PRIVACY POLICY & COOKIES

I. Basic Information

This Privacy Policy (hereinafter "Policy") explains how Tereza Posoldová, Business ID: 04842987, registered office at Bruntálská 1095/4, Krnov 79401, CZ (hereinafter "Controller" or "we") processes customers' personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data (GDPR) and Act No. 110/2019 Coll., on the processing of personal data.
 

Controller contact details:

• Email: terezaart.cz@gmail.com

• Website: www.tereza-art.com
   

II. What Personal Data We Process and Why
 

1. When purchasing in the e-shop

We process:

• First and last name

• Delivery address

• Billing address

• Email

• Phone number
   

Purpose of processing: Conclusion and fulfillment of the purchase contract, order delivery, order-related communication

Legal basis: Performance of contract (Article 6(1)(b) GDPR)

Retention period: For the duration of the warranty period (24 months from delivery of goods) and further for the period stipulated by legal regulations for accounting and tax records (10 years)
 

2. Newsletter and marketing communications

We process:

• Email

• Name (if provided)
   

Purpose of processing: Sending news, information about new works, special offers, and competitions

Legal basis: Your consent (Article 6(1)(a) GDPR)

Retention period: Until consent is withdrawn. You can withdraw consent at any time by clicking the unsubscribe link in each email or by sending a message to terezaart.cz@gmail.com
 

3. Cookies and analytical tools

We use Google Analytics on our website to track traffic and improve user experience.

We process:

• IP address (anonymized)

• Browser and device information

• Website traffic data
   

Purpose of processing: Website traffic analysis, service improvement

Legal basis: Your consent through the cookie banner (Article 6(1)(a) GDPR)

Retention period: 26 months
 

III. Your Rights

As a data subject, you have the following rights:

• Right of access to personal data - you may request information about what data we process about you

• Right to rectification - you may request correction of inaccurate data

• Right to erasure ("right to be forgotten") - you may request deletion of your data if it is no longer needed for the purpose for which it was collected

• Right to restriction of processing - you may request restriction of processing of your data

• Right to data portability - you may request transfer of your data to another controller

• Right to object to processing

• Right to withdraw consent to processing - if processing is based on consent
   

To exercise your rights, contact us at terezaart.cz@gmail.com.

You also have the right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).
 

IV. Data Security

We protect your personal data using standard technical and organizational measures:

• Encrypted connection (SSL certificate)

• Limited access to personal data

• Regular backups
   

V. Sharing Data with Third Parties

We share your personal data only to the necessary extent with the following entities:

• Payment gateways: Stripe, PayPal - for payment processing

• Carriers: various carriers according to your selection - for goods delivery

• Accounting services: for accounting and tax records
   

All processors are required to comply with GDPR and ensure the security of your data.

VI. International Data Transfers
 

Some services we use (such as Stripe, PayPal, Google Analytics) may transfer data outside the European Union. These companies ensure an adequate level of data protection in accordance with GDPR.
 

VII. Changes to This Policy

We may update this Policy from time to time. We will inform you of significant changes through our website or by email.
 

This Policy is effective from: October 1, 2025