Your dataPrivacy Policy

Last updated 30 September 2026

This Privacy Policy explains how Vieira Branding ("Agency," "we," "us," or "our") collects, uses, stores, and protects your personal data when you visit the Adventza website, join our waitlist, or purchase the Adventza digital advent calendar (the "Platform" or "Services").

We are committed to protecting your privacy and processing your personal data strictly in accordance with the European Union General Data Protection Regulation (GDPR) and applicable Czech data protection laws.

1. DATA CONTROLLER

For the purposes of the GDPR, the Data Controller responsible for your personal data is:

Vieira Branding
Minoritská 10, 602 00 Brno
Czech Republic
IČO: 23473894
Email: info@vieirabranding.com

2. INFORMATION WE COLLECT

We may collect, use, and store the following types of personal data about you:

Identity & Contact Data: Name, email address, and any other contact details you provide when joining the waitlist, contacting customer support, or completing a purchase.
Financial & Transaction Data: Information relating to your purchase of the Adventza calendar. Note: All payments are processed securely by our third-party payment processor, Stripe. We do not collect, view, or store your full credit card numbers or bank account details on our servers.
Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and platform technology used to access the Adventza website.
Usage & Tracking Data: Information about how you use our website, pages viewed, time spent on pages, button clicks, and conversion metrics, collected via cookies and tracking pixels.

3. HOW WE COLLECT YOUR DATA

We collect data through the following methods:

Direct Interactions: When you enter your email on our waitlist (via double opt-in), fill out a form, or purchase the Adventza calendar.
Automated Technologies: As you interact with our website, we automatically collect Technical and Usage Data through the use of cookies, server logs, marketing pixels, and similar technologies.
Third Parties: We may receive technical and transactional data from our payment processor (Stripe) or analytics providers (such as Google Analytics).

4. PURPOSE AND LEGAL BASIS FOR PROCESSING

We will only use your personal data when the law allows us to. Below are the purposes and the corresponding legal basis under GDPR for which we process your data:

Purpose/Activity	Type of Data	Lawful Basis for Processing
To manage the waitlist and send marketing communications	Identity & Contact	Consent: You explicitly opted-in via double opt-in confirmation.
To process your purchase, deliver the Platform, and manage unlocks	Identity, Contact, Financial, Transaction	Performance of a Contract: Processing is necessary to deliver the purchased digital content to you.
To manage our relationship (notifying you of changes to Terms/Privacy, handling support queries)	Identity, Contact	Performance of a Contract / Legitimate Interest: Necessary to keep our records updated and service your account.
To administer, protect, and secure the Platform (troubleshooting, data analysis, system maintenance)	Identity, Contact, Technical	Legitimate Interest: Necessary for running our business, network security, and preventing fraud.
To deliver relevant website content, run paid advertising, and measure ad effectiveness	Identity, Contact, Technical, Usage	Consent / Legitimate Interest: Based on your acceptance of our cookie policy to optimize our marketing strategy.

Your personal data is strictly protected. We do not sell your data, nor do we export or share buyer lists with our participating Gift Partners.

We only share your personal data with trusted third parties who act as Data Processors to facilitate our Services:

Our Technical Developer: Engaged to build, host, and maintain the Adventza platform. They are contractually bound by strict confidentiality and GDPR compliance rules.
Payment Processors (Stripe): To securely process financial transactions.
Analytics and Marketing Partners (e.g., Google, Meta): To track website performance and ad conversions (subject to your cookie consent).
Hosting & Cloud Infrastructure (Vercel): To host and deliver the web platform efficiently and securely.
Database Infrastructure (Supabase): To store and manage application data securely.
Email Delivery Provider (Resend): To send transactional emails, waitlist confirmations, and service notifications.
Legal Authorities: If required by law, regulation, or legal process.

5.1. Data Processing in the United States

To operate our service, we may transfer, store, and process your personal data in countries outside of the European Economic Area (EEA), specifically in the United States. We rely on US-based third-party service providers to facilitate core functions of our platform, including Vercel (website hosting and infrastructure), Resend (email communications), and Stripe (payment processing).

Legal Safeguards for International Transfers. Whenever we transfer your personal data outside of the EEA, we ensure it is protected by implementing at least one of the following legally approved safeguards:

The EU-US Data Privacy Framework (DPF): We transfer personal data to US-based service providers that are officially certified under the DPF, which ensures they maintain data protection standards equivalent to those required in the European Union.
Standard Contractual Clauses (SCCs): Where a service provider is not certified under the DPF, or as a supplemental measure, we rely on the European Commission's approved Standard Contractual Clauses incorporated into our Data Processing Agreements (DPAs) with these providers. These legally binding contracts mandate strict privacy and security standards for your data.

6. DATA RETENTION

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Purchase Data: Retained for tax and accounting purposes as required by Czech law (up to 10 years).
Marketing Data: Retained until you withdraw your consent (unsubscribe) from our communications.
Platform Access Data: Retained to facilitate your read-only access to the Adventza platform through at least 31 March 2027, after which unnecessary access data will be purged.

7. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, web beacons, pixels, and other tracking technologies to distinguish you from other users, provide a better website experience, and analyze our marketing efforts.

Essential Cookies: Required for the operation of the website (e.g., secure login, checkout cart).
Analytics & Marketing Cookies: Used to track visitor behavior and ad performance (e.g., Google Analytics, Meta Pixel).

You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. Upon your first visit to the Adventza website, you will be presented with a Cookie Consent Banner allowing you to manage your preferences regarding non-essential tracking.

Under certain circumstances, you have rights under EU data protection laws in relation to your personal data:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of incomplete or inaccurate data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your data where there is no good reason for us continuing to process it.
Right to Object: Object to processing where we are relying on a legitimate interest or for direct marketing purposes.
Right to Restriction: Request the suspension of processing your data.
Right to Data Portability: Request the transfer of your data to you or a third party.
Right to Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your data (e.g., clicking "unsubscribe" in an email).

To exercise any of these rights, please contact us at info@vieirabranding.com. We aim to respond to all legitimate requests within one month.

9. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.