Updated on 27 October 2026.

Who processes your data

The controller is Brezi s. r. o., Horný val 6/13, 010 01 Žilina, Slovakia, company ID 54768578. For privacy matters, contact brezi@brezi.sk or write to our registered office.

What we use and why

Orders and delivery: your name, contact details, billing and delivery addresses, company details, ordered products, selected options, payment details needed to match a bank transfer and correspondence. Processing is necessary to enter into and perform a contract under Article 6(1)(b) GDPR. For a business contact person, we rely on our legitimate interest in fulfilling the contract with their company under Article 6(1)(f). Details marked mandatory at checkout are needed to fulfil the order; without them it cannot be completed.

Personalisation: we process text and materials you send for production, such as names, event dates or venues. Do not send information unnecessary for the order. If you supply other people’s data, ensure that you may provide it for this purpose and inform them about the processing. We use their data in supplied materials on the basis of our legitimate interest in fulfilling the order, while respecting their rights.

Customer accounts and business programme: we use your login email, account details and order history to provide the account, on the basis of contract performance. We use company details, registration numbers and application status for manual assessment of business applications and abuse prevention, based on legitimate interests. Business applications are approved by a person.

Accounting, defect claims and withdrawals: we process necessary data to meet legal obligations under Article 6(1)(c) GDPR. We may also retain evidence and related correspondence to protect legal claims on the basis of legitimate interests.

Website security and operation: technical records such as IP addresses, request times and browser information help prevent abuse, diagnose problems and protect the shop. The legal basis is our legitimate interest in secure operation. Essential cookies support the basket, login and saved preferences.

Optional analytics: consenting to analytics cookies may activate Google Analytics and Jetpack Stats. They use visit, device and interaction data to analyse website use. The legal basis is consent under Article 6(1)(a) GDPR. You may withdraw consent at any time through Cookie settings; this does not affect the lawfulness of earlier processing. You can shop without consenting to optional analytics.

Who may receive data

We share necessary data with hosting provider Websupport, people providing shop administration and accounting, the bank processing your transfer and the carrier selected at checkout. The website uses WordPress and WooCommerce; using this software alone does not mean all orders are sent to its developer. If you enable analytics, Google Analytics and Jetpack/Automattic providers participate in processing. Public authorities may receive data where the law requires it.

Google and Automattic services may involve transfers outside the EEA. Google describes adequacy decisions and standard contractual clauses in its transfer information; Automattic describes standard contractual safeguards in its privacy policy. You may request information and a copy of the relevant safeguards at brezi@brezi.sk. Details about visitor data are provided by Automattic.

We provide necessary accounting and billing information to our external accountant, company ID 37358022, for bookkeeping and compliance with legal duties.

How long we keep data

Account data is retained for the lifetime of your account, until you request closure. Closing an account does not erase records that must be kept by law. Accounting documents are retained for 10 years following the year to which they relate. This does not automatically apply to every basket entry or production file.

Other order data, materials and correspondence are retained while handling the order and afterwards only to the extent and for the time needed for defect claims, legal duties or protection of claims within applicable limitation periods. Security records are kept according to the time necessary to investigate incidents and protect the system. Cookie lifetimes are described in our Cookie information. Data with no remaining purpose or legal basis is erased or anonymised.

Your rights

Subject to the GDPR, you may request access and a copy, correction, erasure, restriction and portability of your data. You may object to processing based on legitimate interests on grounds relating to your situation. Consent can be withdrawn at any time. These rights are not unconditional; for example, a legal duty to retain an accounting document may prevent its immediate erasure.

Send requests to brezi@brezi.sk. We may reasonably verify your identity to protect your data. We normally inform you of the outcome within one month and explain any lawful extension. You may complain to a supervisory authority, particularly in your country of habitual residence or work. In Slovakia this is the Office for Personal Data Protection of the Slovak Republic.

Cookies

Categories, purposes and controls are described in our Cookie information. Use the Cookie settings link on the website to change consent.