Privacy Policy

1. Data Controller

Brimecz Gabor (sole proprietor)
Email: info@gbriart.com

2. Data We Collect

• Order data: name, email, phone, shipping address.
• Payment data: we do not store card details - handled by Stripe.
• Cookie: session cookie (PHPSESSID) only.

3. Legal Basis

Order fulfillment: GDPR Art. 6(1)(b). Legitimate interests: GDPR Art. 6(1)(f).

4. Retention

Order data: minimum 5 years. Contact messages: 1 year.

5. Third Parties

• Stripe - payment processor (stripe.com/privacy)
• Hetzner Online GmbH - server provider (EU)

6. Your Rights

Access, rectification, erasure, portability, objection. Contact: info@gbriart.com