Privacy Policy

The controller of your personal data is:

CSMD - Libelula s. r. o., registered office Blhovce 230, 980 32 Blhovce, Slovakia, Reg. No. (IČO): 56 070 837, Tax ID (DIČ): 2122176023, VAT ID (IČ DPH): SK2122176023, registered in: Obchodný register Okresného súdu Banská Bystrica, oddiel: Sro, vložka č. 48536/S.
E-mail: bestsignostudio@gmail.com, phone: +421 907 097 037.

For questions about data protection and to exercise your rights, contact us at bestsignostudio@gmail.com or in writing at the registered office. We have not appointed a data protection officer, as our activities do not require one.

• identification and contact data – name, e-mail, phone, delivery and billing address; for companies also the company name, Reg. No., Tax ID and VAT ID;
• order data – goods ordered, price, delivery and payment method, payment status (we do not process card details – they are entered directly in the payment gateway);
• personalisation data – the text or name to be engraved that you enter (it may contain another person’s name, e.g. a child’s – we use it only to make your order);
• communication – messages, complaints and withdrawals;
• customer account data – login details (the password is stored only in encrypted form), order history; if you sign in with Google, Google gives us your name and e-mail;
• newsletter and campaign data – your e-mail if you subscribe or join a promotion (e.g. the prize wheel), product reviews if you write them;
• technical data – IP address, device and browser type, cookies and data on how the site is used (analytics and marketing only with your consent).

Providing the data needed to conclude the contract is a contractual requirement – without it we cannot handle the order. We do not carry out automated decision-making or profiling with legal or similarly significant effects.

• carriers (DPD, Slovenská pošta, Packeta) – name, address, phone and e-mail to deliver the parcel;
• the payment gateway – Besteron, a. s., registered office Prešovská 38/B, 821 02 Bratislava, Slovakia, Reg. No. 47 866 233, which processes the payer’s data as an independent controller under its own privacy terms;
• processors that run the e-shop for us – hosting and cloud infrastructure (Railway Corporation, servers in the European Union – the Netherlands), e-mail delivery, file storage, accounting;
• analytics and advertising providers – Google Ireland Limited (Google Analytics, Google Ads) and Meta Platforms Ireland Limited (Meta Pixel), only if you consent in the cookie settings; Google also when you sign in with Google;
• public authorities where the law requires it, and legal advisers when claims are pursued.

Some of these providers (in particular Google, Meta and Railway) have parent companies in the USA, so data may also be accessed from the USA. Such transfers rely on the European Commission’s adequacy decision (EU–US Data Privacy Framework) or on standard contractual clauses.

• accounting documents and invoices – 10 years after the year to which they relate (Accounting Act, VAT Act);
• payment transaction records – 5 years (contractual obligation towards the payment gateway provider);
• order, complaint and withdrawal data – for the term of the contract and then for the limitation periods for claims (usually 3 to 4 years);
• customer account – until it is closed;
• newsletter and promotions – until consent is withdrawn;
• cookies – according to your settings and the lifetime of each cookie.

You have the right:

• of access to your personal data (Art. 15 GDPR),
• to rectification of inaccurate data (Art. 16 GDPR),
• to erasure (Art. 17 GDPR) where we no longer need the data and are not obliged to keep it,
• to restriction of processing (Art. 18 GDPR),
• to data portability (Art. 20 GDPR),
• to object to processing based on legitimate interest and to direct marketing (Art. 21 GDPR),
• to withdraw consent at any time – this does not affect the lawfulness of processing before the withdrawal (unsubscribe from the newsletter via the link in every e-mail, change cookies in the site settings).

You can exercise your rights by e-mail to bestsignostudio@gmail.com; we reply within one month at the latest. If you believe our processing breaches the rules, you may lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Galvaniho 7/B, 821 04 Bratislava, statny.dozor@pdp.gov.sk, www.dataprotection.gov.sk, or with the authority of your country of residence.

Cookies are small files a website stores in your browser.

• Necessary cookies – keep your cart, sign-in, language and market choice, security and your cookie choice. We use them without consent because the e-shop cannot work without them.
• Analytics cookies (Google Analytics) – help us understand how the site is used. Only with your consent.
• Marketing cookies (Meta Pixel, Google Ads) – used to measure and target advertising. Only with your consent.

You give or refuse consent in the cookie bar on your first visit and can change it at any time through the “Cookie settings” link in the footer. You can also delete cookies in your browser settings.

We may update this policy; the current version is always published on this page. This policy is valid and effective from 5 October 2026.