11.1 Controller: Epic production s.r.o., contact details in section 1.

11.2 What we process.

• From the Stripe checkout: your name, e-mail address, billing country or address, the amount, currency, date and status of the payment, and limited payment method details such as card brand and last four digits. We do not receive your full card number.
• Messages you send us, for example defect reports.
• On wizalnut.com: page views, meaning the page address, the referring page and a random session identifier kept in your browser's session storage for the visit, so that we can count visits.

11.3 Purposes and legal bases (GDPR Article 6(1)). Concluding and performing the contract, including delivery, support and defect claims: point (b). Accounting and tax records: point (c). Counting visits and defending legal claims: our legitimate interest, point (f).

11.4 Recipients. Stripe processes payment data as our payment service provider; for some purposes, such as fraud prevention and its own legal obligations, Stripe acts as an independent controller under its privacy policy at stripe.com/privacy. Our IT providers (website hosting, e-mail) process data on our behalf. Our accountant and public authorities receive data where the law requires it. Where data is transferred outside the European Economic Area, for example by Stripe, the transfer relies on safeguards under Chapter V GDPR.

11.5 Retention. Accounting documents for 10 years after the end of the year they relate to. Other order data until claims from the contract are time-barred. Page view records for as long as we need them for visit statistics.

11.6 Your rights. You may request access, rectification, erasure, restriction of processing and data portability, and you may object to processing based on our legitimate interest. Write to hazelnut@epicproduction.sk. You may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR) or with the data protection authority in your country. We do not make automated decisions about you, and we do not send you marketing e-mails without your consent.