Privacy Policy
Last updated: September 9, 2026
We take your privacy seriously. This document describes what data we process about you, why, for how long, and what rights you have. In effect from 2026-07-19.
1. Data controller
The data controller is Matěj Čičák, company registration number (IČO): 06740707, registered office at Borkovany 140, 691 75 Borkovany, Česká republika. Contact for all data protection matters: info@pixendo.cz or WhatsApp. The controller has not appointed a Data Protection Officer (DPO), as it is not legally required to do so.
2. What data we process
| Category | Specific data | Where we get it from |
|---|---|---|
| Identification and contact | email, name, delivery address, phone number | from you, when you register and order |
| Content you upload | photographs, generated designs, chosen style | from you, when you generate |
| Order and payment | order number, items, price, payment status, invoice | created when you buy |
| Technical and operational | IP address, device and browser type, error logs | automatically, as you use the website |
| Communication | the content of messages from the contact form and emails | from you |
We do not deliberately process special categories of data (so-called sensitive data). If you upload a photograph from which such data could be inferred, that happens at your own choosing and solely for the purpose of creating your design.
3. Why we process data, and on what legal basis
| Purpose | Legal basis | Note |
|---|---|---|
| Creating and managing an account | performance of a contract (Art. 6(1)(b) GDPR) | you cannot generate or order without an account |
| Generating designs from your photograph | performance of a contract | the photograph is processed only for as long as necessary |
| Fulfilling orders, production and delivery | performance of a contract | includes sharing data with the print partner |
| Invoicing and accounting | legal obligation (Art. 6(1)(c) GDPR) | tax documents |
| Operational emails about your order | performance of a contract | confirmation, dispatch, download link |
| Security, abuse prevention, debugging | legitimate interest (Art. 6(1)(f) GDPR) | logs, rate limits |
| Publishing a design in the example gallery | consent (Art. 6(1)(a) GDPR) | only if you expressly grant it, withdrawable at any time |
| Traffic analytics | consent | only runs once you accept it in the cookie banner |
4. How long we keep data
| Data | Retention period |
|---|---|
| Account and its content (designs, gallery) | for as long as the account exists; removed once the account is deleted |
| Photographs and designs without an order | automatically deleted 30 days after creation |
| Photographs and designs for ordered products | for as long as the account exists (needed for complaints and any reprints) |
| Orders and accounting documents | 10 years (statutory period for tax documents) |
| Complaint-related data | for the duration of handling it, plus the limitation period |
| Operational logs and error records | generally up to 90 days |
| Email communication | generally 2 years from the last message |
5. Who we share data with
We do not share personal data with third parties for their own marketing purposes, and we do not sell it. We only share it with processors without whom the service could not run, and always only to the extent necessary:
- hosting and database provider — running the website, storing accounts, orders and images,
- computing capacity provider for image generation — creating the design itself from your photograph,
- payment gateway — processing payment (card details never reach us),
- print partner and couriers — producing and delivering your parcel (name, address, contact details, print file),
- email service provider — sending operational emails,
- invoicing service — issuing tax documents,
- error and traffic monitoring tools — keeping the website running and stable.
Data may also be processed outside the European Economic Area (in particular in the USA), on the basis of the European Commission's standard contractual clauses or an adequacy decision. We only share data with public authorities where required by law.
6. Automated processing
Creating a design is done automatically using artificial intelligence models. This is not automated decision-making with legal effect within the meaning of Article 22 GDPR — we do not make automated decisions about your rights, nor do we carry out profiling. We do not train our own models on your photographs.
7. Your rights
Access
You have the right to know what data we process about you and to receive a copy of it.
Rectification
We will correct inaccurate data at your request; you can also update most of it directly in your account.
Erasure
You have the right to be forgotten. The exception is data we must keep by law (typically invoices).
Restriction of processing
You can ask us to only store your data temporarily and stop processing it further.
Portability
We will provide the data you gave us in a machine-readable format.
Objection and withdrawing consent
You can object to processing based on legitimate interest; any consent given can be withdrawn at any time.
You can exercise your rights by emailing info@pixendo.cz or WhatsApp. We will deal with your request without undue delay, and within one month at the latest. If you're not satisfied with how we've handled it, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
8. Security
Data is transmitted exclusively over an encrypted connection (HTTPS). Access to the database and stored files is limited to the people and services that need it, passwords are stored only as an irreversible hash, and image files are only accessible via temporary signed links. We continually review our security, though no measure can offer an absolute guarantee.
9. Cookies
The use of cookies and similar technologies is described in a separate Cookie Policy. We only run analytics once you've accepted it in the cookie banner.
10. Changes to this policy
We may update this policy, for example when we introduce a new feature or change a processor. The current version is always on this page; we will notify you of any material changes by email or a notice within the service.
Contact for the data controller: Matěj Čičák, company registration number (IČO): 06740707, registered office: Borkovany 140, 691 75 Borkovany, Česká republika, email: info@pixendo.cz or WhatsApp
Didn't find what you were looking for?
Write to us and we'll get back to you within two business days.
Send message