Privacy Policy
Introduction

Your privacy is very important to us. This privacy policy explains how we collect, use, store and protect your personal information when you use the www.glasbazavse.eu website (hereinafter the “Website”). All personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals in the processing of personal data (GDPR) and the Personal Data Protection Act (ZVOP-2).

Basic Concepts
Personal data: Information that identifies an individual as a specific or identifiable individual. An individual is identifiable when he can be identified directly or indirectly, in particular by specifying an identifier such as name, identification number, location data, online identifier, or by specifying one or more factors that characterize the individual’s physical, physiological, genetic, mental, economic, cultural or social identity.
Data subject: An identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.
Processing of personal data: Any operation or set of operations carried out in relation to personal data, in particular the collection, acquisition, entry, editing, storage, adaptation or modification, inspection, use, disclosure by transmission, communication, dissemination or other provision making available, classifying or linking, blocking, anonymizing, deleting or destroying personal data. Processing can be manual or automated.
Controller of personal data: A natural or legal person or other person in the public or private sector who alone or together with others determines the purposes and means of data processing.
Personal data processor: A natural or legal person, public body, agency or other body that processes personal data on behalf of the controller.
What data we collect
Order Information: When you place an order for a personalized song, we collect your first name, last name, address, email address, and other information necessary to process your order. Payments are processed by Stripe (Stripe, Inc., 354 Oyster Point Blvd, South San Francisco, CA 94080, United States of America), which also collects and processes your information in accordance with its privacy policy. More information can be found in Stripe’s privacy policy.
Contact form: If you contact us via the contact form, we collect your first name, last name and email address so that we can respond to you.
Data for analytics: We use Google Analytics via the MonsterInsights plugin to collect anonymized data about the use of the website (eg IP address, browser type, visit time). This information helps us improve our services and user experience.
Purpose of data processing

We process your personal data for the following purposes:

Order processing: We collect and process data for the execution and delivery of your order.
Communication: We use the information from the contact form to answer your questions and requests.
Analytics: Anonymized data is used to analyze traffic and improve the website.
Legal basis for data processing

We process your personal data on the basis of the following legal bases:

Performance of the contract: Processing is necessary to fulfill the contract of which you are a party (e.g. processing orders).
Legal obligation: Processing is necessary to fulfill legal obligations (e.g. tax obligations).
Legitimate interests: Processing is necessary for the legitimate interests pursued by us or a third party, unless these interests are overridden by the interests or fundamental rights and freedoms of the data subject.
Processing based on consent

We process your personal data based on your clear and unambiguous consent for the following purposes:

Filling out the contact form.
Consent to the use of cookies upon entering the website.

Users can revoke their consent to the processing of personal data at any time by email to the address glasbazavse.eu@gmail.com. Upon receipt of the cancellation, we will immediately stop processing your personal data.

Sharing data with third parties

We do not share your personal data with third parties, except in the following cases:

Service Providers: We may share your data with our service providers, such as accounting service providers and hosting providers, who process data on our behalf and ensure GDPR compliance.
Legal proceedings: We may disclose your information if this is necessary to comply with legal obligations or to respond to legal proceedings.
Data retention

We keep your personal data for as long as is necessary to fulfill the purpose for which they were collected, or until the expiration of the statutory retention periods:

Order data: stored in accordance with tax legislation for up to 10 years.
Data for analytics: anonymized data is kept for 26 months.
Contact data: kept for as long as necessary to fulfill the communication.
Data security

We are committed to protecting your personal data and implement appropriate technical and organizational measures