Privacy policy

1. Data controller

Operator: Artem Yemelianov, Company ID (IČO): 29920086, registered address U Parčíku 225, Vidovice, 251 63 Kunice. Contact: info@moneyart.cz, +420 722 726 248.

2. What data we process

• Order: first and last name, e-mail, phone, address and, where applicable, a different delivery address.
• Inquiry and contact form: name, e-mail, phone (optional), the message and, where applicable, a reference photo.
• Cart: the cart contents are stored only in your browser (localStorage) and are sent to the server only with the order.

3. Purpose and legal basis

• Processing the order and performing the contract (Art. 6(1)(b) GDPR).
• Replying to an inquiry – steps prior to entering into a contract (Art. 6(1)(b) GDPR).
• Compliance with legal obligations, e.g. accounting (Art. 6(1)(c) GDPR).

4. Retention period

• We keep order data for 10 years from the end of the year in which the order was completed (tax and accounting obligations).
• Inquiries and contact-form messages that did not result in an order are deleted after 1 year at the latest.

5. Recipients of the data

We share data only to the extent necessary for the given purpose with these processors:

• Netlify, Inc. – website hosting and storage of orders and inquiries.
• GoDaddy – mailbox and domain management.
• Resend – sending e-mails from the website (order confirmations, notifications).
• PPL CZ s.r.o. – parcel delivery (name, address, phone, e-mail).
• The seller's bank – receiving payments (details from the payment order).

Netlify, GoDaddy and Resend are companies based in the USA; data is transferred on the basis of the European Commission's standard contractual clauses.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object. You can lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.cz).

7. Cookies and visitor statistics

We always use technically necessary browser storage (localStorage): the cart contents, your choice in the cookie bar and the admin login. We do not use advertising cookies or third-party tools (e.g. Google Analytics).

We measure website traffic with our own tool; the data is stored with our hosting provider Netlify and is not shared with anyone else. We record the pages viewed, additions to the cart, where you came from (e.g. Instagram), device type, website language and country.

• Without consent (legitimate interest, Art. 6(1)(f) GDPR): nothing is stored in your browser. Visitors are distinguished only by a one-way code derived from the IP address and browser that changes every day; the IP address itself is not stored.
• With consent (Art. 6(1)(a) GDPR): your browser remembers the date of your first visit so we can recognise repeat visits. You can withdraw consent at any time via “Cookie settings” in the website footer.

Detailed visit records are deleted after 30 days; after that we keep only aggregated daily figures that cannot be linked to a person.