What personal data we process about you, why, for how long, and what your rights are. We follow the General Data Protection Regulation (GDPR) and the Czech Act No. 110/2019 Coll.
1. Who processes your data
The controller is [doplnit: name or company], company ID (IČO) [doplnit: IČO], [doplnit: address]. For anything about personal data, write to [doplnit: e-mail].
2. What data, why and for how long
| When | What data | Why, on what basis | How long |
|---|---|---|---|
| Order | name, e-mail, phone, pick-up point or delivery address, ordered goods, payment | concluding and performing the contract, delivery, communication about the order (contract); accounting and tax (legal obligation) | while the order is handled and during the claims period; accounting records 10 years under tax and accounting law |
| Consignment offer (“got an ex at home?”) | name, e-mail or phone, details and photos of the piece, note | assessing the offer and getting back to you (steps at your request) | 12 months from sending; if we agree, for the contract and as accounting law requires |
| Drop news (“tell me first”, “notify me” in the swipe game) | e-mail, language, sizes you picked in the swipe game | sending announcements of new drops (consent, confirmed by a link in an e-mail) | until you unsubscribe (link in every e-mail) or withdraw consent |
| Chat with ex | the messages you write, plus language, sizes, liked pieces and bag contents (so ex can help); any contact you type into the chat | answering your question and passing it on to the huntress (legitimate interest, pre-contract steps) | 12 months from the start of the conversation |
| Visiting the site | IP address, time, page visited, browser type (server logs) | protecting the site against attacks and abuse (legitimate interest) | at most 90 days |
We do not sell data, use it for advertising profiles or make automated decisions about you. Giving it is voluntary, but without a contact we cannot sell you a piece or reply.
3. Who receives your data
Only those who need it for the shop to work:
- server and website operation: Matyáš Janoš, company ID [doplnit], the server is located in the Czech Republic;
- Zásilkovna s.r.o. (Packeta): name, e-mail, phone and pick-up point, to deliver your parcel. The pick-up point map at checkout is loaded from Packeta only when you open it;
- Ecomail.cz s.r.o.: e-mail, language and sizes, if you sign up for drop news;
- e-mail provider [doplnit]: e-mails about orders and offers;
- the seller's bank (payments), accountant [doplnit, if any] and public authorities where the law requires it.
4. Cookies and browser storage
We use no analytics or advertising cookies and no third-party tracking (Google Analytics, social media pixels). Fonts and images are served from our own server.
In your browser (localStorage) we keep only what the features you use need: your bag, liked pieces, pieces skipped in the swipe game, your sizes, the look of the site (day, night, flavour) and the id of your chat with ex. It stays on your device and is removed when you clear the site's data in your browser. Only what is needed is sent to the server (e.g. sizes and bag with a chat message). As these are strictly necessary functions, we do not ask for cookie consent.
5. Your rights
- to know what data we hold about you and get a copy;
- to have it corrected or completed;
- to have it erased when we no longer need it or process it unlawfully;
- to restrict its processing and receive it in a machine-readable form (portability);
- to object to processing based on legitimate interest;
- to withdraw consent at any time (unsubscribe from news), without affecting what happened before;
- to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.
Just write to [doplnit: e-mail]. We reply within a month at the latest.
6. Security
The site runs over an encrypted connection (HTTPS) only. Data is stored on a server in the Czech Republic, backups too; only the seller and the server administrator have access.