Privacy Policy
This policy covers the website brightcraftlab.com and communication with us. The processing of data in our apps is governed by the app privacy policy published by CARRABELA s.r.o.
We value the privacy of everyone who visits brightcraftlab.com or writes to us. This policy explains which personal data we process, why, for how long and what rights you have. It is based on Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Czech Act No. 110/2019 Coll., on the processing of personal data.
1. Data controller
The controller is CARRABELA s.r.o., Company ID 24216011, registered office at Magistrů 599/3, 140 00 Prague 4 – Michle, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 189476, which operates the BrightCraftLab brand (“we”). For matters concerning personal data, contact us at info (at) carrabela.com or in writing at our registered office.
2. What data we process and why
Communication and support. When you email us or use the form on the website, for example with a support request for one of our apps, we process your name, email address, the content of your message and any details you choose to share (such as the app name or your device). We use them to reply to you and resolve your request. The legal basis is the performance of a contract where you use our app, or taking steps at your request (Art. 6(1)(b) GDPR), and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
Suppliers and business partners. If you work with us as a supplier or business partner, we process identification and contact details of you or of your organisation’s contact persons to the extent necessary to perform the contract (Art. 6(1)(b) GDPR) and to comply with legal obligations, in particular accounting and tax obligations (Art. 6(1)(c) GDPR).
Website operation and security. The server hosting the website automatically records technical access data (IP address, date and time, requested page, browser type). This serves to keep the website secure and functional, based on our legitimate interest (Art. 6(1)(f) GDPR).
Fonts. The fonts are served directly from this website. No third-party font service is used and no data is passed on when the page loads.
3. How long we keep data
- Communication, including support requests, is kept for no longer than 3 years from the last message.
- Data from a relationship with a supplier or business partner is kept for the duration of the contract and then for the period required by law (in particular Czech Act No. 563/1991 Coll., on accounting) and for the limitation periods of any claims.
- Technical server logs are kept for no longer than 90 days, unless we need them longer to deal with a security incident.
4. Who we share data with
We do not sell your data. We may only make it available to carefully selected processors who help us run our business: our web hosting provider, email service provider, accounting or tax firm and IT service providers. All of them are bound by a contract to protect the data. We may also disclose data to public authorities where required by law. We transfer data outside the European Economic Area only where an adequate level of protection is ensured, for example by a European Commission decision or standard contractual clauses.
5. Cookies and tracking
The website does not use cookies or any analytics, marketing or advertising tools. Details are in our information on cookies and browser storage. We do not carry out automated decision-making or profiling.
6. Your rights
- the right of access to your data (Art. 15 GDPR),
- the right to rectification of inaccurate data (Art. 16 GDPR),
- the right to erasure (Art. 17 GDPR),
- the right to restriction of processing (Art. 18 GDPR),
- the right to data portability (Art. 20 GDPR),
- the right to object to processing based on legitimate interest (Art. 21 GDPR),
- the right to withdraw consent where processing is based on consent.
You can exercise your rights by email at info (at) carrabela.com. We will respond without undue delay and within one month at the latest. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 727/27, 170 00 Prague 7, www.uoou.gov.cz.
7. Security
We protect data with appropriate technical and organisational measures, in particular encrypted transmission (HTTPS), access control and regular system updates.
8. Changes to this policy
We may update this policy, for example when the law or our services change. The current version is always published on this page.