Privacy policy

Last updated: 14 August 2026

1. Who We Are

RetroBenz is a brand operated by RetroAuto s.r.o. ("RetroBenz", "RetroAuto", "we", "us", or "our").

RetroAuto s.r.o. operates the RetroBenz online store, website and related services, including the information, content, features, tools, products and services made available through our website (collectively, the "Services").

Our online store is powered by Shopify, which provides the e-commerce platform that enables us to offer our products and Services to you.

For the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679 — "GDPR") and other applicable data protection laws, the data controller responsible for your personal information is:

RetroAuto s.r.o.
Vítkova 318/1
186 00 Praha
Czech Republic
Email: info@retrobenz.com

This Privacy Policy explains how we collect, use, store and disclose personal information when you visit our website, purchase our products, create an account, contact us, interact with our advertising or otherwise use our Services.

2. Personal Information We Collect

"Personal information" or "personal data" means information relating to an identified or identifiable natural person.

Depending on how you interact with us, we may collect the following categories of personal information.

Contact and identification information

This may include:

  • first and last name;

  • billing address;

  • shipping address;

  • email address;

  • telephone number; and

  • other contact information you provide to us.

Order and transaction information

This may include:

  • products viewed or purchased;

  • products added to your shopping cart or wishlist;

  • order history;

  • order numbers;

  • returns, exchanges and cancellations;

  • shipping and delivery information;

  • discounts or promotional codes used;

  • transaction details; and

  • payment status.

Payment information

When you make a purchase, payment information may be collected and processed by Shopify and/or the applicable payment provider.

Depending on the payment method used, this may include payment card details, billing information, payment confirmation and other transaction-related information.

We generally do not directly store complete payment card numbers where payments are processed by third-party payment providers.

Account information

If account functionality is available and you create an account, we may process information such as:

  • username or account identifier;

  • password or authentication credentials;

  • saved addresses;

  • preferences;

  • account settings; and

  • purchase history.

Passwords and similar authentication information are handled through the systems used to provide our store and are not intended to be accessible to us in plain text.

Communications

When you contact us, we may collect information contained in your communications, including:

  • emails;

  • customer service requests;

  • complaints;

  • return or warranty requests;

  • product enquiries; and

  • other correspondence.

Device and technical information

When you access our Services, certain information may be collected automatically, including:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • device identifiers;

  • network information;

  • referring URLs;

  • approximate location derived from an IP address; and

  • other technical information.

Usage information

We may collect information concerning how you interact with our Services, including:

  • pages viewed;

  • products viewed;

  • links clicked;

  • searches;

  • shopping-cart activity;

  • interactions with website functionality;

  • referring and exit pages; and

  • dates and times of visits.

Marketing and advertising information

Where applicable, we may process information concerning:

  • marketing preferences;

  • consent choices;

  • interactions with marketing emails;

  • advertising interactions;

  • products viewed;

  • products placed in a shopping cart;

  • purchases; and

  • information used to measure or personalize advertising.

3. How We Collect Personal Information

We may obtain personal information from the following sources.

Directly from you

For example, when you:

  • place an order;

  • create an account;

  • contact us;

  • request customer support;

  • subscribe to marketing communications;

  • submit a form;

  • request a return or refund; or

  • otherwise provide information to us.

Automatically

We and the technology providers supporting our Services may automatically collect information when you visit or interact with our website through cookies, pixels, local storage, server logs and similar technologies.

From service providers

We may receive information from companies that provide services to us, including:

  • Shopify;

  • payment providers;

  • shipping and fulfilment providers;

  • analytics providers;

  • IT and hosting providers;

  • customer support providers; and

  • marketing and advertising providers.

From partners and other third parties

Where permitted by applicable law, we may receive personal information from advertising partners, social media platforms, business partners or other third parties.

4. Why We Process Your Personal Information and Our Legal Bases

Where the GDPR applies, we process personal information only when we have a valid legal basis.

Processing and fulfilling orders

We process personal information to:

  • accept and process orders;

  • process payments;

  • provide order confirmations;

  • package and ship products;

  • provide delivery updates;

  • handle returns, refunds, cancellations and exchanges; and

  • otherwise fulfil our obligations relating to your purchase.

Legal basis: performance of a contract or taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).

Customer service and communications

We process information to:

  • respond to questions;

  • provide customer support;

  • resolve complaints;

  • deal with warranty or return requests; and

  • communicate with you concerning orders or our Services.

Legal basis: performance of a contract (Article 6(1)(b) GDPR) and, where appropriate, our legitimate interest in operating our business and providing effective customer service (Article 6(1)(f) GDPR).

Legal, tax and accounting requirements

We may process and retain transaction and other information where required to:

  • comply with tax and accounting obligations;

  • maintain legally required business records;

  • respond to lawful requests from authorities; and

  • comply with other applicable legal obligations.

Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

Security and fraud prevention

We may process information to:

  • protect our website and systems;

  • authenticate users;

  • detect and prevent fraud;

  • investigate suspicious activity;

  • prevent misuse of our Services;

  • protect our customers; and

  • establish, exercise or defend legal claims.

Legal basis: our legitimate interests in protecting our business, systems, customers and legal rights (Article 6(1)(f) GDPR), and compliance with legal obligations where applicable (Article 6(1)(c) GDPR).

Improving our Services

We may use information to understand how customers use our Services, troubleshoot problems and improve our website, products, customer experience and business operations.

Where this processing does not require consent, we rely on our legitimate interests in operating and improving our business (Article 6(1)(f) GDPR).

Where applicable law requires consent, including for certain analytics technologies, we rely on your consent (Article 6(1)(a) GDPR).

Marketing communications

Where permitted by applicable law, we may use your contact details to send information about products, offers and promotions.

Where consent is required, the legal basis is your consent (Article 6(1)(a) GDPR).

Where applicable law permits marketing without separate consent, we may rely on another lawful basis permitted by applicable law.

You may unsubscribe from marketing emails at any time by using the unsubscribe link contained in the relevant email or by contacting us.

Unsubscribing from marketing communications does not prevent us from sending necessary transactional or service communications concerning your orders.

Advertising and personalization

Subject to your consent where required, we and our service providers may use cookies and similar technologies to measure advertising effectiveness, understand interactions with our website and provide advertising that may be more relevant to you.

Legal basis: consent (Article 6(1)(a) GDPR) where required by applicable law.

5. Information Necessary to Make a Purchase

Certain personal information is necessary for us to enter into and perform a contract with you.

For example, we generally require your name, contact details, shipping information, billing information and the information necessary to process payment in order to fulfil an order.

If you do not provide information that is necessary to process a transaction, we may be unable to accept or fulfil your order.

Other information, such as information used for optional marketing, is not required to make a purchase.

6. Cookies and Similar Technologies

Our Services use cookies and similar technologies.

Cookies are small data files stored on or accessed through your device. Similar technologies may include pixels, tags, local storage and other identifiers.

These technologies may be used for purposes including:

Strictly necessary functionality

These technologies are required for functions such as:

  • maintaining a shopping cart;

  • processing checkout;

  • account authentication;

  • fraud prevention;

  • security; and

  • remembering privacy choices.

Preferences and functionality

These technologies may remember choices you make and provide enhanced functionality.

Analytics

Subject to applicable consent requirements, analytics technologies may help us understand how visitors interact with our Services and help us improve the website and customer experience.

Advertising and marketing

Subject to your consent where required, advertising technologies may be used to measure advertising campaigns and provide advertising based on your interactions with our Services.

Where required by law, non-essential cookies and similar technologies will not be used until you have provided the required consent.

You can manage available cookie choices through the cookie or privacy settings provided on our website. You may also be able to control cookies through your browser settings.

Withdrawing consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

7. How We Disclose Personal Information

We may disclose personal information where necessary for the purposes described in this Privacy Policy.

Recipients may include the following categories.

Shopify

Our online store is hosted and supported by Shopify.

Information you provide through the Services may be processed by Shopify in order to provide the e-commerce platform and related functionality.

Payment providers

Payment information may be disclosed to or collected directly by payment processors, banks and other financial service providers as necessary to process transactions and prevent fraud.

Shipping and fulfilment providers

We may provide information such as your name, delivery address, telephone number, email address and order details to carriers, postal services, logistics providers and fulfilment partners where necessary to deliver your order.

Technology and professional service providers

We may use providers of:

  • website hosting;

  • cloud storage;

  • IT services;

  • cybersecurity;

  • customer support;

  • email services;

  • analytics;

  • accounting;

  • legal services; and

  • other services necessary to operate our business.

These providers may process personal information on our behalf or, depending on the circumstances, as independent controllers.

Marketing and advertising partners

Subject to applicable law and consent requirements, information may be disclosed to marketing, analytics or advertising providers to provide, measure or personalize marketing and advertising.

Authorities and legal disclosures

We may disclose information where reasonably necessary to:

  • comply with applicable law;

  • comply with a court order or other valid legal process;

  • respond to lawful requests from government or law-enforcement authorities;

  • investigate fraud or illegal activity;

  • enforce our agreements or policies; or

  • establish, exercise or defend legal claims.

Business transactions

If RetroAuto s.r.o. or relevant assets are involved in a merger, acquisition, restructuring, financing, insolvency, sale or other corporate transaction, personal information may be disclosed as reasonably necessary in connection with that transaction and subject to applicable law.

8. Our Relationship With Shopify

Our Services are powered by Shopify.

Shopify processes personal information concerning your access to and use of the Services in order to provide and improve its platform and related services.

Information submitted through our Services may therefore be transmitted to and processed by Shopify and its service providers.

Shopify may also process information for its own purposes in circumstances where Shopify acts as a separate data controller.

You can find additional information about Shopify's processing practices and privacy rights in Shopify's applicable consumer privacy documentation and privacy portal.

9. International Transfers

Some of our service providers, including Shopify and providers supporting e-commerce, cloud, analytics, advertising or other functionality, may process personal information outside the European Economic Area ("EEA").

Where personal information is transferred from the EEA to a country that has been recognized by the European Commission as providing an adequate level of data protection, the transfer may rely on that adequacy decision.

Where no applicable adequacy decision exists, we or the relevant service provider will use an appropriate transfer mechanism where required, such as the European Commission's Standard Contractual Clauses or another mechanism permitted under applicable data protection law.

Where applicable, you may contact us at info@retrobenz.com for additional information concerning safeguards used for relevant international transfers.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, accounting, tax, contractual and reporting obligations.

The exact retention period depends on the nature of the information and the reason it is processed.

When determining an appropriate retention period, we consider factors including:

  • the duration of our relationship with you;

  • whether you maintain an account;

  • whether information is required to fulfil an order;

  • applicable statutory retention requirements;

  • tax and accounting requirements;

  • warranty and consumer-protection obligations;

  • potential or ongoing disputes;

  • limitation periods for legal claims;

  • fraud and security requirements; and

  • whether retention is necessary to establish, exercise or defend legal claims.

Where information is no longer required, we will delete or anonymize it, unless continued retention is required or permitted by law.

11. Security

We use appropriate technical and organisational measures intended to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of any account credentials associated with our Services and should not share your password or other authentication information with other persons.

12. Your GDPR Rights

If the GDPR applies to you, you may have the following rights, subject to the conditions and exceptions provided by applicable law.

Right of access

You may request confirmation of whether we process your personal information and request access to that information.

Right to rectification

You may request correction of inaccurate personal information and completion of incomplete information.

Right to erasure

You may request deletion of your personal information in circumstances provided by law.

This right is not absolute. For example, we may need to retain certain transaction information to comply with tax, accounting or other legal obligations.

Right to restriction of processing

You may request that processing of your personal information be restricted in circumstances provided by law.

Right to data portability

Where processing is based on consent or contract and is carried out by automated means, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format and to transmit it to another controller where technically feasible.

Right to object

Where we process personal information based on legitimate interests, you may have the right to object to that processing based on your particular circumstances.

You have the right to object at any time to processing of your personal information for direct marketing purposes.

Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to lodge a complaint

You have the right to lodge a complaint with a competent data protection supervisory authority.

In the Czech Republic, the supervisory authority is:

Úřad pro ochranu osobních údajů (Office for Personal Data Protection)
Pplk. Sochora 27
170 00 Praha 7
Czech Republic

You may also have the right to lodge a complaint with another competent supervisory authority, particularly in the EU/EEA country of your habitual residence, place of work or the place of the alleged infringement.

13. Exercising Your Rights

To exercise your privacy rights, contact us at:

info@retrobenz.com

or:

RetroAuto s.r.o.
Vítkova 318/1
186 00 Praha
Czech Republic

We may request information reasonably necessary to verify your identity before processing a request.

We will respond within the period required by applicable data protection law.

Exercising your privacy rights will not result in unlawful discrimination against you.

14. Marketing Preferences

If you receive promotional emails from us, you may unsubscribe at any time using the unsubscribe link provided in the message.

You may also contact us at info@retrobenz.com.

Even if you unsubscribe from marketing communications, we may continue sending non-marketing communications where necessary, including order confirmations, shipping information, security messages, responses to customer service requests and other transactional communications.

15. Automated Decision-Making and Profiling

We may use certain automated tools to support ordinary e-commerce functions such as fraud detection, security, product recommendations, analytics and advertising.

Unless we specifically inform you otherwise, we do not intend to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

If this changes, we will provide the information and safeguards required by applicable law.

16. Children's Privacy

Our Services are intended for general retail customers and are not directed specifically at children.

We do not knowingly seek to collect personal information directly from children who are not legally capable of providing the relevant information or consent under applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us improperly, please contact us at info@retrobenz.com so that we can investigate and, where appropriate, delete the information.

17. Third-Party Websites and Services

Our Services may contain links to websites, social networks, payment services or other platforms operated by third parties.

We are not responsible for the privacy practices, security or content of third-party services that we do not control.

When you leave our Services or interact directly with a third-party service, we encourage you to review that third party's privacy notice.

18. Social Media and Third-Party Integrations

Our Services may include links, widgets or integrations associated with social networks or other third-party platforms.

When you interact with those features, the relevant third party may collect or receive information in accordance with its own privacy policy.

Information you voluntarily make public through social media or other public platforms may also be visible to other users.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our Services;

  • changes to our processing activities;

  • new service providers or technologies;

  • legal or regulatory requirements; or

  • other operational reasons.

When we update this Privacy Policy, we will publish the revised version and update the "Last updated" date above.

Where required by applicable law, we will provide additional notice or obtain consent regarding material changes.

20. Contact Us

If you have questions about this Privacy Policy, our processing of personal information or wish to exercise your privacy rights, please contact:

Data Controller:
RetroAuto s.r.o.
Operator of the RetroBenz brand

Address:
Vítkova 318/1
186 00 Praha
Czech Republic

Email:
info@retrobenz.com

For the purposes of applicable data protection law, including the GDPR, RetroAuto s.r.o. is the controller of personal information processed in connection with the RetroBenz Services, except where another party, such as Shopify or a payment provider, acts as an independent controller for its own processing activities.