How we handle your data

The controller of your personal data is Jetlio, s.r.o., Voroněžská 2547/1, 616 00 Brno, Company ID (IČO) 09967231, registered at the Regional Court in Brno under C 121887 – the operator of the Tiskárník platform. For anything concerning personal data, reach us at [email protected]. We have not appointed a data protection officer (the statutory conditions are not met); the agenda is handled by the managing director.

The print shop's role depends on who sells your order – your order always shows which case applies:

For orders where Tiskárník is the seller, the shop produces your order as our subcontractor and processes the order data on our behalf as a processor, under a data-processing agreement with us.

For orders where the print shop sells directly, it handles the order in its own name and is an independent controller of the order data (contact, files, delivery address where applicable) that we pass to it for production, handover and complaints.

Either way the shop receives only the data needed for your order, nothing more.

Guest orders. Contact name, e-mail and phone, a delivery address where applicable; your notes; and the print files themselves. Access to the order is protected by a random access key in the link; keep it safe, it works as the key to your order. Legal basis: performance of the contract; legal obligations for documents and complaints.

Print files can contain anything – including sensitive documents. We treat them accordingly: private EU storage, time-limited links, access restricted to fulfilling the order (the chosen shop and, where needed, its printer via our MagicPrint device). We never look into your files out of curiosity, never use them for anything but the order, and never train anything on them.

Payments and documents. For orders sold by Tiskárník we process incoming-payment data from bank statements (payer account, amount, variable symbol – to match your payment and handle refunds) and we issue the tax documents. We never see card data; counter card payments go through the shop's terminal. Legal basis: performance of the contract; accounting and tax obligations.

Print shop accounts. E-mail, name, phone, billing identity, bank account, the shop details the print shop itself publishes (contacts, addresses, price list); for platform-sales cooperation also settlement records and accepted agreements. Passwords are stored solely as secure hashes.

Reviews. A rating and text tied to a completed order, published under the name you choose. The review form is reachable only through the private order link – that is how we verify each review against a genuine purchase.

Technical data. Ordinary server logs (IP address, request time) necessary to run and secure the service. Legal basis: our legitimate interest in a secure service; retention short, in weeks.

Analytics only with your consent from the cookie bar (PostHog, EU servers) – details and revocation in the cookie policy.

We never sell personal data. No decision with legal effects on you is made purely automatically.

The print shop you choose – the order data (in the role explained above). Carriers – name, phone, e-mail and the destination when you choose delivery (Zásilkovna/Packeta and the carrier of your parcel). Infrastructure: Amazon Web Services (EU, Frankfurt – storage and servers), Cloudflare (website hosting and protection). Communication: Mailgun (EU – transactional e-mails), BulkGate (SMS where you give a phone number). Our bank – statements for payment matching on orders sold by Tiskárník.

Maps and address suggestions (OpenFreeMap, Photon by komoot) are loaded directly by your browser; browser geolocation, if you allow it, stays on your device.

Processing stays in the EU/EEA. Should any provider transfer data outside the EEA, it happens under the EU standard contractual clauses or an adequacy decision.

Print files: for the order and the complaint period, at most 26 months after the order closes; earlier deletion on request when no complaint is open. Tax documents and settlements: statutory periods (up to 10 years). Order contact data: up to the limitation period of contract claims. Logs: weeks. Analytics: per your consent.

Encrypted transport everywhere (HTTPS), private storage with signed, time-limited links, role-based access, encrypted secrets, EU data centres and tested backups. Shops reach orders only through authenticated accounts; print files never travel by e-mail.

If a security breach likely to risk your rights occurs, we notify the Office for Personal Data Protection within 72 hours and, where the risk to you is high, we tell you directly without undue delay.

You can at any time ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Consent (analytics) can be revoked as easily as it was given. Write to [email protected] – we answer within 30 days.

If you believe we process your data unlawfully, you can complain to the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz. We will be glad if you try us first.