Privacy information

Processing of personal data

The data controller is Julia Cole. Contact address: Velké Kunratické 1311/8, Kunratice, 148 00 Praha 4. Email: info@zasijeme.cz.

When you submit a request, we process your name, phone number and/or email address, preferred contact method, selected service, handoff preference, language version, and any garment details you provide. We use them to assess the request, prepare a quote, and take steps before a possible contract is formed.

For each request, we generate a request identifier and record the receipt time, language, form version, and version of this privacy information. Before submission, we verify your confirmation that you have read the information; the confirmation itself is not retained in the operational request record.

We process request details to take steps at your request before a possible contract under Article 6(1)(b) GDPR. We also process confirmed-order data to meet legal and accounting obligations under Article 6(1)(c) GDPR and to establish, exercise, or defend legal claims on the basis of legitimate interests under Article 6(1)(f) GDPR. We process technical security data on the basis of our legitimate interest in operating a secure and reliable website under Article 6(1)(f) GDPR. We process optional analytics only on the basis of consent under Article 6(1)(a) GDPR.

Providing the data is not a statutory requirement. A phone number is required for WhatsApp or phone contact, while an email address is required for email contact. Your name, preferred contact method, selected service, handoff preference, and confirmation that you have read this information are also required to submit the request and take steps before a possible contract. Without the applicable required data, the request cannot be submitted or handled. Garment details are optional.

Requests that do not become orders are retained for no longer than 6 months. Details relating to confirmed work are retained for the periods required by legal and accounting obligations.

Working copies of requests held by Resend and in the operational mailbox are subject to the same maximum six-month period. Under Vercel’s current Pro-plan limits, technical request and function-runtime logs are retained for no longer than 30 days: 1 day without Observability Plus and 30 days with Observability Plus. User-level and event-level data is retained in Google Analytics for 2 months. Microsoft Clarity retains session replay recordings for 30 days and click heatmap data for 9 months. The consent choice remains in the browser until it is changed or withdrawn or browser storage is cleared.

Vercel hosts and protects the site and may process technical data such as an IP address to deliver content, maintain security logs, and enforce rate limits. Resend delivers the request content by email to Zašijeme’s operational mailbox.

Recipients or categories of recipients are Vercel as hosting and security provider, Resend as email-delivery provider, ImprovMX as provider of the operational mailbox, and, only after analytics consent, Google Ireland Limited and Microsoft Ireland Operations Limited as the provider of Microsoft Clarity. People authorised to handle requests and orders may also access the data.

Vercel, Resend, ImprovMX, and Microsoft may process data outside the European Economic Area, including in the United States. Vercel’s, Resend’s, and Microsoft’s published data-processing addenda use the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. ImprovMX states that it processes data in the United States and Europe and adheres to the Framework’s principles, while also stating that it is not certified under the Framework. You can request information about the applicable mechanism or a copy of the relevant safeguards at info@zasijeme.cz.

Google Analytics and Microsoft Clarity start only after consent. Google Analytics may process analytics identifiers and cookies, browser and device data, visited pages and interactions, and an approximate area derived from the IP address. Microsoft Clarity creates session replay recordings and click and scroll heatmaps and may process pseudonymous analytics identifiers, cookies, technical browser and device data, visited pages, clicks, scrolling, and pointer movement. We store the consent choice in the browser. We explicitly mask the entire request form and its related status messages; form contents, contact details, garment descriptions, and the request identifier are not uploaded to Clarity or sent in analytics events. Clarity advertising storage is denied. Google Signals and advertising personalisation are disabled. Consent can be withdrawn at any time through Cookie settings; on withdrawal, we stop further analytics processing and remove available analytics cookies.

You have the right to request access to, correction or erasure of your personal data and restriction of processing. Where the legal conditions are met, you also have the right to data portability. You have the right to object to processing. You can withdraw analytics consent at any time; withdrawal does not affect the lawfulness of earlier processing. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection.

We do not use automated decision-making or profiling when handling requests.