Privacy Policy
Information about how we process personal data in accordance with GDPR.
1. Data Controller
The data controller is BRASTY GROUP s.r.o., based in the Czech Republic. Contact email: [email protected].
2. Purpose of Processing
We process personal data for the purpose of providing portal services, fulfilling contractual obligations, invoicing, logistics and partner communication.
3. Legal Basis
Processing is based on contract performance (registration and portal use), legitimate interest (security, analytics) and, where applicable, consent (marketing).
4. Categories of Data
We process identification data (name, company, VAT number), contact data (email, phone, address), order data and technical data (IP address, cookies).
5. Data Recipients
Data may be shared with carriers (for delivery), payment service providers and IT vendors operating the portal.
6. Retention Period
We retain data for the duration of the contractual relationship and for the period required by law (especially tax and accounting regulations).
7. Your Rights
You have the right to access, rectify, erase, restrict processing, data portability and to lodge a complaint with the supervisory authority.
8. Security
We implement technical and organizational measures to protect personal data against unauthorized access, loss or misuse.