Privacy notice
20. 10. 2026 · 2026-10-20.1
1. Controller and scope
Tornigolla s.r.o., company ID 17946352, Kosmákova 2827/42, Přerov I-Město, 750 02 Přerov, is the controller for https://www.tornigolla.cz/. Contact: info@tornigolla.cz. This notice covers our sales website, orders, support and chat demonstration, not every customer website where the purchased plugin is installed.
2. Data and purposes
We process order names, email and billing addresses, country and optional company details, product, price, status, bank payment reference, consent records and protected download usage. We use them for contracting, delivery, support, complaints and legal obligations. Bank statements may reveal payer details. We do not request card details; payment is by transfer. For enquiries we process contact details and message content. Do not send passwords, unnecessary third-party data or private user conversations. Necessary technical access is agreed separately. Security data include request/error logs, IP addresses or derived identifiers, timestamps, login events, tokens and rate counters.
3. Legal bases
Contract performance and requested pre-contract steps rely on GDPR Article 6(1)(b); mandatory records on Article 6(1)(c); proportionate security, abuse prevention and legal claims on Article 6(1)(f). We assess objections individually. Where consent applies, it can be withdrawn without affecting prior lawful processing. Required order data are not a marketing consent. Without necessary details we may be unable to fulfil the contract. Early digital delivery consent is separate from advertising consent.
4. Chat demonstration and accounts
The guest demo creates two temporary identities in an isolated space. It processes entered messages, images and access identifiers. Its token lasts about one hour; expired-space cleanup runs via WordPress scheduled tasks or a later demo start, not necessarily at the exact expiry time. Do not enter real personal, sensitive or confidential data. Security logs have their own retention purpose. Ordinary chat accounts, if used, include email, username, securely stored authentication data, selected public profile, messages and images. Public rooms/profiles are visible to authorised members. Private chats are not public rooms but are not end-to-end encrypted against infrastructure operators. Authorised technical access is limited to what is necessary. Optional unread-message emails can be disabled in the profile. Installing a purchased ZIP does not normally transmit customer-site chat history to us. Customer-site operators manage their own privacy obligations.
5. Recipients
Hosting and the info@tornigolla.cz mailbox are provided through Active24. Necessary recipients may also include authorised staff, technical administrators, accountants, professional advisers, the receiving bank and legally authorised authorities. Processors require appropriate contractual safeguards and security. We do not share customer correspondence with other customers for their marketing without a separate legal basis. We currently use neither Google Analytics nor Meta Pixel. Any future non-essential analytics/advertising requires updated information and applicable prior consent. Any transfer outside the EEA must have a lawful GDPR transfer mechanism; contact info@tornigolla.cz for the specific recipient and safeguards.
6. Retention
We retain order/support records while fulfilling obligations and as necessary for complaints and claims under applicable limitation periods. Mandatory accounting records follow the retention period for their record type. When the purpose ends, records must be deleted or truly anonymised, including where the plugin has no automatic retention control. Operational logs are retained proportionately for security; incident evidence may remain until resolution and related claims. Tokens/counters have technical expiry. Ordinary chat retention is managed by the operator; guest cleanup is described above. Backup copies rotate securely and are not necessarily overwritten immediately after deletion.
7. Cookies and browser storage
Technical cookies and similar storage support login, form security and interface preferences. Sound/notification preferences may use local storage. Blocking necessary storage can prevent login or checkout. We currently do not deploy Google Analytics or Meta Pixel. If non-essential tracking is introduced, its purpose, lifetime, providers and consent controls must be disclosed before activation. Browser/cookie settings allow relevant choices to be changed.
8. Your rights
Subject to GDPR conditions, you may request access, correction, erasure, restriction and portability, object to legitimate-interest processing and withdraw consent. Erasure is not absolute where a legal duty or claim still requires retention. We may proportionately verify identity. We respond without undue delay, normally within one month; any lawful extension is explained. Complain to the Czech supervisory authority https://uoou.gov.cz or the competent authority where you habitually live or work. Contact: info@tornigolla.cz.
9. Service key and domain registration
Pro activation requires key verification and domain registration. The key, hostname and plugin version are sent over HTTPS during activation and about daily. No messages, photos, passwords or visitor data are sent. Disconnecting returns the plugin to Free features and stops reports. A connection failure preserves activation already verified on this domain. Support expiry does not deactivate Pro. Updates remain manual ZIP updates.