Privacy policy
Effective from [EFFECTIVE DATE]
Controller
The controller of personal data is RJ Trading, s.r.o., [ADDRESS], company ID [IČO] (trading as PharmaLabs, “we”). Contact for privacy questions: [email protected].
What we process and why
| Data | Purpose | Legal basis | How long |
|---|---|---|---|
| e-mail, password (stored only in hashed form), name, company name | running your account and sign-in | performance of a contract (Art. 6(1)(b) GDPR) | while you have an account |
| time you accepted the terms and acknowledged this policy | proof that you did | legitimate interest (Art. 6(1)(f)) | while you have an account |
| formulas, notes, price requests, offers | preparing a price offer | contract and pre-contractual steps (Art. 6(1)(b)) | while you have an account |
| technical records (IP address, sign-in time, browser type) | security and abuse prevention | legitimate interest (Art. 6(1)(f)) | up to 90 days |
| analytics and marketing cookies on createyoursupplement.com | measuring visits and advertising | consent (Art. 6(1)(a)) | see the cookie policy |
If an offer leads to an order, data needed for the contract and accounting are kept as required by accounting law (10 years). This applies to the contract, not to your account in the service.
Who receives your data
We do not sell data. Only these processors, under contract with us, process it:
- Supabase Inc. – database and sign-in. Data is stored in the EU (Frankfurt, Germany).
- Cloudflare, Inc. – website delivery and protection against attacks.
- [E-MAIL PROVIDER, e.g. Resend] – sending e-mails (sign-up confirmation, password reset).
- Google Ireland Ltd. and Meta Platforms Ireland Ltd. – on the website only, and only if you consent to analytics or marketing cookies. They are not used in the application.
Some of them are US companies. Transfers are protected by the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
In production we work with your formula without your personal data. We do not send account data (e-mail, name, company) to our manufacturing system.
Your rights
You have the right to:
- know what data we hold about you and get a copy,
- correct inaccurate data (you can change your name and company yourself in your profile),
- erasure – you can delete your account yourself in your profile, which permanently deletes your profile, formulas and offers,
- restrict processing and object to processing based on legitimate interest,
- portability of data you gave us,
- withdraw cookie consent at any time (“Cookie settings” link in the website footer),
- lodge a complaint with the Slovak data protection authority (Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk) or the authority in your country.
Send requests to [email protected]. We reply within one month.
Security
Data is stored in the EU and transferred encrypted, and each customer sees only their own formulas. Only authorised staff who need it to prepare an offer have access.
Automated decisions
We do not use automated decision-making or profiling with legal effects.