Privacy
The Slovak version of this information is authoritative. Translations have the same meaning. If there is a conflict, the Slovak version applies, without limiting any mandatory consumer rights you have in your country of habitual residence.
1. Controller
The controller of personal data is Štefan Farkaš – Creawee SK, IČO 44531796, tax ID 1077988362, T. Vansovej 517/12, 940 02 Nové Zámky, Slovakia, email info@weestick.com, phone +421 917 633 791.
We process data under the GDPR and Slovak Act No. 18/2018 Coll. on personal data protection. This notice is not marketing consent. We do not collect newsletter or advertising consents.
2. Data we process
We process only data that the shop actually uses or will use when sales are launched:
- Identity and contact data: first name, last name, email, phone.
- Account: email, name, email verification, hashed password, and if used a Google account link (provider identifier, Google email).
- Bag, checkout and order: items, sizes, quantities, prices, language, status, timestamps.
- Billing data and whether the purchase is for a company, including company ID if the customer enters it.
- Uploaded artwork, preview, checksum, pixel dimensions, quality-check result and DPI.
- Packeta pickup data: identifier, name, address, city, postcode, country, point type.
- After GoPay payment is launched: payment identifiers and statuses, not the card number, CVV or other card data.
- Complaints, email communication and internal staff notes on the order.
- Technical data needed for security and operation: session, CSRF token, language, guest bag identifier, technical error logs.
3. Purposes and legal bases
- Performance of a contract: order processing, production, delivery, complaints, account and login.
- Legal obligation: accounting and tax retention of orders, handling data-subject rights.
- Legitimate interest: shop security, preventing abuse, dispute handling, internal order records.
- Consent: we do not use it for marketing, analytics or optional cookies, because we do not run those processing operations.
4. Recipients
We disclose data only to those who need it for the relevant purpose:
- Packeta / Zásielkovna: data needed for the pickup point and delivery when the customer chooses delivery.
- GoPay: payment identifiers and status after public payment is launched. We do not store the card number.
- Google: if the customer signs in with Google, Google processes login data as the sign-in provider.
- The hosting, email-delivery and backup provider to the extent needed to run the shop.
- Shop staff (administration and production) to the extent needed to handle the order and complaints.
5. Transfers outside the EEA
The shop does not operate its own servers outside the EEA. If the customer uses Google sign-in, Google may process login data, including outside the EEA, under Google’s terms and safeguards.
We do not carry out other targeted transfers outside the EEA for marketing or analytics.
6. Retention
A guest bag and guest-uploaded artwork are configured to expire after 7 days. After that period they are not kept for further guest shopping. Records that do not belong to a user account or an order are designated for deletion from the database and disk. This is not a promise that a file disappears within 7 days: the cleanup task is scheduled once a day, so deletion can happen after the next daily run.
An open checkout is valid for 24 hours. An unpaid order is configured to expire after 24 hours.
The account, orders, complaints and accounting records are kept for the life of the contract and then for the period required by accounting, tax and consumer-protection rules, or until a dispute is resolved.
7. Data-subject rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection, as provided by the GDPR.
Send a request to info@weestick.com. You have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, https://dataprotection.gov.sk.
We do not use automated decision-making or profiling with legal effects. Artwork checking (DPI and technical checks) is a technical file check, not profiling of a person.