PRIVACY POLICY

(ZÁSADY OCHRANY OSOBNÍCH ÚDAJŮ)

IDENTITY OF DATA CONTROLLER

The personal data controller in compliance with Regulation (EU) 2016/679 (GDPR) is Lisbeth González, company ID 17915520, based in Mezirolí, Czech Republic (hereinafter referred to as "Controller"). Contact email address: info@creyones.com.

LEGAL BASIS & SCOPE OF PERSONAL DATA RECORDS

Creyones processes your personal parameters under two primary justifications:

1. Performance of Contractual Commitments (Art. 6(1)(b) GDPR): Necessary to compile, process, route, and ship your custom designs. This logs: Name, Shipping/Billing Address, Phone Number, Email, and Order Specifications.

2. Legal Accountability (Art. 6(1)(c) GDPR): Retention required under Czech accounting and bookkeeping legislation for sole entrepreneurs, necessitating archival maintenance of invoices and transaction logs for up to 10 years for financial authority audit readiness.

EXPLICIT DISCLOSURE OF CONTROLLERS AND SUBCONTRACTORS

To successfully fulfill your order, process your design presets, and run web operations, the Controller shares necessary data parameters with the following indispensable subcontractors and technical platforms:

• WEBNODE AG (Badenerstrasse 47, 8004 Zurich, Switzerland) Primary e-shop infrastructure host, providing system framework and secure data storage during the checkout routine. - LOVABLE LABS INC. (San Francisco, California, USA) Operates the application frame engine displaying our live backpack design customizer module. Data handled inside this iframe layout configuration layer is technical and anonymous until compiled at checkout.

• GOOGLE ANALYTICS (Google LLC, Mountain View, California, USA) Tracks general user path statistics and functional optimization parameters.

• OUR SHIPPING SERVICES PROVIDER GROUP (e.g., Zásilkovna s.r.o. / Packeta, DPD CZ s.r.o., or Czech Post based on user selection) Receives customer name, phone number, and destination address solely to execute parcel delivery.

RIGHTS OF THE CUSTOMER (DATA SUBJECT RIGHTS)

In total compliance with the Regulation, the Customer holds complete structural rights to control their personal logs:

• The right of access to data records (Art. 15 GDPR).

• The right to immediate rectification of invalid data parameters (Art. 16 GDPR).

• The right to erasure ("Right to be Forgotten" - Art. 17 GDPR), except where Czech legal accounting tax obligations explicitly override data wiping.

• The right to withdraw processing consent at any point via email to info@creyones.com.

• The right to file a formal structural complaint with the state regulatory agency: Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů - ÚOOÚ, Pplk. Sochora 27, 170 00 Prague 7).