Privacy policy
1. Who is the data controller?
The data controller is unuodesign s.r.o., registered office at Vožická 329, 391 37 Chotoviny, ID: 27380076, VAT ID: CZ27380076 (hereinafter referred to as the „Controller“).
Contact details for GDPR inquiries:
Email: info@unuo.nl
Phone: +420 288 288 208
2. What data do we process and why?
We only process data necessary to deliver your favorite fabrics or clothing and to ensure the best shopping experience.
| Purpose of processing | Legal basis | Retention period |
|---|---|---|
| Order fulfillment (name, address, tel, email) | Performance of contract | 10 years (statutory) |
| Customer support & AI assistant | Legitimate interest | 2 years from last contact |
| Newsletter (customers) | Legitimate interest | Until unsubscribed |
| Newsletter (non-customers) | Consent | Until consent is withdrawn |
| Personalization & Cookies | Consent | By cookie type (usually 1 year) |
3. Artificial Intelligence and Automated Decision-Making
In 2026, we use modern technologies to save you time:
- Perselio AI: We use the Perselio AI assistant to improve customer service and personalize your shopping experience. The AI processes your inquiries and purchase history. You have the right to human intervention if an AI decision has legal effects on you.
- Profiling: We may show you relevant offers based on your previous purchases. You can opt-out of this processing at any time.
4. Data Processors
Your data is safe, but we use these partners for delivery and operations:
E-commerce platform: Shoptet s.r.o.
Shipping: GLS, Packeta (Zásilkovna).
Payment gateways: ShoptetPay, GoPay, iDEAL.
Marketing & Analytics: Google, Meta, Glami, Clarity.
Customer care: Daktela, Perselio (AI).
5. Cross-border Data Transfer
Data may be transferred to the USA (Google, Meta) in full compliance with the EU-U.S. Data Privacy Framework and standard contractual clauses.
6. Your Rights
Under GDPR, you have the following rights:
- Right of access: To know what data we hold about you.
- Right to rectification: To correct inaccurate or incomplete data.
- Right to erasure: The "right to be forgotten" if data is no longer needed.
- Right to object: Against processing based on legitimate interest.
- Right to data portability: To receive your data in a machine-readable format.
- Right to withdraw consent: At any time for marketing or cookies.
- Lodge a complaint: With the relevant Data Protection Authority.