1. Who is the data controller
The data controller is Merdeka spol. s r.o., Company ID 24213390, VAT ID CZ24213390, with its registered office at Zemědělská 1577/12, 160 00 Prague 6, entered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 189228 (referred to below as “we” or “PrintZona”). We run the printzona.cz website and online shop and produce custom printed goods and merchandise to order. For any questions about your personal data, contact us at: hello@printzona.cz, +420 608 333 979.
2. What data we process and why
a) Fulfilling online shop orders
When you place an order through our online shop (the editor, the Shop page or club pages), we process your name, email address, telephone number, company name or Company ID where applicable, delivery details, the contents of your order and your design. Our legal basis is the performance of a contract (Article 6(1)(b) GDPR). We keep order records for 3 years after the order is completed, and tax documents for as long as the law requires.
Images uploaded to the editor
We store images you upload to the online editor on our server as soon as you add them, so that your design is saved when you add it to the cart and you can go to checkout without waiting. If no saved design or order is created from them within 10 days of upload, we delete them automatically. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Designs saved in the editor
We keep a design that you save in the editor or add to your cart on our server. If it does not result in an order, quote or inquiry within 7 days and it is not in a cart saved on our server (we keep such a cart for up to 60 days from its last change), we delete it automatically. If you had a link to your design sent to you by email, we delete the design after 30 days; we keep your email address and the record of the link and reminder we sent like our other correspondence. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Unfinished orders
When you enter your email address at checkout, we save your cart on our server. If you do not complete your order, we send you a single reminder a few hours later with a link that restores your cart. If you place the order in the meantime, no reminder is sent. We delete the cart no later than 60 days after its last change, and we keep the reminder we sent like other correspondence. The legal basis is our legitimate interest in helping you complete your order (Article 6(1)(f) GDPR), and you can object to the reminder by writing to hello@printzona.cz.
b) Handling quote requests and correspondence
When you send us a quote request (using the form, by email, through the editor or by phone), we process your name, email address, telephone number, company name or Company ID, the content of your message and any files you upload (artwork, logos). Our legal basis is taking steps at your request prior to entering into a contract and the performance of a contract (Article 6(1)(b) GDPR). We cannot deal with your quote request without this data. We process emails with a question or about an order in the same way. Mail that does not concern customers (advertising, service offers, suppliers, authorities) is sorted on the basis of our legitimate interest (Article 6(1)(f) GDPR).
We keep quote request data for 3 years from our last contact with you, after which we delete it. We keep emails you send us in our mailbox for 3 years from receipt, and attachments to an inquiry for as long as the inquiry. Mail that does not concern customers (advertising, service offers) and messages we have discarded are deleted after 90 days.
c) Fulfilling orders and meeting legal obligations
For orders we have fulfilled, we keep billing details for as long as accounting and tax legislation requires (up to 10 years). Our legal basis is compliance with a legal obligation (Article 6(1)(c) GDPR).
d) Website analytics
With your consent, given via the cookie banner, we use Google Analytics 4 (Google Ireland Ltd.) to produce anonymised visitor statistics. Our legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time by deleting your cookies and making a new choice in the banner. Alongside this, we keep our own anonymous statistics that use no cookies and do not identify any individual (our legitimate interest in measuring website traffic, Article 6(1)(f) GDPR).
e) News emails
When we send you an email with news, we check whether you opened it and which links you clicked, so that we know what interests you. We do not share this data with anyone, and you can unsubscribe from our news using the link in every email.
3. Who we share your data with
- Our hosting provider (Websupport s.r.o. / ACTIVE 24), whose servers host our website and email.
- ComGate Payments, a.s.: processes online card payments; we share your email address and payment details.
- Packeta (Zásilkovna s.r.o.) and our delivery partners: deliver your order; we share your name, telephone number, email address and your chosen pickup point or delivery address.
- Google Ireland Ltd. (Google Analytics), only if you have given consent via the cookie banner; data may be transferred outside the EU on the basis of standard contractual clauses.
- Meta Platforms Ireland Ltd. (advertising measurement), only if you have given consent via the cookie banner.
- Features & Labels, Inc. (fal.ai), USA: if you order AI image enhancement, our designer sends this service a copy of your image without metadata (no location or details of your phone) so that it can enlarge and sharpen it. We do not share your name, email address or any other details. We download the result straight away and set the shortest possible retention period with the provider. The transfer to the USA is based on the EU standard contractual clauses. The legal basis is the performance of a contract (Article 6(1)(b) GDPR).
- Anthropic Ireland, Limited (Claude AI), Ireland, with processing also in the USA: Claude helps us with our mail, with text ideas in the editor and with checking designs before production, if we have that check switched on. When you send us an email or an inquiry, it sorts the message and prepares a draft reply or quote; messages it identifies as advertising are moved to a separate folder. For that it receives your name, email address, phone number and company if you give them in an inquiry, the subject and text of your message, the names of attachments and reduced previews of up to two images from them, and an overview of your recent orders (items, prices, status, contact and delivery details), inquiries and our correspondence with you. A member of our team checks every draft before it is sent; Claude does not send anything on its own. The only message that can go out without a person checking it is an automatic confirmation that we have received your inquiry (a fixed text, not written by Claude), if we have it switched on. When you ask the editor for text ideas from your description, Claude only receives the text you type into the description (up to 200 characters), so please do not include more personal data than the text needs. When checking the design of a paid order before production, Claude only receives the texts and a preview of your design, not your name or contact details, and points out typos or a cut-off motif; we keep the results of the check for 90 days. Under its commercial terms for the API, Anthropic does not use the data to train its models and usually deletes it within 30 days. The data is also processed in the USA by the parent company Anthropic, PBC and its providers; the transfer to the USA is covered by the EU standard contractual clauses in the data processing addendum. The legal basis is the performance of a contract and steps taken at your request before entering into one, that is handling your question, inquiry or order and the editor feature you chose to use (Article 6(1)(b) GDPR), and for other mail our legitimate interest in sorting it (Article 6(1)(f) GDPR).
We never sell your data or share it with third parties for their own marketing purposes.
4. Cookies
| Cookie / storage | Purpose | Duration |
|---|---|---|
| pzc (localStorage) | Remembers your cookie banner choice | Until deleted |
| _ga, _ga_* (Google) | Website analytics (only with your consent) | Up to 2 years |
| pz_zdroj (sessionStorage, localStorage with your consent) | Where you came to the website from (campaign, type of link, first page), so we know which links lead to orders. Without identifying you. | Until you close the browser, 30 days with your consent |
| pz_ref, pz_landing, pz_utm_source, pz_utm_medium, pz_utm_campaign (sessionStorage) | The page you came to the website from, the first page of your visit and the campaign tags from the link. They are sent with an enquiry from the contact form, so we know where the enquiry came from. Without identifying you. | Until you close the browser |
| pz_cart, pz_koncept, pz_draft, pz_objednano, pz_objednano_videno, pz_kosik_tajne (localStorage) | Your cart contents, your design in progress in the editor, a marker of your sent order, so the editor starts a new design after you order, and a random key that lets the server recognise that a saved cart is being changed by the same browser (strictly necessary, no tracking) | Until deleted |
| pz_zak (localStorage) | The name, email, phone number and, where given, delivery address you last entered when sending an order, so the checkout fills them in for you next time in this browser. The details stay only in your browser. On a shared computer, delete them after ordering by clearing the site data in your browser. | Until deleted |
| pz_editor (IndexedDB) | Your design in progress in the editor, including uploaded images, and the previous design for the Undo button, only in your browser (strictly necessary, no tracking) | 7 days after the last change, or sooner with the New design button |
| pz_upload (sessionStorage) | An image uploaded on the home page, which the editor adds to your design when it opens, only in your browser (strictly necessary, no tracking) | Until it is added in the editor, at the latest until you close the browser |
| pz_jazyk (localStorage and sessionStorage), pz_navod, pz_welcome, pz_uk_skryto (localStorage), pz_odchod, pz_bc, pz_kosik_*, pz_purch_*, pz_lead, pz_obj_klic (sessionStorage) | Your chosen website language, markers showing you have already seen the help or an offer in the editor, safeguards so that one event is not counted twice in the statistics and a cart from a link is not restored repeatedly, and a safeguard so that sending the same order again does not create a second order: a random key and a fingerprint of the order details from which your email or address cannot be read (strictly necessary, no personal data) | In localStorage until deleted, in sessionStorage until you close the browser |
| pzed (cookie) | A session identifier set when the editor saves your design on our server (for example when you add it to the cart). The server uses it to remember which designs were created in this browser, so that a link to a design can be emailed only from this browser and the feature cannot be misused for spam (strictly necessary, no tracking) | Until you close the browser |
| pzvyl (cookie) | A signed marker the editor receives only when image enhancement is switched on. Without it, the server will not enhance an image, so other websites cannot trigger the enhancement. The signature is valid only for the network from which you opened the editor; the cookie does not contain your IP address itself (strictly necessary, no tracking) | Until you close the browser, valid for 12 hours at most |
| pz_klub_* (cookie) | Remembers that you entered the correct club access code on a club page, so you do not have to enter it again. It contains only a fingerprint of the code, none of your details (strictly necessary, no tracking) | 90 days |
5. Your rights
You have the right to access your data and to request its rectification or erasure, restriction of processing, portability and the right to object to processing based on our legitimate interests. You may withdraw any consent you have given at any time. Simply email us at hello@printzona.cz. We will reply within 30 days.
If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
6. Final provisions
We protect your data with appropriate technical and organisational measures (encrypted HTTPS connections, access restricted to authorised staff, storage outside the publicly accessible part of the website). We do not use automated decision-making with legal or similarly significant effects (Article 22 GDPR) or profiling. We may update this policy from time to time; the current version will always be published on this page.