BUNDA / LEGAL
Privacy
Policy
This policy explains what data we process when operating the store, why we need it, and what rights you have.
Last updated: August 2, 2026
Introduction
BUNDA respects your privacy. We process personal data only to the extent necessary to operate the website, fulfil orders, provide customer support, comply with legal obligations, and pursue the other purposes described below.
Data controller
The controller of personal data processed in connection with the BUNDA brand and the bundawear.cz online store is Martin Máčalík:
- Operator
- Martin Máčalík
- Company ID
- 29727383
- Registered address
- Hlavní 44, 763 26 Pozlovice, Czech Republic
- contact@bundawear.cz
Data we process
Depending on how you use the website, we may process in particular:
- your first and last name, email address, telephone number, and delivery or billing details,
- the contents of your order, selected product variant, price, and payment and delivery status,
- messages sent to customer support and the history of related communications,
- an email address submitted for the newsletter, collection announcements, or an expression of interest in a product,
- technical and operational data required to secure the website, prevent misuse, and resolve errors,
- an affiliate campaign reference if you visit the website through a partner link.
Purposes and legal bases
Orders, payments, and delivery
We use data to enter into and perform the purchase contract, confirm payment, deliver goods, communicate about the order, and handle returns or complaints.
Legal obligations
We also retain and use transaction-related data where required by accounting, tax, consumer protection, or other laws.
Support, security, and protection of legal claims
On the basis of our legitimate interests, we protect the website against misuse, resolve technical problems, answer enquiries, and retain records required to establish, exercise, or defend legal claims.
Newsletter and expressions of interest
We send marketing communications and announcements on the basis of consent or another legal basis permitted by law. Consent may be withdrawn at any time. Records of product interest allow us to assess demand and, where appropriate, inform you about availability.
Affiliate referrals
If you arrive through a partner link, the referral information may be used to attribute the referral and evaluate the campaign. We keep the scope of this processing to the necessary minimum.
Payments
Card payments are processed by Stripe. You enter your payment card details directly in Stripe's secure payment interface; BUNDA neither receives nor stores the complete card number or security code. We receive only the information required to confirm and record the payment and order.
Recipients and service providers
To the extent necessary, we use vetted service providers, in particular:
- Stripe for payment processing,
- Supabase for database and storage services,
- Resend for transactional emails and customer communications,
- Endorsely for affiliate and referral tracking,
- hosting and technical infrastructure providers and the carrier selected for a particular order.
We may also disclose data to public authorities where required by law. Some providers may process data outside the European Economic Area; in that case, the transfer should be based on an appropriate legal mechanism and suitable safeguards.
Data retention
We retain data for as long as necessary for the relevant purpose and subsequently for the period required by applicable law or needed to protect legal claims. Data processed on the basis of marketing consent is retained until the consent is withdrawn or otherwise ceases to apply, unless further retention is required by law.
Your rights
Subject to the conditions set out in the GDPR, you have the right to request access to your data, its rectification or erasure, restriction of processing, to object to processing, and to receive data in a portable format where that right applies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before its withdrawal.
Send your request to contact@bundawear.cz. If we have reasonable doubts about the requester's identity, we may ask for proportionate verification. You also have the right to lodge a complaint with the Office for Personal Data Protection.
Security
We use appropriate technical and organisational measures reflecting the nature of the services and the data processed. No system can guarantee absolute security; when selecting measures, we therefore continuously consider available technologies, risks, and the scope of processing.
Changes to this policy
We may update this policy in response to changes in services, technologies, or legal requirements. The current version is always published on this page. We may highlight material changes in an appropriate manner.