+420 724 374 127(Mon-Fri 11-13 and 14-18, Sat 11-13)
Log in Register
0 0,00 € Checkout →

Privacy Policy

Privacy Policy and Cookie Notice

of Rockster Music s.r.o.

Registered office: Štefánikova 249/30, Prague 5, 150 00, Czech Republic
Company ID No.: 24785601
Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 174078

Email: rockster@rockster.cz
Telephone: +420 257 224 983
Mobile: +420 724 374 127

Effective from: 1.1.2026

1. Data controller

1.1

The data controller is Rockster Music s.r.o., with its registered office at Štefánikova 249/30, Prague 5, 150 00, Czech Republic, Company ID No. 24785601, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 174078 (the “Controller”).

The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (“GDPR”), Czech Act No. 110/2019 Coll., on the Processing of Personal Data, Czech Act No. 480/2004 Coll., on Certain Information Society Services, and other applicable legislation.

1.2

This Privacy Policy explains what personal data the Controller processes, for what purposes, on what legal basis, for how long and what rights individuals have in relation to the processing of their personal data.

This Privacy Policy applies in particular to customers, website users, persons contacting the Controller and recipients of marketing communications.

2. Personal data we process

Depending on the relevant purpose, we may process:

  • Name and surname.

  • Billing and delivery address.

  • Email address.

  • Telephone number.

  • Order and purchased-product details.

  • Payment and invoicing information.

  • Information provided in communications with us.

  • Information concerning complaints, returns and other claims.

  • Login details and User Account information.

  • Technical information about website use.

  • Information obtained through cookies, according to the user’s cookie settings.

We process only data that is adequate, relevant and necessary for the relevant purpose.

3. Purposes and legal bases

3.1 Order processing and performance of the contract

We process personal data in order to:

  • Receive and process orders.

  • Conclude and perform purchase agreements.

  • Deliver goods using the relevant carrier.

  • Communicate with the customer about an order.

  • Process payments.

  • Process returns and withdrawals from contracts.

  • Handle complaints and service requests.

The legal basis is the performance of a contract under Article 6(1)(b) GDPR and taking steps at the request of the data subject before entering into a contract.

Providing the data necessary to process an order is required to conclude and perform the contract. Without this data, we may be unable to accept the order, deliver the goods or perform the contract.

3.2 Compliance with legal obligations

We process personal data to comply with legal obligations, including:

  • Accounting and tax obligations.

  • Retention of accounting and contractual documents.

  • Handling complaints.

  • Demonstrating compliance with legal obligations.

  • Cooperating with public authorities.

  • Complying with consumer-protection requirements.

The legal basis is Article 6(1)(c) GDPR.

3.3 Legitimate interests

We may process personal data on the basis of our legitimate interests, in particular for:

  • Establishing, exercising or defending legal claims.

  • Preventing fraud and misuse of the website.

  • Securing the website, information systems and User Accounts.

  • Protecting our property and legitimate business interests.

  • Direct marketing to our existing customers.

  • Evaluating and improving our services, where permitted by the user’s cookie settings and applicable law.

Where we rely on a legitimate interest, we assess whether that interest is not overridden by the rights and freedoms of the data subject.

3.4 Marketing communications

We may send marketing communications:

  • To customers who have purchased goods from us, where permitted by applicable law, including offers for similar products or services; or

  • To other recipients on the basis of their prior consent.

Each marketing communication will be clearly identifiable as a commercial communication and will include a simple and free method of unsubscribing.

You may unsubscribe at any time by clicking the unsubscribe link in the relevant email or by contacting us at rockster@rockster.cz.

Unsubscribing from marketing communications does not affect the sending of service and operational messages necessary to process an order or perform a contract.

3.5 Third-party offers

We will not send marketing communications containing offers from third parties without a separate legal basis, normally the recipient’s prior specific consent.

Consent to receive marketing communications from Rockster Music s.r.o. does not automatically constitute consent to receive offers from third parties.

4. Consent

4.1

Where processing is based on consent, consent must be voluntary, specific, informed and unambiguous.

Consent must be given through a separate affirmative action, such as selecting an unchecked checkbox. Pre-ticked boxes or consent hidden in the Terms and Conditions do not constitute valid consent.

4.2

Consent may be withdrawn at any time in the same or a similarly easy manner in which it was given, or by contacting us at rockster@rockster.cz.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

4.3

Consent to receive marketing communications is not a condition for concluding a purchase agreement or purchasing goods.

5. Recipients of personal data

We may disclose personal data only to recipients who need it for a specific purpose, including:

  • Our employees and contractors.

  • The PPL and DHL delivery companies.

  • Payment-service providers.

  • E-commerce-platform and web-hosting providers.

  • IT, accounting, legal and service providers.

  • Email and mailing-service providers.

  • Public authorities where disclosure is required by law.

Processors process personal data only on our instructions and under a data-processing agreement where required by the GDPR.

6. Transfers outside the European Economic Area

Some IT, mailing, cloud or analytics providers may process personal data outside the European Economic Area.

Where personal data is transferred to a third country, we ensure that the transfer complies with the GDPR, in particular by relying on:

  • An adequacy decision of the European Commission.

  • Standard contractual clauses adopted by the European Commission.

  • Another transfer mechanism permitted by the GDPR.

Information about the providers used and the applicable transfer safeguards is available on request at rockster@rockster.cz.

7. Retention periods

We retain personal data only for as long as necessary for the relevant purpose.

In general:

  • Order data is retained for the duration of the contractual relationship and for the period necessary to establish, exercise or defend legal claims.

  • Accounting and tax documents are retained for the period required by applicable law.

  • Complaint and dispute information is retained for the period necessary to resolve the matter and protect legal claims.

  • User Account data is retained until the User Account is deleted, unless further retention is required by law or justified by a legitimate interest.

  • Marketing data is retained until the recipient unsubscribes or the purpose of processing ends.

  • Data processed on the basis of consent is retained until consent is withdrawn, unless another legal basis applies.

  • Technical and cookie data is retained for the period stated in the cookie settings or cookie notice.

After the applicable retention period expires, the data will be deleted, anonymised or securely destroyed unless further retention is required by law.

8. Data-subject rights

Subject to the conditions set out in the GDPR, you have the right to:

  • Request access to your personal data under Article 15 GDPR.

  • Request correction of inaccurate or incomplete data under Article 16 GDPR.

  • Request erasure of personal data under Article 17 GDPR.

  • Request restriction of processing under Article 18 GDPR.

  • Request data portability under Article 20 GDPR where the statutory conditions are met.

  • Object to processing under Article 21 GDPR.

  • Withdraw consent where processing is based on consent.

  • Not be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects you, under Article 22 GDPR.

You may exercise your rights by email at rockster@rockster.cz or in writing at:

Rockster Music s.r.o.
Štefánikova 249/30
150 00 Prague 5
Czech Republic

We may request additional information to verify your identity. We will handle requests without undue delay and within the periods required by the GDPR.

9. Objection to direct marketing

You have the right to object at any time to the processing of your personal data for direct-marketing purposes, including profiling related to direct marketing.

If you object to processing for direct marketing, we will no longer process your personal data for that purpose.

10. Automated decision-making and profiling

The Controller does not make decisions based solely on automated processing of personal data that produce legal effects or similarly significantly affect you.

The website may use analytics or marketing tools that create statistical or marketing segments. Such processing will be carried out only in accordance with applicable law and the relevant cookie settings.

11. Cookies

11.1 Necessary cookies

We use necessary cookies to the extent required for:

  • Operating the online store.

  • Maintaining the shopping cart and completing orders.

  • Login and User Account security.

  • Remembering basic settings.

  • Fraud prevention and website security.

Necessary cookies do not require consent where they are strictly necessary to provide a service expressly requested by the user.

11.2 Analytics, marketing and preference cookies

We use analytics, marketing, advertising and other non-essential cookies only with the user’s prior consent, unless applicable law permits another basis.

Using the website does not, by itself, constitute consent to the storage of these cookies.

You may accept or reject these cookies through the cookie banner and change your settings later.

11.3 Withdrawing cookie consent

You may withdraw or change your consent to non-essential cookies at any time through the cookie settings available on the website.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

12. Security of personal data

The Controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss, destruction or other misuse.

The security measures are proportionate to the nature, scope, context and risks of the processing.

If a personal-data breach occurs, the Controller will act in accordance with the obligations imposed by the GDPR and other applicable law.

13. Complaints to the supervisory authority

You have the right to lodge a complaint with the Czech Office for Personal Data Protection if you believe that the processing of your personal data violates the GDPR or other applicable legislation.

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic

14. Changes to this Privacy Policy

The Controller may amend or supplement this Privacy Policy, particularly where legislation, technology or the way in which services are provided changes.

The current version will be published on the website. If a change requires notification under the GDPR, we will notify affected data subjects by an appropriate method.

15. Contact details

For questions concerning personal-data protection, please contact us:

Rockster Music s.r.o.
Štefánikova 249/30
150 00 Prague 5
Czech Republic

Email: rockster@rockster.cz
Telephone: +420 257 224 983
Mobile: +420 724 374 127

This Privacy Policy is governed by the GDPR, Czech Act No. 110/2019 Coll., on the Processing of Personal Data, Czech Act No. 480/2004 Coll., on Certain Information Society Services, and other applicable laws of the Czech Republic and the European Union.

Effective date: 1.1.2026