Privacy notice
Here is what happens to your data when you browse hoodies, write an email and make a purchase.
Updated:
- Your basket is stored in your browser.
- Advertising pixels and newsletters are not enabled in the shop.
- Providing the data needed for an order does not mean consenting to advertising.
Who processes your data
The data controller is BASS STATION s. r. o., company ID 56025921, Stará spišská cesta 2161/28, 040 01 Košice, Slovakia. Otaku Embroidery is the shop's brand. You can send personal data requests to embroidery.order8@gmail.com or in writing to the address above.
Seller telephone: +421 940 628 899. For purchases, returns or complaints, please contact us primarily at embroidery.order8@gmail.com.
Your basket and data in your browser
The basket uses your browser's local storage (localStorage). It contains the selected product, colour, size and quantity. We do not store your name, email or address in the basket. The basket remains after you close the page until you delete its contents or the website's data.
The form does not continuously send or save typed contact and address details in local storage. Only when you submit a request, order or withdrawal notice is that attempt, including personal data, saved in sessionStorage. Reloading repeats the same attempt. It is removed after confirmed receipt or a definitive result that it was not saved; it remains during an uncertain outcome. Closing the session or clearing browser data may prevent restoration. Contact us then to check its status.
After you dismiss the privacy information banner, sessionStorage remembers only your choice so that the banner does not reopen during this session. This choice is not consent to advertising.
This storage supports the basket and purchase you have chosen, rather than advertising tracking. You can clear it in your browser settings; this removes your basket or the ability to recover an unfinished submission attempt. Your browser may separately provide automatic form filling.
When you write to us
We process your email address, the message and the details you include. The purpose is to answer your question or handle a purchase, return or complaint. We process pre-contractual requests and performance of a contract under Article 6(1)(b) GDPR, and legal obligations under point (c). Other ordinary correspondence is processed based on our legitimate interest in replying and protecting legal claims under point (f).
Mail is processed by Google's Gmail service. Clicking an email link opens your mail application; the click itself does not send us a message. Do not include payment card details, passwords or unnecessary sensitive data.
Data for requests, purchases and withdrawal
We process your name, email, phone, billing and any separate delivery address, selected items and delivery preference to handle your request and purchase. Business details are processed for business purchases. Further records concern the final quote, your approval, delivery and pickup point, payment, production, dispatch and documents. For withdrawal, we process your name, email, purchase identification, statement and submission and receipt times. This form does not require a reason or IBAN.
We will use the data to conclude and perform the contract under Article 6(1)(b) GDPR, meet accounting and consumer obligations under point (c), and, where applicable, protect legal claims under point (f). Required fields are necessary for purchase and delivery; without them, we cannot fulfil your order. Providing a phone number for the carrier is not consent to marketing calls.
Orders will be processed in our internal system. The selected carrier receives the delivery details it needs; the bank processes payment information. People responsible for fulfilling orders and accounting, and necessary service providers, have access within the relevant scope.
How long we need your data
Under the Accounting Act, we retain accounting documents for ten years following the year to which they relate. This does not mean that every message or technical record has the same retention period.
We retain other data for the time needed to handle the enquiry, order or complaint and protect the relevant legal claims; this depends on the purpose, statutory period and any ongoing dispute. Technical log retention also depends on the hosting provider's settings.
Providers and data transfers
OVHcloud, the technical server administrator and Google email services are involved in operating the service. Google may process data outside the European Economic Area. We therefore do not state that all data stays exclusively in Slovakia or the EU.
The linked pages provide the providers’ data protection information. You can request details about processing, access and any safeguards for data transfers by contacting our email address.
Your rights
Subject to the conditions of the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests. Erasure may not be possible for data we must keep by law or for a legal claim.
We generally respond to requests within one month. For a complex request, the period may lawfully be extended by another two months; we will inform you of the extension and its reason within the first month. We request identity verification only to the extent necessary.
You can complain to the Office for Personal Data Protection of the Slovak Republic or the competent supervisory authority in your country of habitual residence or work, or where the alleged infringement occurred. Automated decision-making with legal or similarly significant effects and advertising profiling are not enabled on the website. Providing purchase data does not sign you up for a newsletter.