Privacy Policy

1. Data Controller

The controller responsible for processing your personal data in compliance with the EU General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR) is:

2. What Data We Collect & Why

We process personal data that you provide when requesting a non-binding quotation or communicating with our glassworks:

• Contact & Identification Details: First name, last name, email address, phone number.
• Billing & Delivery Information: Company name, VAT / Tax ID, billing address (street, city, zip code, country), and optional separate shipping destination.
• Inquiry & Order Details: Selected glass products, quantities, weights, logistics requirements, and order notes.

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Performance of Contract & Pre-contractual Measures (Article 6(1)(b) GDPR): Processing is necessary to calculate logistics, prepare bespoke price quotations, and fulfill your orders.
• Compliance with Legal Obligations (Article 6(1)(c) GDPR): Fulfilling statutory requirements under tax and accounting legislation.
• Legitimate Interests (Article 6(1)(f) GDPR): Maintaining records of commercial communications, technical customer care, and protecting our legal rights.

4. Data Retention & Record Storage

We retain your data transparently in accordance with our legal duties and business relationship:

• Customer Records & Orders: For active clients, customer details and order history are maintained throughout the duration of our business relationship to facilitate recurring orders and continuous customer service.
• Invoices & Tax Documentation: Archived for 10 years following the fiscal year in which the order was fulfilled, as mandated by statutory Czech and EU tax laws.
• Uncompleted Inquiries: If an inquiry does not result in an order, correspondence and specifications are retained for the duration necessary to conclude the inquiry and up to 3 years for mutual legal protection.

5. Data Processors & Infrastructure

We do not sell, rent, or monetize your personal data. Data is processed exclusively by verified service partners necessary to operate our business:

• Cloudflare, Inc. (Secure edge computing, application hosting, and encrypted database storage).
• Resend, Inc. (Transactional email delivery and notification services).
• Freight and shipping partners (e.g., DHL, DPD, DSV, FedEx) solely to execute transport to your delivery location.

6. Your Rights Under GDPR

You have full legal control over your personal data. You are entitled to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request erasure of your data where statutory retention laws no longer apply.
• Object to data processing carried out under legitimate interest.
• Lodge a complaint with our supervisory authority: The Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic (www.uoou.cz).

To exercise any of these rights, contact us anytime at info@banasglass.com.