Privacy Policy

The controller of personal data processed on orbofnotions.com is Marek Rybář, sole trader (fyzická osoba podnikatel), IČO 19739052, Libštát 116, 512 03 Libštát, Czech Republic. Contact: [email protected].

Account: email address, display name (optional), session token.

Orders: full name, shipping address, email, phone, order details (product, uploaded image, price, status).

Payments: processed entirely by Stripe — your card details never reach our servers.

Technical: server-side IP logs and User-Agent strings for security purposes.

Contract performance (Art. 6(1)(b) GDPR): processing orders, fulfillment, delivery, customer support.

Legitimate interest (Art. 6(1)(f) GDPR): app security, fraud prevention, server logs.

Consent (Art. 6(1)(a) GDPR): non-essential cookies (if used).

Legal obligation (Art. 6(1)(c) GDPR): retention of accounting records (5 years under Czech law).

Printify, Inc. (USA) — receives your shipping address and uploaded image to produce and ship the order. Transfer under EU Standard Contractual Clauses.

Stripe, Inc. (USA) — payment processing. PCI DSS Level 1 certified. Transfer under SCCs.

Railway Technologies, Inc. (USA) — application hosting. Transfer under SCCs.

All processors outside the EU/EEA are covered by Standard Contractual Clauses or another appropriate safeguard under Art. 46 GDPR.

Order data: 5 years (statutory accounting requirement).

User account: until deletion, then 30 days.

Server logs: 30 days.

You have the right to access, rectify, erase, restrict, or port your data, and to object to processing. Email [email protected] — we will respond within 30 days.

You may also lodge a complaint with the Czech data protection authority: uoou.cz.

We use strictly necessary session cookies for authentication. No consent is required for these.

We will notify you of material changes by email or website notice at least 14 days in advance.