Privacy policy
This page explains what personal data we collect when you use nackabatzi.com, why we collect it, and what rights you have under the GDPR.
Who is responsible
Nackabatzi, Vienna, Austria. Questions about your data go to contact@nackabatzi.com and we answer them ourselves.
What we collect
- Order data. Your name, email, delivery address and the 28 body measurements you send us. We need these to draft your pattern and build your suit. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
- Account data. If you create an account, your email and a securely hashed password.
- Patient Zero applications. Name, email, social handle, location and your message. Legal basis: your consent, Art. 6(1)(a) GDPR.
- Newsletter. Your email address, until you unsubscribe. Every email carries an unsubscribe link.
- Server logs. Our hosting provider records IP address, browser, page and time for security and troubleshooting. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.
Cookies
We use only the storage the site needs to work, such as keeping your saved suit configuration and your sign-in session in your own browser. We do not run advertising cookies, and we do not track you across other websites.
Who else sees your data
- Hosting: Vercel Inc.
- Database and sign-in: Supabase.
- Email delivery, for order confirmations and the newsletter.
- Manufacturing and shipping partners, who receive only what they need to make and deliver your suit.
Where a provider processes data outside the EU, the transfer is covered by the European Commission's standard contractual clauses.
How long we keep it
Order records are kept for seven years, as Austrian tax law requires. Account data stays until you delete your account. Newsletter and Patient Zero data stay until you withdraw consent.
Your rights
You can ask us for a copy of your data, correct it, delete it, restrict or object to its processing, or receive it in a portable format. Write to contact@nackabatzi.com and we will answer within one month. You can also complain to the Austrian Data Protection Authority, dsb.gv.at.
Changes to this policy
If we change how we handle your data, we update this page and the date at the top. Anyone on the newsletter gets told about material changes by email.