Privacy Policy
Last updated: 31 October 2026
This policy explains how Centrum Print processes personal data when you visit the website, request a quote, place an order, make a payment, send artwork, or receive an order.
1. Controller and contact
The controller is Centrum tiskových služeb s.r.o., Company ID 199 83 557, Varšavská 715/36, Vinohrady, 120 00 Prague 2, Czech Republic. Contact: info@centrumprint.com, +420 774 673 784. See our legal information for company details.
2. Data we process
- identity, contact, billing and delivery details;
- quote, order, production, correspondence and payment information. We do not access or store full payment-card details;
- artwork, print files and notes that you choose to send us;
- technical and security information, including IP address, logs, cookie choices and information needed to protect forms from abuse.
2.1 Artwork supplied with an order
In the artwork step before payment, you can upload files for individual items, provide a download link for our print team, or choose to send artwork later by email. Uploaded files are stored outside public website folders. Access is restricted to your active upload session and authorized staff handling the order; files and download links are not published in order emails. We use artwork for file checks, preparation of a print proof and production. You approve the proof by email; uploading a file does not constitute approval to print. For external links, access permissions and data protection also depend on the settings of the provider you choose.
Automatic cleanup is scheduled after 48 hours for uploads not assigned to a created order. Files assigned to an order are subject to the job-handling retention described below. Send any password for an external link separately by email.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Quotes, orders, production, delivery and customer support | Performance of a contract or steps requested before a contract |
| Invoicing, accounting, tax and other statutory obligations | Legal obligation |
| Website security, abuse prevention and protection of legal claims | Legitimate interests |
| Analytics and marketing technologies | Consent through cookie settings |
Data needed to place an order are a contractual requirement. Without them, we cannot accept or deliver the order.
4. Recipients
We share data only where necessary with hosting and technical-support providers, email infrastructure providers, WooCommerce and related services, the payment provider, the selected delivery provider, accountants and legal advisers, and where required, production suppliers. After consent, cookie data may also be processed by Google Tag Manager, Google Analytics, Google Ads and Meta Pixel. We disclose data to public authorities only where legally required.
4.1 Google and Meta: analytics and advertising
Analytics and advertising services are optional. Without the relevant consent, we do not load their measurement tags, including Google’s measurement without cookies. Rejecting these services does not prevent ordering or payment.
Analytics – Google Analytics: after you allow Analytics, we use Google Ireland Limited’s service to measure visits and website use. It may process browser identifiers, IP addresses for technical processing, device details, page, time and event information. Advertising signals are disabled in this Analytics configuration. See Google’s Privacy Policy.
Marketing – Google Ads and Meta Pixel: after you allow Marketing, we use Google Ads (Google Ireland Limited) and Meta Pixel for Facebook and Instagram (Meta Platforms Ireland Limited). Google Tag Manager manages the existing Google advertising tags; PixelYourSite inserts Meta Pixel. The services may receive browser and device details, IP address, cookie identifiers, page, time, product views and permitted events such as adding to the basket or purchasing, including value and currency. These support advertising and conversion measurement and, where applicable, relevant advertising and advertising audiences. Meta may associate the information with your account and process it under its policies.
Google Ads Enhanced Conversions: if you allow Marketing when placing a new order, we may share a hash of your order email with Google (Google Ireland Limited) alongside the permitted purchase event. Before sharing, we standardise the email and hash it using SHA-256. Google can match it against signed-in users’ information to attribute the purchase to an ad more accurately. The hash is pseudonymised personal data, not anonymous data. We do not send a phone number, name or address through this feature. Contact information required to fulfil your order is processed separately from this optional advertising measurement. Without Marketing consent, after withdrawal or with an outdated choice, we do not prepare or send this data for Enhanced Conversions. See Google’s advertising technologies for how Google uses data.
For a new order eligible for this measurement, we keep minimal evidence of the Marketing choice observed at checkout: category and choice, policy and notice version, language and the time of the checkout check. This is not the time of the original consent click. We do not add an IP address, another visitor identifier or a copy of contact details to this record. It is retained with the order under the order-retention policy solely to demonstrate consent and protect legal claims; it is not an advertising profile. We do not reconstruct historical consent.
Meta Conversions API and automatic advanced matching of contact details in Meta Pixel are not enabled. Responsibilities for collecting and transmitting Meta event data are described in Meta’s Controller Addendum; further processing is explained in Meta’s Privacy Policy and Cookie Policy. Your consent is the legal basis for this optional measurement. You can reject or withdraw each category separately through .
5. International transfers
Some technology providers may process data outside the European Economic Area. Where that happens, we use an appropriate GDPR safeguard, such as an adequacy decision or Standard Contractual Clauses.
6. Retention
We retain orders, correspondence and accounting records for the period required by law or necessary to fulfil the job and protect legal claims. We process marketing data until consent is withdrawn. Short-lived security records are retained only as long as needed to protect the website.
Browser-cookie durations are listed in the Cookie Policy: consent choices and Analytics cookies up to 180 days, Google/Meta advertising cookies normally 90 days, and PixelYourSite attribution cookies normally 7 days. Withdrawal stops future optional measurement; provider-held event records follow the applicable service retention and deletion rules. You can request access or deletion through the contact below.
7. Cookies and choices
We use necessary technologies for the basket, payment, security and saving your choice. Analytics and marketing technologies are activated only after consent. You can change your choice at any time using or through the Cookie Policy.
8. Your rights
You may request access, rectification, erasure, restriction, objection, portability, or withdrawal of consent. Email info@centrumprint.com. You may also complain to the Czech Data Protection Authority.
9. Changes
We may update this policy when our services or legal requirements change. The current version is published on this website.