Personal data processing policy

This policy is drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and with Act No. 110/2019 Coll., on the processing of personal data. This document explains how we handle your data on mitilena-store.com.

1. Data controller

Mitilena s.r.o.
Company number: 11941596
Registered office: Revoluční 1083/10, Nové Město (Prague 1), 110 00 Prague
E-mail: support@mitilena.com

2. Principles of processing

The controller adheres to the principle of data minimization. We collect only the data without which your order cannot be delivered.

We categorically do not request and do not store:

  • Home address: If you choose delivery to a pickup point, we do not know your home address.
  • Cryptographic data: Private keys, seed phrases, passwords or wallet addresses. The zero knowledge architecture makes it technically impossible for us to gain access to this data.
  • Identity document data: We do not ask for identity cards, passports or national identification numbers.

3. Scope of the data processed

To handle and deliver an order we process:

  • First name and surname (for shipping).
  • Telephone number (for the delivery notification).
  • E-mail address (for the order confirmation).
  • The address of the chosen pickup point.

4. Purposes of processing

  • Conclusion and performance of the purchase contract (order handling, payment, delivery).
  • Communication with the customer regarding the status of the order.
  • Fulfilment of legal obligations (tax and accounting records in the Czech Republic).

5. Legal basis for processing

  • Performance of a contract (Article 6(1)(b) GDPR) – necessary for delivering the goods.
  • Compliance with a legal obligation (Article 6(1)(c) GDPR) – retention of invoices as required by law.
  • Legitimate interest (Article 6(1)(f) GDPR) – basic website analytics.

6. Data retention period

Personal data connected with a purchase is deleted automatically from the e-shop database (WooCommerce) after 14 calendar days from delivery of the order.

Data on accounting documents (invoices) is retained for the period laid down by law (usually 10 years), as required by the Czech tax authorities.

7. Transfer of data to third parties

We pass data only to the extent necessary, and only to these partners:

  • Delivery services (for example Zásilkovna, PPL): Name, telephone and e-mail for delivery purposes.
  • Payment providers: For secure processing of your payment.

The controller never sells your data to third parties for marketing purposes.

8. Data security

All communication with the website runs over the encrypted HTTPS (TLS) protocol. Access to the site administration is restricted and protected. Your data is safe with us throughout the short time we hold it.

9. Cookies and Google Analytics

We use Google Analytics on mitilena-store.com. It helps us understand how many people visit us and which products draw interest. Google Analytics processes pseudonymized data (device type and traffic source, for example).

An important note:

This analytics runs on the e-shop website only. It has no access whatsoever to:

  • Your private keys, seeds or passwords.
  • The contents of your Mitilena companion apps.
  • The data on your NFC carriers.

In line with the zero knowledge principle, our apps and offline tools contain no trackers and no analytics scripts.

10. Your rights

Under the GDPR you have the right of access to your data, to its rectification, to erasure (the right to be forgotten) and to restriction of processing. You also have the right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).

Since we delete data after just 14 days, your privacy is protected by the very design of our service. Send any questions to: support@mitilena.com.

11. Changes to this policy

The current version is always available on this page.