Privacy Policy

Protecting your personal data is important to me. This Privacy Policy explains what personal data is collected and processed when you visit this online store, purchase products, or communicate with me, the purposes for which it is used, and the rights you have regarding its processing.

Personal data is processed in accordance with applicable laws, particularly the General Data Protection Regulation (GDPR).

Data Controller

The data controller responsible for processing your personal data is:

Michaela Stránská / Packstein

Business Identification Number (IČO): 21621471

Registered Business Address:  Lidická 987, 295 01 Mnichovo Hradiště, Czech Republic

Email: info@packstein.com

Personal Data I Collect and Process

Depending on how you use this online store, I may process the following types of personal data:

• First and last name

• Email address

• Phone number

• Billing and shipping addresses

• Information about orders and purchased products

• Payment and billing information necessary to process orders

• Content of communications between you and me

• Information and materials provided in connection with individual orders or commissioned artworks

• Information about newsletter subscriptions, marketing preferences, and related consent

• Technical information, such as IP address, device information, browser information, and website usage data

• Information collected through cookies and similar technologies, in accordance with applicable settings and consent preferences

Full payment card details are generally processed by the relevant payment service providers.

How I Collect Personal Data

Personal data is collected primarily:

• Directly from you when you make a purchase, arrange an individual order, or communicate with me

• When you subscribe to my newsletter or other marketing communications

• Automatically when you use the website, through technical tools, cookies, and similar technologies

• Through service providers involved in operating the online store, particularly Shopify

Purposes and Legal Bases for Processing

I process personal data for the following purposes and on the corresponding legal bases.

Order Processing and Contract Fulfilment

I use personal data to receive and process orders, arrange payments, produce and deliver products, and communicate with customers regarding their purchases.

The legal basis is the performance of a contract or taking steps prior to entering into a contract.

Compliance with Legal Obligations

Certain personal data is processed and retained to comply with accounting, tax, and other legal obligations.

The legal basis is compliance with a legal obligation.

Communication and Customer Requests

Personal data may be used to respond to enquiries, handle complaints, process returns, and address other customer requests.

Depending on the circumstances, the legal basis may be the performance of a contract, compliance with a legal obligation, or legitimate interests in maintaining proper communication and protecting legal claims.

Operation, Security, and Improvement of the Online Store

Technical data may be processed to ensure the security and proper functioning of the online store and to protect it against misuse.

Depending on the specific purpose, the legal basis may be legitimate interests in maintaining a secure and functional online store or another appropriate legal basis.

Where consent is required for analytics or marketing technologies, it is obtained through the relevant privacy settings.

Marketing Communications and Newsletter

If you subscribe to my newsletter, I may use your email address to send information about new paintings, prints, upcoming collections, special offers, and other updates.

Marketing communications are sent based on your consent or, where permitted by law, to existing customers when the applicable legal requirements are met.

You can unsubscribe at any time using the link provided in a marketing email or by contacting me at info@packstein.com.

Unsubscribing from marketing communications does not affect communications necessary to process or fulfil your orders.

Shopify and Shopify Network Intelligence

This online store is hosted by Shopify, which provides the technical infrastructure, checkout process, order management, and other related services.

Shopify collects and processes personal data from customers and visitors when they interact with this store, including when browsing the website or making purchases.

Shopify Network Intelligence is enabled for this store.

Through this feature, Shopify may process information about customers' interactions with this store together with information about their interactions with other Shopify-powered stores and Shopify services.

This information may be used to provide and improve Shopify's enhanced services, including:

• Personalising the shopping experience

• Improving the functionality and performance of online stores

• Analysing customer interactions with stores and advertisements

• Delivering more relevant advertisements and improving advertising services

For these purposes, personal data may be shared with Shopify and relevant third-party service providers, including those located outside the European Economic Area.

When providing certain services, Shopify may act as an independent data controller. Further information about Shopify's processing activities, legal bases, and customer privacy rights is available in its own privacy policies.

For more information, please refer to Shopify's Consumer Privacy Policy.

Opting Out of Data Sharing and Exercising Privacy Rights

Customers in applicable regions may opt out of the sharing of their personal data for targeted advertising purposes through the Your Privacy Choices page, which is available through the online store's navigation where this option is enabled.

Direct link to this page: [INSERT LINK TO DATA SHARING OPT-OUT PAGE]

Additional rights relating to Shopify's processing of personal data, including requesting access or deletion, objecting to processing, or withdrawing consent where applicable, may be exercised through the Shopify Privacy Portal.

The use of personal data for non-essential analytics, personalisation, and advertising purposes is subject to applicable legal requirements and customers' consent and privacy choices.

Sharing Personal Data

Personal data may be shared, to the extent necessary, with service providers involved in operating the online store and fulfilling orders.

These may include:

• Shopify – online store operation, order management, analytics, marketing, and other related services

• theprintspace – production and delivery of Open Edition Prints

• Payment service providers – payment processing

• Shipping and delivery companies – transportation and delivery of orders

• Email and marketing service providers – newsletter management and distribution

• Accounting and technical service providers, where applicable

The scope of personal data shared depends on the purpose of the relevant service.

Some service providers process personal data on my behalf, while others may act as independent data controllers in accordance with applicable law.

International Transfers of Personal Data

As this online store uses international services and ships orders to customers in other countries, certain personal data may be transferred to or processed outside the European Economic Area.

This may particularly involve Shopify, external service providers, and partners responsible for producing or delivering orders.

Where applicable law requires additional safeguards for international transfers of personal data, such transfers must be based on an appropriate legal mechanism, such as an adequacy decision, Standard Contractual Clauses, or another legally permitted mechanism.

Information about applicable safeguards may be requested through the contact email address, where relevant to the transfer in question.

Data Retention

I retain personal data only for as long as necessary to fulfil the purposes for which it was collected or for the period required by applicable law.

Data relating to orders, invoices, and accounting records is retained for the periods required by applicable accounting and tax legislation.

Data necessary for handling complaints or legal claims may be retained for as long as necessary to resolve those matters or protect legal rights.

Data relating to general communications is retained for the time necessary to address the relevant enquiry or request and, where appropriate, for an additional period necessary to protect legitimate interests or legal claims.

Contact information used for marketing communications is retained for as long as the relevant legal basis remains valid. Following unsubscription, limited information may be retained where necessary to ensure that the opt-out request is respected.

Personal data processed on the basis of consent will no longer be used for the relevant purpose after consent is withdrawn, unless another appropriate legal basis permits its continued processing.

Once the applicable retention period has expired, personal data is deleted or anonymised, unless further retention is legally justified.

Your Rights

Under applicable data protection laws, you may have the following rights, subject to the relevant legal conditions:

• The right to request access to your personal data

• The right to request correction of inaccurate or incomplete personal data

• The right to request deletion of your personal data

• The right to request restriction of processing

• The right to object to processing based on legitimate interests and to processing for direct marketing purposes

• The right to receive your personal data and, where applicable, transfer it to another controller, provided the conditions for data portability are met

• The right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal

• The right not to be subject to decisions based solely on automated processing, including profiling, where the relevant legal conditions are met

• The right to lodge a complaint with the relevant supervisory authority

In the Czech Republic, the supervisory authority is the Office for Personal Data Protection (www.uoou.gov.cz).

You may exercise your rights relating to this online store by contacting info@packstein.com.

Rights relating directly to personal data processed by Shopify may also be exercised through the Shopify Privacy Portal.

Cookies and Similar Technologies

This online store uses cookies and similar technologies to ensure the proper functioning and security of the website, analyse website traffic, and, where applicable, personalise content and advertisements.

Essential Cookies are used for functions such as maintaining the shopping cart, completing checkout, and securing the website. Consent is generally not required for these cookies when the applicable legal conditions are met.

Analytics Cookies may help provide insights into website traffic and how visitors interact with the website.

Marketing and Personalisation Cookies may be used to display more relevant advertisements, measure advertising effectiveness, or personalise the shopping experience.

Where consent is required for non-essential cookies and similar technologies, it is obtained through the cookie banner or the relevant privacy settings.

Consent is voluntary, and you may refuse, modify, or withdraw it at any time through the Cookie Preferences link available in the footer of the online store.

In accordance with applicable law and the customer's privacy preferences, Shopify may also use information collected through these technologies as part of Shopify Network Intelligence.

Customers in applicable regions may opt out of the sharing of their personal data for targeted advertising purposes through the Your Privacy Choices page.

Data sharing opt-out page:

Newsletter and Marketing Preferences

If you subscribe to my newsletter, you may receive emails about new paintings, prints, upcoming collections, early access to new releases, and other updates related to my artistic work.

Subscribing to the newsletter is voluntary and is not a condition of making a purchase.

Every marketing email includes an option to unsubscribe. You may also update your preferences by contacting info@packstein.com.

Shopify or other relevant email service providers may be used to manage and distribute marketing communications.

Providing Personal Data

Providing personal data necessary to enter into and fulfil a purchase contract, such as contact and shipping information, is required to process an order.

Without this information, it may not be possible to complete or deliver an order.

Providing personal data for marketing purposes and consenting to non-essential cookies is not a condition of making a purchase.

Changes to This Privacy Policy

This Privacy Policy may be updated from time to time, particularly in response to changes in the services used, personal data processing practices, or applicable laws.

The current version will always be available on this website.

Contact Information

If you have any questions regarding the protection of your personal data or wish to exercise your rights, you can contact me at info@packstein.com.