Privacy Policy

1. Introduction

At Sartorium, we take your privacy seriously. This Privacy Policy explains how DIRO s.r.o. ("we", "us", "our") collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (GDPR).

2. Data Controller

The Data Controller for your personal information is:

DIRO s.r.o.

Roháčova 145/14, Žižkov, 130 00 Prague 3, Czech Republic.

Email: hello@sartorium.net

3. What Data We Collect

During our pre-launch and registration phase, we collect the following information:

• —For Individuals: First Name and Email Address.
• —For Businesses: Company Name and Email Address.
• —Automatically Collected Data: We collect basic analytics data, such as IP addresses, browser types, and website interactions, to understand how visitors use our site.

4. How We Use Your Data

We use your data to:

• —Notify you about the official launch of Sartorium.
• —Send you relevant updates, newsletters, and marketing communications regarding classic menswear and our platform.
• —Analyze website traffic to improve our digital infrastructure and user experience.
• —Process future transactions and provide customer support.

5. Legal Basis for Processing

Under Article 6 of the GDPR, we process your personal data on the following legal bases:

• —Consent (Art. 6(1)(a)): for adding you to our waitlist and sending you launch notifications, newsletters, and marketing communications. You may withdraw your consent at any time.
• —Legitimate interest (Art. 6(1)(f)): for operating, securing, and improving our website and infrastructure, including basic technical logs and aggregate usage analysis.
• —Performance of a contract (Art. 6(1)(b)): for processing future transactions and providing the services you request once the platform launches.

6. Third-Party Services & Data Processors

To operate our platform efficiently, we share necessary data with trusted third-party service providers who comply with strict data protection standards:

• —Neon: We use Neon for our database infrastructure, where waitlist registrations and future account data are stored.
• —Brevo: We use Brevo, a European email and contact management provider, to send our emails (including launch notifications and newsletters) and to manage our waitlist contact lists.
• —PostHog: We use PostHog for product analytics to understand user behavior on our website.
• —Paddle: We use Paddle.com as our Merchant of Record. When you make a purchase in the future, Paddle will collect and process your payment and billing information securely.
• —OpenFreeMap: The interactive map on our website loads map tiles from OpenFreeMap. When the map is displayed, your IP address is transmitted to their servers as part of the standard tile request.
• —Vercel: Our website is hosted on Vercel, which processes technical request data (such as IP addresses and browser information) in order to serve the site.

7. Cookies

Our website currently uses only a strictly necessary functional cookie to remember your language preference; it does not require consent under the ePrivacy rules. We do not use advertising or cross-site tracking cookies. Should this change, we will update this policy and request your consent where required.

8. Data Retention

We will keep your personal data for as long as you are subscribed to our waitlist or are an active user of the platform. You can unsubscribe from our communications at any time by clicking the "unsubscribe" link in our emails, at which point your data will be securely deleted or anonymized.

9. Your GDPR Rights

Under the GDPR, you have the right to:

• —Access: Request a copy of the personal data we hold about you.
• —Rectification: Request correction of inaccurate or incomplete data.
• —Erasure (Right to be Forgotten): Request the deletion of your personal data.
• —Restriction: Request that we limit the processing of your data.
• —Data Portability: Receive your data in a structured, commonly used format.
• —Objection: Object at any time to the processing of your data based on our legitimate interests, and to direct marketing.
• —Withdrawal of Consent: Withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
• —Complaint: Lodge a complaint with a supervisory authority — in our case the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz) — or with the authority of your country of residence.

To exercise any of these rights, please contact us at hello@sartorium.net.

10. Changes to This Policy

We may update this Privacy Policy as we transition from a waitlist to a fully operational SaaS platform. We will notify you of any significant changes via email or by updating the date at the top of this document.