Legal
Privacy policy
Short version: we store the place, date and text you enter because they are the product; we pass them to the print partner that makes your print; we keep the data in the EU, we do not sell it, and you can ask us to delete it at any time.
Controller
Teamday s.r.o., Bratislava, Slovakia, is the controller of your personal data under the General Data Protection Regulation (GDPR) and Slovak Act 18/2018 Coll. Contact for privacy matters: shop@teamday.ai.
What we collect and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, delivery address, email, phone, order contents | Fulfilling your order, delivery, customer service, warranty claims | Contract (Art. 6(1)(b)) | 10 years (accounting law) |
| Payment confirmation (never full card numbers — those stay with Stripe) | Processing payment, fraud prevention | Contract; legitimate interest | 10 years |
| Email address (newsletter) | Sending occasional news and offers | Consent (Art. 6(1)(a)) — withdraw anytime via the unsubscribe link | Until you unsubscribe |
| Usage data (pages viewed, products viewed, cart events, approximate country, browser type) | Understanding how the shop is used and improving it | Legitimate interest (Art. 6(1)(f)) | 13 months |
| Correspondence | Answering your questions and complaints | Contract; legal obligation | 3 years |
Who receives your data
- Carriers — our print partners Gelato and Printful and their carriers (DHL, DPD, PostNL, InPost) receive your name, address, phone and email to deliver the parcel and send tracking updates.
- Stripe Payments Europe processes card, Apple Pay, Google Pay and PayPal payments.
- Resend sends transactional emails (order confirmation, shipping notice) on our behalf.
- cheese (cheese.teamday.cc) is our own first-party analytics service, hosted in the EU. It is operated by us — no data is shared with advertising networks or data brokers.
- Our accountant and, if legally required, public authorities.
All processors are bound by GDPR-compliant data-processing agreements. Where a processor stores data outside the EEA (Stripe may, for fraud checks), transfers are covered by Standard Contractual Clauses or an adequacy decision.
Cookies
We use only first-party cookies and browser storage. We do not use advertising cookies or third-party tracking pixels.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
_ch_anon | Analytics (first-party) | Random anonymous identifier so cheese can tell visits apart and count returning visitors. Contains no personal data by itself. | 13 months |
_ch_user | Analytics (first-party) | Set only after you place an order or subscribe, so we can link your browsing journey to your order for our own statistics. | 13 months |
shop.cart.v1 (localStorage) | Strictly necessary | Remembers the contents of your cart between visits. | Until cleared |
shop.wishlist.v1, shop.cookie-notice.v1 (localStorage) | Functional | Remembers products you saved and that you dismissed the cookie notice. | Until cleared |
admin_session | Strictly necessary | Only set for our staff signed into the admin area. | Session |
Because our analytics is first-party, hosted by us, and used only to measure and improve our own service, we rely on legitimate interest and do not show a consent banner for it; the small notice you saw is informational. You can block or delete cookies in your browser at any time — the shop keeps working, though your cart will not be remembered.
Your rights
You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to withdraw consent at any time. Email shop@teamday.ai and we will respond within one month. You may also lodge a complaint with the Slovak Office for Personal Data Protection (Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk) or the supervisory authority in your own country.
Security
The shop runs over HTTPS only. Payment data never touches our servers. Order data is stored in an EU-hosted database with access limited to the people who pack and ship your order.
Personalisation data
The details you enter in the configurator — place names, coordinates, dates and times, names and free text — are the product itself. We store them with your order so that we can render, print, reprint and re-send it, and we keep them for as long as we keep the order (10 years, for tax law). Configurator inputs that you do not order are stored only in your browser and in anonymised analytics events (which style, which size, which country — never the names or text you typed). Place names you type are converted to coordinates using OpenStreetMap-based geocoding; the query contains the place name only, never your identity.
Print partners
To produce a physical print we transmit the finished print file, the product specification and your name and delivery address to the print partner producing it (Gelato ASA, Oslo, and its EU production partners; Printful Latvia SIA, Riga) and to their carriers. They act as our processors for the delivery and as independent controllers for their own legal obligations (customs, product safety). The producing partner is shown in your order status.
Instant PDF
Download links for the PDF are personal, unlisted URLs; anyone with the link can download the file, so do not share it publicly. Downloads are logged (time, IP address) for a maximum of 12 months, both to keep the link working and because, for VAT purposes, we must be able to show the country you bought from (billing country and IP address, as EU VAT rules for digital services require).
Last updated: September 2026.