PRIVACY POLICY (GDPR) — Myble (my-ble.eu)
Version 1.1 (MVP) — Effective date: 27 June 2026
1. Data controller
Controller: Bartłomiej Karol Kwaśnica, Business ID (IČO) 24439673, Uralská 689/7, 160 00 Praha 6 – Bubeneč, Czech Republic. E-mail: myble.eu@gmail.com (“Controller”). No Data Protection Officer is appointed; the Controller handles data-protection matters directly via the e-mail above.
2. Personal data we process
- Identification and contact data: name, e-mail, delivery address (and phone, if provided for delivery).
- Order data: order contents, configuration details (dimensions/specifications), price, delivery details, communication history.
- Payment data: payment status and reference data (full card data is processed by GoPay, not by the Controller).
- Technical data: IP address, cookies, device/browser data (depending on cookie choices).
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Order fulfilment (production, delivery, support) | Performance of a contract (Art. 6(1)(b)) |
| Accounting and tax obligations | Legal obligation (Art. 6(1)(c)) |
| Complaints / defect-liability handling | Contract / legal obligation |
| Legal claims, fraud prevention | Legitimate interests (Art. 6(1)(f)) |
| Analytics & advertising | Consent via the cookie banner (Art. 6(1)(a)) |
4. Recipients / processors
We share personal data only with providers necessary for operating the E-shop, in particular: - GoPay s.r.o. (Czech Republic) — payment processing; - Zásilkovna / Packeta (Czech Republic) — delivery of parcels/parts within the Czech Republic; - A furniture manufacturing/material partner located in Poland (EU) — produces and ships the panels/material parts directly to you and therefore receives your name and delivery address; - Vercel Inc. — website hosting and delivery; - Supabase — database and application backend;
- PostHog — product analytics (subject to cookie consent); - Google (Google Ads) — advertising measurement and remarketing (subject to cookie consent).
Each processor acts under a data-processing agreement pursuant to Art. 28 GDPR.
5. Transfers outside the EU/EEA
Some providers (in particular the hosting, analytics and advertising providers) may process data outside the EU/EEA (e.g. in the United States). Where this occurs, we rely on appropriate safeguards — primarily the EU Standard Contractual Clauses and/or an applicable adequacy decision — and on your cookie-consent choices. Our manufacturing/material partner is located in Poland (within the EU/EEA), so no additional transfer safeguards apply to that sharing.
6. Retention
- Orders and contract data: for the duration of the contract and the statutory limitation period thereafter (generally up to 3–4 years; longer if a dispute is pending).
- Accounting and tax documents: for the period required by law (accounting documents generally 5 years; certain tax-relevant documents up to 10 years).
- Complaints/disputes: for the duration of the claim and a reasonable period thereafter.
- Analytics/advertising data: according to cookie settings and until consent is withdrawn (and per the provider’s retention settings).
7. Your rights
You have the right to access, rectification, erasure, restriction, data portability, and to object. Where processing is based on consent, you may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů, ÚOOÚ), www.uoou.cz.
We do not carry out automated decision-making with legal or similarly significant effects.
8. Contact
GDPR requests: myble.eu@gmail.com.
Version 1.1 — Effective date: 27 June 2026.