já vytisknu1. Who processes your data
The controller of your personal data is Yurii Bliusiuk, Kaprova 42/14, 110 00 Praha 1, Company ID (IČO) 14389665. For anything to do with personal data, write to us at ja.natocim@gmail.com or call +420 222 765 062. We do not have a data protection officer, as the law does not require us to have one.
2. Why and on what legal basis
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Processing and delivering your order | name, e-mail, phone, address or pickup point, order contents, production files (logo, text) | performance of a contract, Article 6(1)(b) GDPR | until the order has been completed; we delete production files within 1 year of delivery |
| Accounting and tax | name, address, order contents, payments, invoices | legal obligation, Article 6(1)(c) GDPR | 10 years from the end of the year in which the invoice was issued |
| Complaints, withdrawals and defending legal claims | order details, communication, approved preview | legitimate interest, Article 6(1)(f) GDPR | 4 years from delivery |
| Communicating with you | messages, e-mails, voice messages | performance of a contract or our legitimate interest in replying to you | until your query is dealt with, 4 years at most |
| Customer photos and videos on our Instagram | a photo or video you send us | consent, Article 6(1)(a) GDPR | until you withdraw your consent |
You must give us the data needed for an order, otherwise we cannot process it. We do not send newsletters. We do not carry out automated decision-making or profiling, except as described in Article 4.
3. Who we pass your data to
- The carrier you choose: Packeta Czech Republic s.r.o. (Zásilkovna) or Česká pošta, s.p. (Balíkovna). The carrier receives your name, phone, e-mail, pickup point or address and the cash on delivery (dobírka) amount.
- GoPay s.r.o. for online payments. You enter your card details directly with GoPay; we never see them.
- Service providers who process data for us: Cloudflare, Inc. (running the website, storing orders and files, sending e-mails), Google Ireland Ltd. (e-mail inbox), Meta Platforms Ireland Ltd. (Instagram messages), miniTEL s.r.o., the Odorik.cz service (phone and voicemail).
- An accountant or tax adviser, and public authorities where the law requires it.
Cloudflare and Google may also process data in the USA. The transfer relies on the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework) or, alternatively, on standard contractual clauses. We do not sell data to anyone.
4. Uncollected parcels
If you do not collect a parcel and do not withdraw from the contract, we will keep a record of your name, e-mail, phone, order number and the date the parcel was returned. We will use this data only to offer you, for your further orders, payment of the full price online in advance as the only option. The legal basis is our legitimate interest in not repeatedly bearing the costs of uncollected parcels (Article 6(1)(f) GDPR).
We do not share this data with other shops or carriers. We keep it for 3 years from the return of the parcel and then delete it. Anyone who withdrew from the contract does not belong on this list. You can object to this processing at any time at ja.natocim@gmail.com. A person reviews every objection, for example where someone else failed to collect the parcel or the carrier made a mistake.
5. Cookies
This website does not use analytics or advertising cookies and does not track you. Fonts and images are hosted on our own website; we do not load them from third parties. Cloudflare, as the server operator, sees your IP address so that it can deliver the page to you and protect the website against attacks. When we launch the basket, we will use only technically necessary cookies, so that the website remembers what is in your basket. We do not need your consent for those.
6. Your rights
You have the right:
- to access your data and get a copy of it;
- to have inaccurate data corrected;
- to have your data erased if we no longer need it or are processing it unlawfully;
- to restrict processing;
- to data portability for data we process on the basis of a contract or consent;
- to object to processing based on legitimate interest;
- to withdraw your consent at any time, without affecting processing carried out before you withdrew it.
Just write to ja.natocim@gmail.com. We will reply within 1 month. If you are not satisfied, you can lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.