Terms & Conditions and Privacy Policy – Miju Photography

Last updated: [DATE]
Effective from: [DATE]

TERMS & CONDITIONS

1. Introduction

These terms and conditions (“Terms”) govern the legal relationship between Miju Photography operator (“Seller”) and the customer who purchases products (“Customer”).

Website: www.mijuphotography.cz
Operator: [YOUR NAME]
Company Registration Number (IČO): [IČO]
Address: [ADDRESS IN CZECH REPUBLIC]
Contact: [EMAIL], [PHONE]

The operator is registered in the commercial register with [RELEVANT REGISTER].

2. Products and Services

The Seller offers through the website:

• Photographic prints (fine art photographic reproductions on paper)
• Digital products (PDF files, e-books, downloadable photographs)
• Other products [IF APPLICABLE]

Customers can order and pay for these products through:

• Stripe payment gateway (Stripe Payments Europe Limited)
• Stripe Payment Links (secure payment links)

All prices are stated in EUR and include VAT (21%).

3. Contract Formation

3.1 Ordering

A contract between the Seller and Customer is formed as follows:

1. Customer selects products and clicks the “Order” button
2. Customer fills in their details (name, email, address)
3. Customer confirms the order and proceeds to Stripe
4. Order is received and confirmed via email

The contract is concluded in Czech language.

3.2 Order Confirmation

The Seller sends order confirmation to the Customer’s email address within 24 hours. This confirmation contains:

• Order number
• List of ordered products
• Price and shipping method
• Expected delivery date

3.3 Right of Withdrawal

Customers have the right to withdraw from the contract within 14 days of receiving the product in accordance with Czech law § 1829 et seq.

Special provision: For digital products (PDFs, e-books for download), the right of withdrawal does not apply if the Customer explicitly agreed to download before the deadline.

4. Price and Payment

4.1 Price

• All prices are stated in EUR including VAT
• Prices may be changed at any time; the price at the time of ordering applies
• Shipping: [SHIPPING COSTS, OR FREE SHIPPING]

4.2 Payment Method

Customer pays through Stripe Payment Links:

• Card payment (Visa, Mastercard, Apple Pay, Google Pay)
• Secure SSL/TLS encryption
• Stripe is PCI DSS certified
• The Seller never sees the Customer’s card data

Payment is processed when the Customer clicks the “Pay” button on the Stripe page.

4.3 Invoice

The invoice is sent to the Customer’s email address:

• Immediately after payment is received
• In PDF format
• Contains VAT ([SELLER’S VAT ID])

5. Product Delivery

5.1 Photographic Prints

• Packing confirmation: within 5 business days of payment
• Carrier: [SELECTED CARRIER, E.G. BALIKOVNA, CESKA POSTA]
• Delivery time: [NUMBER OF DAYS]
• Tracking code: sent via email

Packaging: Photographic prints are packaged to be protected from damage during transport.

5.2 Digital Products

• Available immediately after payment
• Customer receives email with download link
• Link validity: [NUMBER OF DAYS]
• No returns or refunds possible

6. Claims and Warranty

6.1 Photographic Prints

Products are covered by a 2-year warranty in accordance with § 620 et seq. of Czech law.

A claim can be made in cases of:

• Physical damage during transport (dents, cracks, discoloration)
• Manufacturing defect
• Non-compliance with the description on the website

Procedure: Customer:

1. Sends photo of damage to [EMAIL]
2. States the order number
3. Describes the problem

Seller:

• Responds within 5 business days
• Offers replacement or refund

6.2 Digital Products

Warranty does not apply to digital products. After download, they are final.

Exception: if the product is defective or corrupted, the Customer may request a replacement within 7 days.

7. Personal Data and Privacy

Details about personal data processing are provided in the Privacy Policy (see below).

In brief:

• Email is collected through EcoMail for order and newsletter purposes
• IP address is recorded through Umami Analytics (anonymously)
• Data is not shared with third parties without consent

8. Liability and Disclaimers

8.1 The Seller is not responsible for:

• Errors in text, photos, or descriptions on the website
• Losses caused by website unavailability
• Errors in confirmation emails

8.2 The Seller is responsible for:

• Correctness of products according to the description on the website
• Security of the Customer’s personal data
• Compliance with delivery deadlines

9. Dispute Resolution

9.1 Amicable Approach

In case of dispute, the Seller and Customer attempt to resolve the issue in good faith through email or phone communication.

9.2 Jurisdiction

All disputes are subject to Czech law. Competent courts are those in [RELEVANT COURT IN LOCATION].

9.3 Out-of-Court Resolution

Customer or Seller may request resolution through:

Czech Office for Protection of Competition (ÚOHS)

• Website: www.uohs.cz
• Email: [UOHS CONTACT]

Or through the Consumer Association (relevant in the Seller’s location).

10. Communication

The Seller communicates with the Customer through:

• Email: [YOUR EMAIL]
• Website: www.mijuphotography.cz
• Social media: [IF APPLICABLE]

Customer agrees to communication via email.

11. General Provisions

11.1 Validity

These Terms are valid from the date stated above until they are changed.

11.2 Changes to Terms

The Seller reserves the right to change these Terms. Changes take effect from the date of publication on the website.

11.3 Severability

If any part of these Terms becomes invalid, the remaining Terms remain valid.

12. Contact

Miju Photography
Email: [EMAIL]
Phone: [PHONE]
Website: www.mijuphotography.cz

PRIVACY POLICY

1. Introduction

This Privacy Policy (“Policy”) describes how the Miju Photography website operator (“Controller” or “we”) collects, uses, protects, and processes personal data of visitors and customers.

Website: www.mijuphotography.cz
Controller: [YOUR NAME]
Company Registration Number (IČO): [IČO]
Address: [ADDRESS IN CZECH REPUBLIC]
Contact: [EMAIL]

Legal basis: This Policy is prepared in compliance with:

• GDPR (Regulation of the European Parliament and Council No. 2016/679)
• Czech Personal Data Protection Act No. 110/2019 Sb.

2. Types of Data We Collect

2.1 Data During Ordering

When Customer orders products, we collect:

• Name and surname
• Email address [processed through EcoMail]
• Postal address (street, number, city, postal code)
• Phone number [IF NECESSARY]
• Order history (what the Customer ordered and when)

Purpose: Order processing, invoicing, product delivery, customer communication.

Legal basis: § 6(1)(b) GDPR – Contractual processing (contract formation).

2.2 Payment Data

When Customer pays through Stripe:

• Stripe never sees full card details – Stripe is PCI DSS certified
• We only see: Payment confirmation, amount, transaction ID
• Stripe collects: Card details, IP address, device information (for security)

Purpose: Payment processing, fraud prevention, audit.

Legal basis: § 6(1)(b) GDPR – Contractual processing.

Third party: Stripe Payments Europe Limited (Privacy Policy: https://stripe.com/privacy)

2.3 Newsletter and Email Communication

When Customer subscribes to newsletter or provides email:

• Email address
• Name [IF PROVIDED]
• Email opening history (how often email was opened)

Processor: EcoMail s.r.o.

Purpose:

• Sending newsletters and updates
• Information about new products
• Promotional emails

Legal basis: § 6(1)(a) GDPR – Explicit consent (Customer explicitly agreed).

Third party: EcoMail s.r.o. (Privacy Policy: https://www.ecomail.cz/privacy)

Unsubscribe: Every email contains an “Unsubscribe from newsletter” link – unsubscribe is possible anytime.

2.4 Analytics Data (Umami Analytics)

When Customer visits the website, we collect:

• IP address (anonymized – last octet removed)
• Browser type and operating system
• Pages visited
• Visit time
• Device type (mobile, computer, tablet)

Tool: Umami Analytics (Umami Software, Inc.)

Purpose: Traffic analysis, website improvement, understanding user behavior.

Legal basis: § 6(1)(f) GDPR – Legitimate interest (service improvement).

Third party: Umami Analytics (Privacy Policy: https://umami.is/privacy)

Important: Umami Analytics is configured to:

• Not use cookies (no cookie banner if you don’t use cookies)
• Anonymize IP addresses (impossible to identify the Customer)
• Not use third parties for tracking

2.5 Cookies and Tracking

If you use a cookie banner:

The website uses the following cookies:

Cookie banner: The website displays a banner with options to “Accept All” or “Necessary Only”.

3. How Long We Keep Data

After the retention period expires, data is securely deleted or anonymized.

4. Your Rights

Under GDPR and Czech Personal Data Protection Act No. 110/2019 Sb., you have the following rights:

4.1 Right of Access

You have the right to request a copy of all personal data we hold about you.

Procedure: Send an email to [EMAIL] with text “I request access to my personal data”.

Response time: Controller responds within 30 days.

4.2 Right of Correction

You have the right to request correction of incorrect or incomplete data.

Procedure: Send an email describing the error.

4.3 Right to Erasure (“Right to be Forgotten”)

You have the right to request deletion of your data if:

• Data is no longer necessary
• You withdraw consent
• Data is processed unlawfully
• Another legal reason exists

Exception: Order and invoice data cannot be deleted due to legal obligations.

4.4 Right to Restrict Processing

You have the right to request that we don’t use your data while it’s being verified.

4.5 Right to Data Portability

You have the right to request your data in standard format (e.g., CSV) to transfer to another service.

4.6 Right to Object

You have the right to object to data processing for “legitimate interest” reason (e.g., Umami Analytics).

4.7 Right to Not Be Subject to Automated Decision-Making

We do not use automated decision-making or profiling.

How to exercise rights: Send an email to [EMAIL] with:

• Your name and contact
• Type of right you want to exercise
• Details

5. Data Security

The Controller commits to protect your data through:

• SSL/TLS encryption on all website pages (https://)
• Secure passwords for administration
• Access restrictions (only authorized staff have access)
• Secure backups
• Including Stripe – PCI DSS certified

In case of security incident, we are required to:

• Notify you without undue delay
• Inform data protection authorities
• Conduct investigation

6. Third Parties (Data Processors)

Your data may be shared with the following third parties:

All processors must comply with GDPR and sign Data Processing Agreements (DPA).

Data does not leave the EU without your consent.

7. Children

The website is not intended for children (persons under 18 years).

If we discover that data comes from a child, it will be deleted without undue delay.

8. Cookie Banner

The website displays a cookie banner with the following options:

• Necessary Only – only essential cookies (session, security)
• Accept All – all cookies including analytical
• Settings – detailed selection

Your choice is stored in cookies for 12 months.

9. Changes to This Policy

The Controller reserves the right to change this Policy. Changes are published on the website with the date marked.

Significant changes will be notified to you by email.

10. Contact and Complaints

10.1 Controller

If you have questions about this Policy, contact:

Miju Photography
Email: [EMAIL]
Website: www.mijuphotography.cz

We respond within 7 business days.

10.2 Data Protection Authority

If you are dissatisfied with our response, you have the right to file a complaint with the data protection authority:

Office for Personal Data Protection (ÚOOÚ)

• Prague 1
• 110 00 Prague
• Email: posta@uoou.cz
• Website: www.uoou.cz

11. Additional Information

11.1 Legal Basis for Processing

We process your data based on:

1. Contractual relationship (orders, payments)
2. Your explicit consent (newsletter, marketing)
3. Legitimate interest (security, analytics)
4. Legal obligation (tax records)

11.2 Automated Decision-Making

We do not use automated decision-making for:

• Approval or rejection of orders
• Price determination
• Profiling

11.3 International Data Transfer

Data is not transferred outside the EU without legal basis and without your consent.

These terms and policies are legally binding and are available on the website at all times.

Last updated: [DATE]