Packeta Easy Shipping privacy policy

This policy explains how steezr s.r.o., Company ID 22354883, with its registered seat at K Rybníčkům 282/19, Strašnice, 100 00 Praha 10, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague under file no. C 415229 ('steezr' or 'we'), handles data in the Packeta Easy Shipping app for Shopify (the 'app').

The app connects a Shopify store to the store's own Packeta (Zásilkovna) account. The merchant uses it to send orders to Packeta as parcels, and the merchant's customers use it to choose a pickup point. The app is free. steezr builds and runs it; Zásilkovna s.r.o. does not operate it.

Our general Privacy Policy at steezr.com/privacy-policy covers the steezr.com website and our own contacts. The Data Processing Terms at steezr.com/dpa cover personal data we process on behalf of clients. This policy describes how both apply to the app. It does not change the Data Processing Terms, and if the two ever differ, the Data Processing Terms prevail.

For personal data of the merchant's customers (the order data described in Article 4), the merchant is the controller and steezr is the processor. That processing is governed by the Data Processing Terms at steezr.com/dpa, which apply automatically when the merchant installs the app. The app's features and the settings the merchant chooses in it are the merchant's instructions under those terms.

For personal data about the merchant itself, such as the reply-to email entered in the settings or messages sent to our support, steezr is the controller. We use it to run the app for that store and to answer support requests, and the Privacy Policy at steezr.com/privacy-policy applies to it.

Customers with a question about their order data should contact the store they bought from first. The store decides what happens with that data.

When a merchant installs and sets up the app, we store:

• the shop domain
• the Shopify access token (offline session) that lets the app read and update orders when nobody from the store is signed in
• the merchant's Packeta API key and API password; the password is stored encrypted with AES-256-GCM
• the app settings: the sender label, the mapping of the store's shipping methods to Packeta, the cash on delivery payment methods, the automatic sending and pickup point options, and the sender name, reply-to email and texts of reminder emails

The app also reads the store's shipping zones and rates, so the merchant can pick which of them are Packeta. We use this data only to run the app for that store.

The app reads order data from the Shopify Admin API when it needs them, for example when the merchant sends an order to Packeta. It reads:

• the order number
• the customer's name, email and phone number
• the shipping address
• the order total, the amount still unpaid, the payment method name and the shipping method
• the order note
• the weights of the ordered items

We don't copy these data into our database. The app sends them to Packeta through the merchant's own Packeta account so Packeta can create the parcel. Zásilkovna s.r.o. then handles them under the merchant's own contract with Packeta.

The app copies the order note into the parcel's note at Packeta. If the payment method is one the merchant marked as cash on delivery, the unpaid amount is sent to Packeta as the amount to collect.

The result is saved as metafields on the order in the merchant's Shopify store: the chosen pickup point, the Packeta packet ID and the barcode. The app also adds the tag packeta-no-point to orders still waiting for a pickup point, and packeta-send-failed when automatic sending fails, and removes them once they no longer apply. If the merchant turns it on, the app replaces the order's shipping address with the address of the chosen pickup point, keeping the customer's name and phone.

For each order, our database keeps only:

• the shop, the order ID and the packet ID and barcode while the order is being sent to Packeta, so the same order isn't sent twice; the record is deleted when the parcel is cancelled
• the shop and the order ID of orders whose customer received a reminder email, so the reminder isn't sent again

None of these records contain the customer's name, contact details or address.

Customers choose a pickup point on a page we host at packeta.steezr.com/vyber. The page embeds Packeta's pickup point widget from widget.packeta.com, which loads in the customer's browser. Packeta may receive technical data from the browser, such as the IP address, and handles them under its own terms.

The Thank you and Order status pages also list the pickup points nearest to the shipping address. The app finds them on our server from Packeta's public list of pickup points, using the postcode and town of the order; nothing is sent to a map or geocoding service for this.

The pickup point the customer chooses is saved to the order in the merchant's Shopify store.

If the merchant turns reminders on and a customer hasn't chosen a pickup point, the app can send the customer a reminder to the email address on the order. Reminders are off unless the merchant enables them.

We send reminders over SMTP from our server. The sender name and reply-to address are the ones the merchant set, so replies go straight to the merchant.

The merchant decides whether to send reminders and is responsible for having a legal basis to contact its customers this way.

The app runs on steezr cloud, our own Kubernetes infrastructure in the European Union, with data stored in a PostgreSQL database.

Application logs record the shop, the order ID and error codes. They don't contain customers' personal data.

Data travel over encrypted connections (TLS), the Packeta API password is encrypted at rest with AES-256-GCM, and only the people who run the app have access to the infrastructure. The measures under Article 6 of the Data Processing Terms apply as well.

Shopify and Packeta receive data through the merchant's own accounts with them. Under Article 7 of the Data Processing Terms they are the merchant's own providers, not steezr's sub-processors.

Any provider we use to run the app, such as for delivering reminder emails, acts as our sub-processor under the Data Processing Terms. We send the current list on request to support@steezr.com.

We don't sell data, share it for marketing or use it for any purpose other than running the app.

We don't store customer order data, so there is nothing of it to keep. The metafields on orders stay in the merchant's Shopify store until the merchant or Shopify deletes them.

The order records described in Article 4 stay until the parcel is cancelled or the store's data is deleted after uninstall.

When a merchant uninstalls the app, Shopify sends us the shop/redact request 48 hours later, and we then delete all of that store's data from our database: the access token, the Packeta credentials, the settings and the order records.

If any of these data are in a backup, they disappear within the regular backup rotation and no later than 90 days, as Article 12 of the Data Processing Terms sets out.

The app handles the privacy requests Shopify sends for the merchant. For a customers/data_request or customers/redact request, our database holds none of the customer's name, contact details or address, only the order references in Article 4. The order itself and its metafields live in the merchant's Shopify store.

If a customer writes to us directly, we forward the request to the merchant within 3 business days and help the merchant handle it, as Article 9 of the Data Processing Terms sets out.

Merchants can exercise their own rights under the GDPR (access, rectification, erasure, restriction, objection and portability) by writing to support@steezr.com. Anyone may also complain to the Czech Office for Personal Data Protection (uoou.gov.cz).

We may update this policy when the app or the law changes. The current version is always on this page with its effective date. If a change affects how the app processes customer data, we let merchants who have the app installed know in advance.

Questions about this policy or the app go to support@steezr.com.

This policy is published in Czech and English. If they differ, the Czech version prevails.