Privacy Policy
Last updated: 5 July 2026
This Privacy Policy explains how we collect, use and protect your personal data when you visit kunoda.net or contact us through this website. We are committed to processing your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Slovak law.
1. Who we are (Data Controller)
IBAN s. r. o.
Račianska 88 B, 831 02 Bratislava, Slovakia
Company ID (IČO): 52 904 890 · Tax ID (DIČ): 2121171591
VAT ID (IČ DPH): SK2121171591
Contact: [email protected]
“Kunoda” is a brand operated by IBAN s. r. o. (“we”, “us”, “our”).
2. What data we collect
We only collect the data you choose to give us and a minimum of technical data needed to run the website securely.
Information you provide
- When you request free sample pins or place an order: your name, email address, your store URL and any details you share about your products (and, for branded pins, brand assets such as a logo and colors).
- When you email us: your email address and the content of your message.
- If you purchase, payment is handled by our payment provider — we receive confirmation and billing details needed for invoicing, but we do not store your full card details.
Information collected automatically
- Standard server and security logs (e.g. IP address, browser type, time of request) processed by our hosting and security providers to deliver and protect the site.
We do not use advertising or analytics tracking cookies on this site.
3. Why we use your data and legal basis
- To respond to your audit request or enquiry and provide the information you asked for — legal basis: your consent and/or steps taken at your request prior to entering into a contract (Art. 6(1)(a) and 6(1)(b) GDPR).
- To operate and secure the website — legal basis: our legitimate interest in providing a safe, functioning service (Art. 6(1)(f) GDPR).
- To comply with legal obligations where applicable (Art. 6(1)(c) GDPR).
4. How long we keep it
We keep enquiry and audit-request data only as long as needed to handle your request and, if we begin working together, for the duration of our business relationship plus any period required by law (e.g. accounting and tax rules). If no relationship follows, we delete or anonymise enquiry data within a reasonable period. Server logs are retained only for a short period for security purposes.
5. Who we share it with
We do not sell your personal data. We share it only with service providers who help us run the website and communicate with you, acting as our processors under appropriate agreements:
- Hosting: Hetzner Online GmbH (servers located in the EU).
- Network & security / CDN: Cloudflare, Inc.
- Email: Google (Google Workspace) for receiving and replying to your messages.
- Payments: Stripe, to process payments and issue invoices for orders.
- Form processing: our contact-form provider, used solely to deliver your submission to us.
- Pinterest (optional): only if you add the publishing upgrade, we act on your account via official Pinterest Business Access, which you grant and can revoke at any time — we never receive your password.
Some providers may process data outside the EU. Where that happens, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased (“right to be forgotten”);
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting prior processing.
To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Slovak supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.
7. Cookies
This site does not use tracking or advertising cookies. Only strictly necessary technical mechanisms required to serve and secure the page may be used. Web fonts are loaded to display the site; no advertising profile is created.
8. Data security
The site is served over encrypted HTTPS connections and protected by industry-standard security measures. However, no method of transmission over the internet is fully secure, and we cannot guarantee absolute security.
9. Changes to this policy
We may update this Privacy Policy from time to time. The “last updated” date above reflects the latest version. Material changes will be posted on this page.
10. Contact
For any question about this policy or your data, contact us at [email protected].