Privacy policy

Who we are

Servis Expert s.r.o., Company ID 24256056, with registered office at Záběhlická 134/95, 106 00 Prague 10, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, file no. C 197761, operates the e-shop saintpisces.com under the trading name "Saint Pisces" (the "Services").

For the purposes of data protection legislation, we are the controller of your personal data.

We use the Shopify platform to run the Services.

This policy describes how we collect, use and disclose your personal data. In the event of a conflict between the Terms of service and this policy, this policy prevails on matters of personal data.

What data we process

Depending on how you use the Services, we may process:

  • Contact details — name, address, billing and delivery address, phone, e-mail
  • Payment details — payment card details, transaction information, payment confirmation
  • Account data — username, password, preferences (if you create an account)
  • Order data — what you viewed, added to the cart, bought, returned or exchanged
  • Communication with us — the content of messages you send us
  • Technical data — IP address, device and browser type, identifiers
  • Usage data — how you move around the site, what you click on

Where we obtain the data

  • Directly from you — when ordering, registering, communicating
  • Automatically — via cookies and similar technologies
  • From service providers — who process data on our behalf

What we use the data for

  • Order fulfilment — payment processing, delivery, returns, complaints
  • Communication — answering enquiries, customer support
  • Marketing — sending newsletters by e-mail, targeted advertising (with consent only)
  • Security — fraud prevention, securing the Services
  • Legal obligations — accounting, tax, retention of documents

Legal basis for processing

We process your personal data on the following legal bases:

  • Performance of a contract (Art. 6(1)(b) GDPR) — processing the order, payment, delivery, handling complaints and returns.
  • Compliance with a legal obligation (Art. 6(1)(c) GDPR) — accounting and tax obligations, retention of documents.
  • Consent (Art. 6(1)(a) GDPR) — sending marketing communications, analytics and marketing cookies. You may withdraw consent at any time.
  • Legitimate interest (Art. 6(1)(f) GDPR) — fraud protection, securing the Services, defence of legal claims.

Who we share data with

  • Shopify — running the e-shop and hosting
  • Packeta (Zásilkovna) and local partner carriers — delivery of the parcel in the Czech Republic, Slovakia, Poland, Hungary, Romania, Bulgaria and Slovenia
  • Payment service providers — payment processing
  • IT service providers — technical support, cloud storage
  • Public authorities — where required by law

We do not pass data to third parties for their own marketing purposes without your consent.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data about your access to the Services. Information you provide to the Services will be shared with Shopify and with third parties that may be located in countries other than your country of residence.

Shopify is separately responsible for the processing of that data. More at: https://www.shopify.com/legal/privacy/app-users and https://privacy.shopify.com/en

How long we keep the data

  • Order data — for the duration of the contract and thereafter for statutory periods (accounting documents 5 years under the Accounting Act, limitation periods)
  • Marketing data — until consent is withdrawn
  • Account data — until the account is closed

Children's data

The Services are not intended for children under 15 and we do not knowingly collect their personal data.

If you are under 15, you may provide us with personal data only with the consent of your legal guardian.

If you are a parent or legal guardian of a child who has provided us with personal data, contact us and we will delete the data.

Automated decision-making

We do not carry out automated decision-making that would produce legal effects concerning you or similarly significantly affect you. We may use cookies and similar technologies to personalise advertising — always only with your consent.

Provision of data

Providing contact, delivery and payment details is necessary to conclude and perform the purchase contract. Without them we cannot process your order. Providing an e-mail address for the newsletter is voluntary.

Cookies

We use cookies and similar technologies on the website. Essential cookies provide basic functions (cart, login). We use analytics and marketing cookies only with your consent, which you may withdraw at any time.

Your rights

You have the right:

  • of access — to know what data we process about you
  • to rectification — to have inaccurate data corrected
  • to erasure — to have data deleted (unless a legal obligation prevents it)
  • to restriction of processing
  • to data portability — to obtain the data in a machine-readable format
  • to object to processing based on legitimate interest
  • to withdraw consent — at any time, without affecting the lawfulness of earlier processing
  • to unsubscribe from marketing — via the link in every e-mail

You can exercise your rights by e-mail at saintpisces.official@gmail.com. Before handling a request we may verify your identity. We respond within one month.

We will not disadvantage you in any way for exercising your rights.

Complaints

If you disagree with how we process your data, contact us. You also have the right to lodge a complaint with a supervisory authority:

Czech Republic: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz

Slovakia: Úrad na ochranu osobných údajov SR, www.dataprotection.gov.sk

Poland: Urząd Ochrony Danych Osobowych (UODO), www.uodo.gov.pl

Hungary: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), www.naih.hu

Romania: Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro

Bulgaria: Комисия за защита на личните данни (CPDP), www.cpdp.bg

Slovenia: Informacijski pooblaščenec, www.ip-rs.si

You may lodge a complaint with the supervisory authority in the country of your habitual residence, your place of work, or where the alleged infringement occurred.

Transfers abroad

We may transfer your data outside the European Economic Area. In such cases we rely on recognised mechanisms — in particular the European Commission's standard contractual clauses — or we transfer to countries covered by an adequacy decision.

Security

We take appropriate technical and organisational measures to protect your data. No measure is perfect, however — we do not recommend sending sensitive information through unsecured channels.

Links to third-party websites

The Services may contain links to third-party websites. We are not responsible for their content or privacy policies.

Changes to this policy

We may update this policy. We will publish the new version on this page and update the date of the last revision.

Contact

Controller of personal data:

Servis Expert s.r.o.
Company ID: 24256056
Záběhlická 134/95, 106 00 Prague 10, Czech Republic
E-mail: saintpisces.official@gmail.com
Phone: +420 774 549 089