Privacy Policy (GDPR Information)

Last updated: [date]

1. Who we are

The controller of your personal data is GRAPHITE STUDIO s.r.o., registered office at [address], company ID [ID], email [contact email], phone [phone] ("we", "us"). We operate the online shop https://www.ty-o.com/

2. Why we process your data and on what legal basis

Processing and delivering orders, handling paymentsPerformance of a contract (Art. 6(1)(b))Duration of the contractAccounting and tax obligationsLegal obligation (Art. 6(1)(c))As required by law (10 years) Complaints, returns, warranty claimsContract / legal obligationWarranty period (10 years) Customer account.

3. What personal data we collect

• Identification and contact data: name, surname, email, phone number, delivery and billing address.
• Order data: products purchased, order history, payment status (we do not store full card details; payments are processed by our payment provider).
• Account data: login email and password (stored in encrypted form).
• Technical data: IP address, browser type, device information, pages visited, cookies and similar identifiers.
• Communication data: messages you send us, complaints, returns.
• Marketing data: newsletter subscription and preferences.

4. Who receives your data

We share data only where necessary with:

• delivery and logistics providers (e.g., [courier names]),
• payment service providers (e.g., [Stripe / PayPal / GoPay]),
• IT, hosting and e-shop platform providers,
• accounting and legal advisers,
• email and marketing service providers (e.g., [Mailchimp]),
• analytics and advertising providers (e.g., Google), only with your consent where required,
• public authorities, where we are legally obliged.

All processors act under data processing agreements and may process data only on our instructions.

5. Transfers outside the EU/EEA

Where data is transferred outside the EU/EEA (e.g., to analytics or email providers), we ensure an adequate level of protection, for example through an EU adequacy decision or Standard Contractual Clauses.

6. Cookies

We use necessary cookies to run the shop (cart, login, security). Analytical and marketing cookies are used only with your consent, which you can give or withdraw at any time via the cookie settings. See our [Cookie Policy].

7. Your rights

Under GDPR you have the right to:

• access your personal data,
• rectification of inaccurate data,
• erasure ("right to be forgotten"),
• restriction of processing,
• data portability,
• object to processing based on legitimate interest, including direct marketing,
• withdraw consent at any time, without affecting the lawfulness of earlier processing,
• not to be subject to automated decision-making, including profiling, with legal or similarly significant effects (we do not currently do this).

To exercise your rights, contact us at info@ty-o.com. We will respond within one month.

8. Right to lodge a complaint

If you believe your data is being processed unlawfully, you may file a complaint with the supervisory authority in your country.

9. Data security

We protect your data with appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls, and regular backups.

10. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with its effective date.

‍