PRIVACY, DATA PROTECTION & COOKIE POLICY

Legal Entity: EAST BALANCE s.r.o. (DBA “SMALL BATCH TOOLS”)
Effective Date: 1 July 2020
Amended and Restated: 12 December 2025

1. Data Controller Identification

Data Controller: EAST BALANCE s.r.o.
Registered Address: Vladislavova 250, Pražské Předměstí, 397 01 Písek, Czech Republic
Company ID (IČO): 07642971
Registered with the Regional Court in České Budějovice, Section C, Insert 28198
Contact Email (privacy matters): info@smallbatchtools.com

EAST BALANCE s.r.o. (“we”, “us”, “our”) acts as the data controller pursuant to Regulation (EU) 2016/679 (GDPR) and applicable Czech legislation. “SMALL BATCH TOOLS” is a registered trade name and does not constitute a separate legal entity.

2. Principles of Data Processing

• Personal data is processed lawfully, fairly, and transparently.
• We do not sell, rent, or trade personal data.
• Data is shared only where required for contractual, legal, or operational purposes.
• Only GDPR-compliant processors are used.
• Data is retained only for as long as legally or operationally necessary.

3. Categories of Personal Data

• Identification and contact details
• Billing, invoicing, and payment data
• Order, shipping, and logistics information
• Customer communication and support records
• Website and technical data (IP address, device, cookies)
• CRM records (purchase history, internal notes)

We do not process special categories of personal data under Article 9 GDPR.

4. Purposes and Legal Bases

• Contract performance – order processing, delivery, invoicing (Art. 6(1)(b) GDPR)
• Legal obligations – accounting and tax compliance (Art. 6(1)(c) GDPR)
• Legitimate interest – customer support and service
• Consent – marketing communication and optional cookies (Art. 6(1)(a) GDPR)

Consent may be withdrawn at any time without affecting prior lawful processing.

5. Cookies and Tracking

• Essential cookies: required for website functionality and security
• Analytical cookies: used for traffic analysis and performance (with consent)
• Marketing cookies: used for campaigns and retargeting (with consent)

Cookie preferences can be managed via browser settings or cookie consent tools.

6. Third-Party Processors

Personal data may be shared with GDPR-compliant processors such as payment providers, logistics partners, CRM systems, hosting providers, and analytics services (where consent is given). Personal data is never sold.

7. International Data Transfers

Where data is transferred outside the EU/EEA, we rely on adequacy decisions, Standard Contractual Clauses (SCCs), and appropriate technical and organisational safeguards.

8. Data Retention

• Accounting and tax records: 10 years
• Contractual documentation: statutory duration
• Marketing data: until consent withdrawal
• Customer support records: up to 3 years
• Cookies: according to user preferences

9. Data Subject Rights

You have the right to request access, correction, deletion, restriction, portability, to object to processing, and to withdraw consent.

Requests may be sent to info@smallbatchtools.com. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ).

10. Children’s Data

Our services are not intended for individuals under the age of 16. We do not knowingly process children’s personal data.

11. Data Security

• Encrypted data transmission
• Secure hosting and access control
• Internal technical and organisational safeguards
• Regular security reviews

12. Changes to This Policy

This Policy may be amended to reflect legal or operational changes. The current version is always published on www.smallbatchtools.com.

13. Contact and Supervisory Authority

EAST BALANCE s.r.o.
Email: info@smallbatchtools.com

Supervisory Authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Czech Office for Personal Data Protection.