Privacy Policy
Effective from 2 September 2026
1. Controller
MARV, s.r.o., Medkova 1591/34, 500 02 Hradec Králové, Czech Republic, IČO 05898587. Contact for anything privacy-related: info@piumella.com.
2. What we process and why
- Orders — name, delivery address, e-mail, phone, ordered items. Legal basis: performance of the contract. Kept for 10 years as required by tax law.
- Payments — processed by PayPal; we receive only a payment confirmation, never your card details.
- Analytics — only with your consent (the cookie banner). Google Analytics 4 with IP anonymisation, used to understand which pages and products help people. Retention 14 months. Declining changes nothing about how the store works.
3. Cookies and local storage
- piumella-consent — remembers your cookie choice (local storage, essential).
- piumella-cart — keeps your bag on your device (local storage, essential, never leaves your browser).
- Google Analytics (_ga…) — set only after you choose “Allow analytics”.
4. Who processes data for us
PayPal (payments), Packeta (delivery), BaseLinker (order management), Vercel (hosting), Google (analytics, with consent). Each acts under a data processing agreement; order data stays within the EU/EEA frameworks these providers operate under.
5. Your rights
You can request access, correction, deletion, portability, or object to processing at info@piumella.com. You can also lodge a complaint with the Czech Data Protection Authority (ÚOOÚ, uoou.gov.cz) or your local supervisory authority. We do not profile you and we do not sell or share data for advertising.