Legal
Privacy policy
What data we process, why, for how long and what your rights are. Processing is governed by Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. on personal data processing.
1. Controller
The controller is bobu originals, s.r.o., company ID 17746582, registered office Baška 608, 739 01 Baška, Czech Republic, which operates the Shift Studio brand. For personal data matters, contact us at the email in the website footer.
2. What data we process and why
Enquiries and communication: name, email, venue or company name, phone and the content of the message you send us by form, email, phone or social media. The purpose is handling the enquiry, preparing a quotation and performing the contract (Art. 6(1)(b) GDPR) and our legitimate interest in communicating with customers (Art. 6(1)(f) GDPR).
Invoicing: the customer’s identification and billing details are processed to perform the contract and to meet legal accounting and tax obligations (Art. 6(1)(c) GDPR).
Website visits: technical visit data (IP address, browser type, pages visited) is processed by the hosting provider to run and secure the website (legitimate interest). Traffic statistics are measured with Google Analytics, see Cookies.
3. Recipients and processors
Web3Forms – delivery of enquiry form messages to our email. Vercel Inc. – website hosting. Google Ireland Ltd. – Google Analytics (traffic measurement). Accountants, tax advisers and carriers to the extent necessary to perform the contract.
We do not pass personal data to other third parties and do not use it for marketing messages without your consent.
4. Retention
Enquiry data is kept while the enquiry is handled and then for up to 3 years in case of a follow-up order or a claim. Billing data is kept for the period required by accounting and tax law (generally 10 years).
5. Cookies and analytics
The website stores a technical cookie NEXT_LOCALE with the selected language. For traffic measurement we use Google Analytics 4, which stores analytics cookies (_ga, _ga_*) and processes anonymised visit data. You can block analytics cookies in your browser settings or with a tracking-blocking extension.
6. Your rights
You have the right of access to your personal data, to rectification or erasure, to restriction of processing, to data portability and to object to processing based on legitimate interest. Send requests to the contact email; we reply within one month.
If you believe we process data unlawfully, you may lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.
This policy is effective from 7 September 2026.