← Back to homepage
Privacy Policy (GDPR)
Grain of Design | Martina Kunstovná
1. Data Controller
The data controller is:
2. Scope of Processed Data
We only process data necessary for providing our services:
- Identification data: First and last name.
- Contact data: Email address, phone number.
- Billing and delivery data: Address, Company ID, VAT ID (in case of an order).
- Communication: Content of messages sent via the contact form or email.
- Technical data: IP address, cookies and analytical data about website visits.
3. Purpose and Legal Basis of Processing
We process your data based on the following legal grounds:
- Performance of a contract: Processing orders, providing services and communicating with you; sending newsletters and commercial communications.
- Legitimate interest: Ensuring website security, keeping records of orders and direct marketing (sending news to existing clients).
- Compliance with legal obligations: In particular, accounting and tax record-keeping.
- Consent: For advanced analytics and marketing communication to non-clients.
4. Data Processors
To ensure the operation of the studio, we use the services of verified partners who have access to data only to the necessary extent:
- Hosting and infrastructure: Replit, Inc.
- Analytics: Google LLC (Google Analytics).
- Email marketing: Ecomail.cz, s.r.o.
- Payments: Stripe, Inc. (the controller does not have access to your payment card numbers).
- Email services: FORPSI (INTERNET CZ, a.s.).
- Administration: External accountant / accounting software provider.
Transfer to third countries: Some providers are based in the USA. Data transfer is carried out in accordance with the adequacy decision (EU-U.S. Data Privacy Framework) or based on standard contractual clauses.
5. Data Retention Period
We retain data only for the necessary period:
- Accounting documents: 10 years (as required by law).
- Contractual communication: 3 years from the end of cooperation (due to limitation periods).
- Marketing: Until consent is withdrawn or an objection is raised, but no longer than 5 years from the last interaction.
- Analytical data: According to the settings of the specific tool (usually 14–26 months).
6. Your Rights
As a data subject, you have the right to:
- Access your data and information about how we process it.
- Correction of inaccurate data.
- Erasure (right to be forgotten) if the purpose has ceased or you withdraw consent.
- Restriction of processing and data portability.
- Object to processing based on legitimate interest.
- Lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).
No automated decision-making or profiling takes place.
7. Cookies
The website uses cookies to ensure functionality (essential) and for traffic analysis. Analytical cookies (Google Analytics) are only activated with your active consent given in the cookie bar. You can change your cookie settings at any time in the website footer or in your browser. Details about cookies are available in the separate cookie settings.
8. Contact
For questions about privacy, please contact me at:
9. Final Provisions
The controller reserves the right to update this policy at any time (e.g., in case of changes in legislation or services used). The current version is always available on this website.
This policy is effective from July 20, 2025.
Last updated: February 22, 2026