This notice explains what happens to personal data when you use eulabelcompliance.com. It is written to be read, not to be survived. Where a term comes from the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), it has the meaning given there.
The data controller is Europe Services SE, Na Čečeličce 425/4, Smíchov, 150 00 Praha 5, Czech Republic, IČO 03571785. Contact: info@eulabelcompliance.com, +420 775 397 884.
We have not appointed a Data Protection Officer, because our processing does not meet the conditions in article 37 GDPR. Questions regarding data protection should be directed to the above address and will be answered by the company's statutory body.
Company name, VAT number, billing address, the name and business email address of the registrant, optionally a phone number, and the verification code we send to that address.
The product data you enter: manufacturer name and address, responsible person details, product identifiers, category, materials, warnings, countries of sale, and any artwork or images you upload. Most of this is company information rather than personal data, but a sole trader’s name and address are personal data and are treated as such.
Amount, currency, date, plan, invoice number, and a payment reference returned by Mollie. We never receive or store your card number.
Our web server records the request: IP address, date and time, page requested, referring page, browser and operating system string. These logs exist to maintain the service and ensure security.
Your message and the originating address, plus any attachments, for as long as the matter remains open and for the period specified in section 5.
| Purpose | Data | Legal basis |
|---|---|---|
| Creating and managing your account, generating labels, serving the record page | Account and product data | Performance of a contract, art. 6(1)(b) |
| Verifying that the registration email is valid | Email, verification code | Performance of a contract, art. 6(1)(b) |
| Invoicing, accounting, tax and VAT records | Billing and payment data | Legal obligation, art. 6(1)(c) |
| Renewal reminders and service notifications regarding your account | Email, plan, dates | Performance of a contract, art. 6(1)(b) |
| Responding to your inquiries via email, phone, or video call | Correspondence | Legitimate interests, art. 6(1)(f) — responding to the individual who contacted us |
| Maintaining service security, preventing abuse and fraud, server logs | Technical data, IP address | Legitimate interests, art. 6(1)(f) — ensuring service security |
| Establishing or defending legal claims | Relevant data pertaining to the claim | Legitimate interests, art. 6(1)(f) |
We do not profile you, do not make automated decisions with legal effect, and do not sell or rent your data. We do not send marketing communications to individuals who have not requested them.
The purpose of the service is that a label code resolves to a page accessible by anyone. That page displays only the information required on the label itself: manufacturer name and address, responsible person, product identifier, warnings, and the last update date. It does not display your account email, phone number, VAT number, payment history, or internal notes.
If you are a sole trader, your personal name and business address constitute the manufacturer details and will be publicly accessible — this is mandated by labelling regulations, and is the reason we ask you to confirm this during onboarding. Public record pages are indexable by search engines.
| Data | Retention period |
|---|---|
| Account and product records, active subscription | Throughout the subscription duration |
| Account and product records after cancellation | 30 days, then deleted |
| Invoices, receipts, and accounting records | 10 years, as required by Czech accounting and VAT legislation |
| Trial accounts that do not convert to paid subscriptions | 30 days after trial ends |
| Email correspondence | 24 months from the last message |
| Web server logs | 12 months |
| Data relevant to an ongoing or foreseeable legal claim | Until the claim and any appeal period conclude |
We engage a limited number of processors, each bound by a written agreement in accordance with article 28 GDPR:
Beyond processors, data is disclosed solely to our accountant and auditors under professional secrecy, and to public authorities or courts where legally required. We will inform you of such requests unless prohibited by law.
Our processing and storage occur within the European Economic Area. When you order a Canadian or UK pack, the necessary product data is shared with our group company in that country; for Canada, this transfer relies on the European Commission’s adequacy decision for Canadian commercial entities, and for the United Kingdom, on the adequacy decision for the UK. When a provider’s support organization accesses data outside the EEA, the transfer is governed by the European Commission’s standard contractual clauses supplemented by the provider’s additional measures. You may request a copy of the applicable clauses.
Traffic is secured via TLS with certificates renewed automatically. Passwords are stored hashed, never in plain text. Administrative access is restricted to designated accounts, secured by authenticated sessions, on a server protected by a firewall. Backups are performed daily and stored encrypted. Multiple failed login attempts lock the account. We regularly review access permissions and update server software.
No system is invulnerable. If a breach is likely to pose a risk to your rights, we will notify the Czech supervisory authority within 72 hours as mandated by article 33, and will inform you directly when required by article 34.
Under articles 15 to 22 GDPR, you may request: access to your data and a copy; correction of inaccuracies; erasure, where no overriding legal obligation exists; restriction of processing; data portability in a machine-readable format; and objection to processing based on our legitimate interests. If we rely on your consent, you may withdraw it at any time without affecting prior processing.
Contact us at info@eulabelcompliance.com. We will respond within one month, and will inform you if a request requires the two-month extension permitted by article 12(3). Exercising these rights is free of charge; we only charge for manifestly unfounded or repetitive requests, and will inform you beforehand.
Note the limitation that the public record page cannot have manufacturer details erased while that record is associated with labels in circulation, as labelling regulations require those details to be publicly available. Cancelling the subscription will remove the page from public view.
The public pages do not set profiling, advertising, or analytics cookies, which is why no cookie consent banner is displayed. A technical cookie maintains your session after login; it is necessary for the account area to function and expires at session end.
If we later implement advertising measurement, a consent banner will appear before any such cookies are set. Declining will be as straightforward as accepting, and this section will be updated with the relevant cookie names and durations.
The service is intended for business use. We do not knowingly collect data from individuals under 18. If you believe we have received data about a child, contact us and we will delete it.
When this notice is updated, the new version will be published here with a new date and version number. If a change significantly affects how we process data about identified account holders, we will notify them via email prior to implementation.
Europe Services SE · Na Čečeličce 425/4, Smíchov, 150 00 Praha 5, Czech Republic · IČO 03571785
info@eulabelcompliance.com · +420 775 397 884
You also have the right to lodge a complaint with a supervisory authority in your country of residence or work, or where you believe an infringement occurred. Our supervisory authority is the Office for Personal Data Protection of the Czech Republic (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.cz. We prefer you contact us first.
EU Label Compliance