Legal
Privacy policy
Short version: we collect what we need to ship your parcel and understand how the shop is used, we keep it in the EU, we don't sell it, and you can ask us to delete it at any time.
Controller
Teamday s.r.o., Bratislava, Slovakia, is the controller of your personal data under the General Data Protection Regulation (GDPR) and Slovak Act 18/2018 Coll. Contact for privacy matters: shop@teamday.ai.
What we collect and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, delivery address, email, phone, order contents | Fulfilling your order, delivery, customer service, warranty claims | Contract (Art. 6(1)(b)) | 10 years (accounting law) |
| Payment confirmation (never full card numbers — those stay with Stripe) | Processing payment, fraud prevention | Contract; legitimate interest | 10 years |
| Email address (newsletter) | Sending occasional news and offers | Consent (Art. 6(1)(a)) — withdraw anytime via the unsubscribe link | Until you unsubscribe |
| Usage data (pages viewed, products viewed, cart events, approximate country, browser type) | Understanding how the shop is used and improving it | Legitimate interest (Art. 6(1)(f)) | 13 months |
| Correspondence | Answering your questions and complaints | Contract; legal obligation | 3 years |
Who receives your data
- Carriers — Packeta (Zásielkovňa) and GLS receive your name, address, phone and email to deliver the parcel and send tracking updates.
- Stripe Payments Europe processes card, Apple Pay, Google Pay and PayPal payments.
- Resend sends transactional emails (order confirmation, shipping notice) on our behalf.
- cheese (cheese.teamday.cc) is our own first-party analytics service, hosted in the EU. It is operated by us — no data is shared with advertising networks or data brokers.
- Our accountant and, if legally required, public authorities.
All processors are bound by GDPR-compliant data-processing agreements. Where a processor stores data outside the EEA (Stripe may, for fraud checks), transfers are covered by Standard Contractual Clauses or an adequacy decision.
Cookies
We use only first-party cookies and browser storage. We do not use advertising cookies or third-party tracking pixels.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
_ch_anon | Analytics (first-party) | Random anonymous identifier so cheese can tell visits apart and count returning visitors. Contains no personal data by itself. | 13 months |
_ch_user | Analytics (first-party) | Set only after you place an order or subscribe, so we can link your browsing journey to your order for our own statistics. | 13 months |
shop.cart.v1 (localStorage) | Strictly necessary | Remembers the contents of your cart between visits. | Until cleared |
shop.wishlist.v1, shop.cookie-notice.v1 (localStorage) | Functional | Remembers products you saved and that you dismissed the cookie notice. | Until cleared |
admin_session | Strictly necessary | Only set for our staff signed into the admin area. | Session |
Because our analytics is first-party, hosted by us, and used only to measure and improve our own service, we rely on legitimate interest and do not show a consent banner for it; the small notice you saw is informational. You can block or delete cookies in your browser at any time — the shop keeps working, though your cart will not be remembered.
Your rights
You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to withdraw consent at any time. Email shop@teamday.ai and we will respond within one month. You may also lodge a complaint with the Slovak Office for Personal Data Protection (Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk) or the supervisory authority in your own country.
Security
The shop runs over HTTPS only. Payment data never touches our servers. Order data is stored in an EU-hosted database with access limited to the people who pack and ship your order.
Last updated: September 2026.