Privacy policy

This Privacy Policy explains what personal data we process, why we process it, and what rights you have. We process personal data in accordance with the EU General Data Protection Regulation (GDPR).

Data controller

Valeriia Horvat, IČO 21830398, Nepomuckýh 763/20. Email: vendorguide8@gmail.com.

Personal data we process

• Account data: your name, email address, password hash, interface language and, if you choose to provide it, your wedding date. We do not store your password in plain text.
• Payment data: the amount, date and payment reference. We do not receive or store your payment card details.
• Usage data: saved vendors and the dates on which your access was activated and expires.
• Technical data: your IP address, browser type, device information and the time of requests recorded in server logs.
• Correspondence with us via Telegram or email.

Why and on what legal basis we process your data

• To create your account, identify your payment and provide access to the catalogue — performance of a contract.
• To protect the catalogue against copying, distribution and unauthorised use, including through personalised watermarks and device limits — our legitimate interest.
• To respond to your questions and requests — performance of a contract or our legitimate interest.
• To maintain accounting records and comply with other legal requirements — compliance with a legal obligation.
• To ensure the technical operation and proper display of the website — our legitimate interest.

How long we retain your data

• Account data: for the duration of your access and for 12 months after it expires, so that you can renew your access while retaining your saved vendors. The data will then be deleted or anonymised.
• Payment and accounting records: for the period required by applicable accounting and tax legislation.
• Server logs: for up to 90 days.
• Correspondence: for as long as necessary to handle your request and protect legal claims, but no longer than three years after the last communication, unless a longer retention period is required by law.

Recipients of data and external services

We do not sell personal data.

Your data may be processed by service providers that are necessary for the operation of the website, including Hostinger as our hosting provider and our email service provider. They process data only to the extent necessary to provide the relevant services.

Fonts on the website are loaded directly from Google Fonts servers, and certain photographs are loaded from Unsplash servers. When a page is loaded, the user’s browser connects to the servers of these providers. As a result, they may receive technical data such as the user’s IP address, browser and device type, and the time of the request.

The website does not use Google Analytics, Meta Pixel or any other third-party analytics or advertising tracking services.

Your rights

Where the applicable legal requirements are met, you may request access to your personal data, its rectification or erasure, restriction of processing or data portability. You may also object to processing based on legitimate interests.

To exercise your rights, contact us at vendorguide8@gmail.com.

You also have the right to lodge a complaint with the Czech Office for Personal Data Protection — Úřad pro ochranu osobních údajů: www.uoou.gov.cz.

Security

Passwords are stored as secure cryptographic hashes and are not stored in plain text. Access to the administrative area of the website is protected. Vendors’ contact details are available only to users with active access to the catalogue.