Privacy Policy

1. What personal data we process

We process the following personal data that you provide to us when ordering or registering:

• first and last name;
• delivery and billing address;
• e-mail address;
• telephone number;
• the photograph you upload for the manufacture of your product;
• order and payment history.

2. Why we process your data and on what legal basis

• Performance of the contract (Art. 6(1)(b) GDPR): to process and deliver your order, manufacture your custom product, handle payments, complaints and communication about your order. Provision of this data is a necessary requirement for concluding and performing the contract.
• Legal obligation (Art. 6(1)(c) GDPR): to issue tax documents and keep accounting records.
• Legitimate interest (Art. 6(1)(f) GDPR): to protect our rights and for basic analytics of the operation of the shop.
• Consent (Art. 6(1)(a) GDPR): for sending commercial communications (newsletter) and for non-essential cookies. Consent can be withdrawn at any time.

3. Recipients and processors

To operate the shop we use the following processors, who process your data only to the extent necessary and under a data-processing agreement:

• manufacturing partner — for the production of your ordered product;
• payment providers — GoPay and PayPal, for processing payments;
• shipping carriers — Spring GDS (PostNL group) and GLS, for delivery of your order;
• cloud infrastructure and storage providers — for hosting the shop and storing uploaded photographs;
• e-mail delivery provider — for sending order and service e-mails.

Some of these providers may process data in countries outside the EU; in such cases the transfer is safeguarded by appropriate mechanisms under the GDPR (e.g. Standard Contractual Clauses).

4. How long we keep your data

We keep personal data for the time necessary to fulfil the contract and for the period required by legal regulations (in particular accounting and tax obligations). The uploaded photograph is kept only for as long as necessary to manufacture and deliver your product, and is then deleted within a reasonable period.

5. Your rights

Under the GDPR you have the right to: access your personal data; rectification; erasure („right to be forgotten"); restriction of processing; data portability; and to object to processing. You may withdraw consent to processing based on consent at any time. You also have the right to lodge a complaint with the supervisory authority — in the Czech Republic, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), or with the supervisory authority in your country of residence.

To exercise any of these rights, contact us at info@paintingo.com.

6. Cookies

The Website uses cookies. Essential cookies are necessary for the functioning of the shop. Analytical and marketing cookies are used only with your consent, which you can manage via the cookie settings in the Website interface.

This Privacy Policy is effective as of the date of publication on www.paintingo.com.