI DSS standard. The Controller does not have access to payment card details.
- Anthropic (Anthropic, PBC) — technical processing of input data for the purpose of generating HACCP documentation and allergen tables via AI API. Data is processed solely for the purpose of document generation and is not retained by Anthropic.
- Hosting provider (Forpsi / INTERNET CZ, a.s.) — website and database hosting on servers in the Czech Republic.
- Complianz (Complianz B.V.) — cookie consent management. Complianz stores anonymised records of consent granted/withdrawn.
- Google Calendar (Google Ireland Limited) — consultation scheduling synchronisation. Sharing is based on contract performance (consultation booking). Shared data includes name, email, and appointment time.
- Accountant and tax advisor — to the extent necessary for the fulfilment of legal obligations in the area of accounting and taxation.
Personal data is not transferred to third countries outside the EU/EEA, with the exception of the Anthropic service (USA) and Google Analytics (USA), where the transfer is ensured on the basis of Standard Contractual Clauses (SCCs) pursuant to Art. 46(2) GDPR and the European Commission’s adequacy decision (EU-US Data Privacy Framework).
5. Your Rights
In connection with the processing of your personal data, you have the following rights:
- Right of access — you have the right to obtain confirmation as to whether your data is being processed and, if so, to access it.
- Right to rectification — you have the right to request correction of inaccurate or completion of incomplete personal data.
- Right to erasure — you have the right to request the deletion of your personal data if there is no longer a legal basis for their processing. You can submit an erasure request to info@kitchenlaunchpad.cz. We will comply within 30 days, except for data we are legally required to retain (e.g. invoices for 10 years).
- Right to restriction of processing — you have the right to request restriction of processing of your data under certain conditions.
- Right to data portability — you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object — you have the right to object to processing based on the legitimate interest of the Controller.
- Right to withdraw consent — where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing prior to withdrawal.
To exercise your rights, please contact us at info@kitchenlaunchpad.cz. We will respond to your request within 30 days at the latest.
6. Right to Lodge a Complaint
If you believe that the processing of your personal data constitutes a violation of GDPR, you have the right to lodge a complaint with the supervisory authority:
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
Web: www.uoou.cz
Email: posta@uoou.cz
7. Cookies
Detailed information about the use of cookies on our website can be found in our separate Cookie Policy document.
8. Data Security
The Controller has implemented appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or misuse. These include encrypted communication (HTTPS/TLS), secure database access, regular backups, and restricted access to data limited to authorised personnel only.
9. Changes to This Policy
The Controller reserves the right to update this Privacy Policy at any time. The current version will always be published on this page with the date of the last update indicated.
California Foods s.r.o. | IČO: 06938841 | DIČ: CZ06938841
Pod Skalkou 52/24, Přerov II-Předmostí, 751 24 Přerov, Czech Republic
info@kitchenlaunchpad.cz | +420 774 541 911