Privacy policy

1. Data Controller

The data controller of your personal data is M. Atelier, located in the Czech Republic. You can contact us by e-mail at m.atelier@post.cz or by phone at +420 604 732 157.

2. Personal Data We Collect
We collect and process only the data necessary to operate our online store and fulfill orders. This includes full name, e-mail address, phone number, shipping address, IP address, and information collected through cookies.

3. Purpose and Legal Basis of Processing
We process personal data for order processing and fulfillment of the purchase agreement, based on Article 6(1)(b) GDPR. We also process data to comply with legal obligations, such as accounting and tax records, based on Article 6(1)(c) GDPR. Marketing communications, such as newsletters, are sent only with your consent, based on Article 6(1)(a) GDPR. Additionally, we process data for website security and analytics purposes based on the legitimate interest of the controller.

4. Recipients of Personal Data
Your personal data is not publicly disclosed and is not transferred outside the European Union. Data may be shared with third parties necessary for order fulfillment, including Webnode AG for website operation, Czech Post (Česká pošta, s.p.), PPL, DHL for delivery, the payment gateway for processing payments, and Google Analytics for website traffic analysis.

5. Cookies
Our website uses cookies to ensure proper functionality, improve user experience, and analyze website traffic. Cookie usage is voluntary, and consent can be withdrawn at any time via the cookie banner or through your browser settings. More information is available in our Cookie Policy.

6. Retention Period
Personal data related to orders is retained for the duration of order processing and for three years after the last fulfillment of the contract. After this period, personal data is securely deleted.

7. Data Subject Rights
You have the right to access your personal data, rectify it, erase it, restrict processing, and exercise data portability. You may also withdraw your consent for processing, for example for marketing purposes, and you have the right to lodge a complaint with the Data Protection Authority. To exercise your rights, contact us at m.atelier@post.cz.

8. Consent and Updates
By placing an order, you confirm that you have read and agree to this Privacy Policy. The controller reserves the right to update this Privacy Policy at any time, and the latest version will be published on the website.