Privacy
Policy

1. Controller and contact details

The controller responsible for the processing described in this policy is:

2. Personal data we may process

Depending on how you interact with us, we may process:

• identity and contact details you choose to provide, such as your name, email address, telephone number, organisation and country;
• the content of enquiries and correspondence, including information about a requested piece, collection, sourcing assignment or restoration service;
• transaction and contractual information where discussions lead to a purchase or service, such as billing, delivery and payment-related records;
• technical request data processed when the website is delivered, which may include an IP address, browser and device information, date and time, and the requested page or resource.

Please do not send special-category or other highly sensitive personal data unless it is genuinely necessary and we have specifically requested it.

3. Purposes and legal bases

Enquiries and pre-contractual communication

We use contact details and correspondence to respond to enquiries, provide information, prepare proposals and take steps requested before entering into a contract. The legal basis is Article 6(1)(b) GDPR where the communication concerns a possible contract with you. For professional or general business enquiries, processing may be based on our legitimate interest in managing and responding to correspondence under Article 6(1)(f) GDPR.

Contracts and client service

Where you purchase an object or engage a service, we process the information necessary to administer the relationship, arrange delivery, communicate about the work and perform the contract under Article 6(1)(b) GDPR.

Legal and accounting obligations

We may retain and use transaction records where necessary to comply with tax, accounting or other applicable legal obligations. The legal basis is Article 6(1)(c) GDPR.

Website operation, security and legal claims

Limited technical and correspondence data may be processed to deliver and secure the website, prevent misuse, maintain records of business communications and establish, exercise or defend legal claims. The legal basis is our legitimate interest under Article 6(1)(f) GDPR, balanced against your rights and interests.

Consent

If we ask for consent for a specific purpose, processing for that purpose is based on Article 6(1)(a) GDPR. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

We do not use the website to make decisions about individuals based solely on automated processing.

4. Contact channels and external services

This website does not contain a contact form. If you contact us by email, telephone or WhatsApp, or through a marketplace, the information you provide is processed to handle your communication. The relevant communications or marketplace provider may also process data under its own privacy terms.

The website loads typefaces from Google Fonts. This requires a technical connection to Google-hosted resources and may disclose standard request information, such as an IP address and browser information, to that provider. The site does not use Google Analytics, Google Tag Manager or advertising services.

Links to 1stDibs, Pamono, Etsy, Instagram and WhatsApp lead to external services. Once you choose to follow a link, the destination service is responsible for its own processing and privacy information.

5. Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected. Enquiry correspondence is retained while we respond and for an appropriate follow-up period. Contract and transaction records are retained for the duration of the client relationship and afterwards for applicable statutory, accounting, tax and limitation periods. Data required for legal claims may be kept until the relevant claim can no longer be pursued. Where processing is based solely on consent, it ends when consent is withdrawn unless another legal basis applies.

Retention is reviewed by reference to the nature of the information, the relationship, legal requirements and the need to protect the rights of the parties.

6. Recipients and international transfers

Personal data may be accessible, only where necessary, to trusted providers supporting website hosting, email, communications, administration, delivery or professional advice, and to public authorities where disclosure is legally required. Providers acting on our behalf are expected to process data only on appropriate instructions and with suitable safeguards.

Some external communications, marketplace or technology services may process information outside the European Economic Area. Where DAVINT Design is responsible for such a transfer, it will use a lawful transfer mechanism and appropriate safeguards required by Chapter V GDPR, such as an adequacy decision or approved contractual safeguards, as applicable. You may contact us for information about safeguards relevant to your data.

7. Your rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

• access your personal data and obtain information about its processing;
• rectify inaccurate data and complete incomplete data;
• erase personal data where the legal conditions are met;
• restrict processing in the circumstances provided by law;
• object to processing based on legitimate interests, on grounds relating to your particular situation;
• receive personal data you provided in a structured, commonly used and machine-readable format and request its transmission to another controller where the right to data portability applies;
• withdraw consent at any time where consent is the legal basis.

To exercise a right, contact davintdesign@hotmail.com. We may need to verify your identity before responding.

8. Right to lodge a complaint

You have the right to lodge a complaint with a competent supervisory authority. In Czechia, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7. You may also contact the authority in the EU or EEA country of your habitual residence, place of work or place of the alleged infringement.

9. Security

We use appropriate technical and organisational measures proportionate to the nature of the information and the relevant risks. These measures are intended to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. No method of transmission or storage is completely secure, and measures are reviewed as circumstances and risks develop.

10. Changes to this policy

We may update this Privacy Policy to reflect changes in our services, processing practices or legal requirements. The current version will remain available on this page and the date above will indicate when it was last updated.

Questions about this policy may be sent to davintdesign@hotmail.com.