Effective from 5 September 2026.

This policy explains what personal data we collect when you visit www.daliborfarny.com, buy from us or write to us, why we collect it, who sees it and what your rights are. We keep it short and honest: we collect what we need to make and deliver your order and to run the website, and nothing more.

1. Who is responsible

The data controller is Glow tube research, s.r.o., Czech Republic, company ID (IČ) 29204551. Correspondence address: Březolupy 90, 687 13 Březolupy, Czech Republic. E-mail: contact@farny.cz. We have not appointed a data protection officer; for anything related to your data, write to the e-mail above.

2. What we collect and why

Orders. When you buy something we collect your name, billing and delivery address, e-mail address, phone number, company name and VAT number if you enter them, the products you ordered, the price, and the payment and delivery status. We use this to conclude and fulfil the contract, to issue the invoice, to deliver the goods, to handle returns and warranty claims, and to answer your questions about the order. Legal basis: performance of the contract, and our legal obligations under tax and accounting law.

Payment. Card and PayPal payments are processed by Stripe and PayPal. Your card number never reaches us; we only see whether the payment succeeded, the last digits of the card and the payment reference.

Customer account. You can order as a guest. If you create an account, we store your login details and your order history so you can see them later. Legal basis: performance of the contract.

Messages. When you use the contact form or write to us by e-mail, we keep your name, e-mail address and the message so we can reply and follow up. Legal basis: our legitimate interest in answering you, or the contract if the message concerns an order.

Newsletter. If you subscribe, we store your e-mail address, the date of subscription and, for statistics, whether our e-mails were opened. Legal basis: your consent, which you can withdraw at any time with the unsubscribe link in every e-mail or by writing to us.

Website use. Our server and security software record your IP address, browser type and the pages requested, for a short time, to keep the site running and to block attacks. We also use Google Analytics 4 to understand how visitors use the site and which products they look at or buy; the statistics are aggregated and we do not use them to identify you. Legal basis: our legitimate interest in a secure and working website; for analytics cookies, your consent (see section 6).

3. Who receives your data

We share personal data only with companies that help us run the shop, and only what each of them needs:

  • Payment providers: Stripe and PayPal.
  • Delivery: DHL Express, FedEx, USPS, DPD and other carriers receive your name, address, phone number and e-mail address for delivery and tracking notifications.
  • Fulfilment partners: orders for the USA, Australia and New Zealand, and China, Hong Kong and Taiwan are shipped by our local partners, who receive your name, delivery address, phone number, e-mail address and the ordered items.
  • Invoicing and accounting: Fakturoid (invoicing service) and our accountant.
  • E-mail and newsletter: Google (Gmail) for order and transactional e-mails and MailPoet for the newsletter.
  • Website hosting and security: Hostinger (hosting), Kadence Security (site protection), Akismet by Automattic (spam filtering of form submissions) and Google reCAPTCHA (contact form).
  • Analytics and embedded content: Google (Google Analytics, Google Fonts) and Vimeo (embedded videos).
  • Authorities when the law requires it, for example tax authorities or customs.

We never sell your data and we do not share it with anyone for their own marketing.

4. Transfers outside the European Union

Some of these companies are based outside the EU, mainly in the USA (Google, Stripe, PayPal, Automattic, our US fulfilment partner) and, for orders delivered there, in Australia and China. We transfer only the data needed for the service and rely on the safeguards the GDPR requires, such as the EU standard contractual clauses or, for US providers certified under it, the EU-US Data Privacy Framework.

5. How long we keep your data

  • Order, invoice and warranty records: 10 years from the end of the year of purchase, as required by Czech tax and accounting law and to cover our 10-year guarantee.
  • Customer account: until you delete it or ask us to.
  • Newsletter: until you unsubscribe.
  • Messages that are not connected to an order: up to 2 years after our last reply.
  • Server and security logs: a few weeks. Google Analytics data: at most 14 months.

6. Cookies

Cookies are small files stored in your browser. This site uses:

  • Necessary cookies that make the shop work: your cart, the checkout session, login to your account and protection against automated abuse. They do not need consent.
  • Analytics cookies from Google Analytics (names beginning with _ga), which tell us which pages are visited and how the shop is used.
  • Third-party cookies that are set only when you play an embedded Vimeo video.

You can delete or block cookies in your browser settings; blocking necessary cookies will stop the cart and checkout from working. You can also block Google Analytics with Google’s browser add-on.

7. Your rights

Under the GDPR you may ask us to:

  • tell you what data we hold about you and give you a copy (access);
  • correct data that is wrong (rectification);
  • delete your data where we no longer need it (erasure), for example your account or newsletter subscription; invoices must be kept for the legal period;
  • restrict the processing, or give you the data in a machine-readable form (portability);
  • stop processing based on our legitimate interest (objection), and withdraw a consent you gave at any time.

Write to contact@farny.cz and we will answer within one month. If you believe we handle your data unlawfully, you can complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz) or to the data protection authority in your own EU country.

8. Security

The website is served over an encrypted connection (HTTPS). Payment details are entered directly with Stripe or PayPal and never stored on our servers. Access to order data is limited to the people who need it to process your order.

9. Changes

We will update this policy when our tools or the law change. The date at the top tells you when it was last revised.