Privacy Notice
Version 1.0 · Effective 2 August 2026
Controller
The controller is Pražské minuty s.r.o., Belgická 275/24, 120 00 Prague 2, Company ID 01879791, VAT ID CZ01879791, email privacy@edenmoor.eu, telephone +420 777 886 021. The Edenmoor Case is its trading name.
Categories of data
We process account, booking, payment, service communication, support, marketing, cookie-choice, technical and security data, limited business-contact data, and anonymous feedback.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Account creation and authentication | Contract / pre-contract steps |
| Booking and game delivery | Performance of a contract |
| Payment, refunds, accounting | Contract and legal obligation |
| Support and complaints | Contract, legal obligation, or legitimate interests |
| Service emails | Contract, legal obligation, or legitimate interests |
| Marketing | Consent or lawful legitimate interests |
| Meta Pixel and Conversions API | Consent |
| Security and misuse prevention | Legitimate interests and, where applicable, legal obligation |
| Legal claims | Legitimate interests and legal obligation |
| Anonymous feedback | Legitimate interests |
Recipients
Recipients may include Supabase, Vercel, Brevo, Meta Platforms, FORPSI, the relevant seller's payment provider, the local franchise operator, public authorities, and professional advisers. A franchise operator receives only data needed for its particular game.
International transfers
The primary Supabase database is hosted in London, United Kingdom, covered by the European Commission's UK adequacy decision. For any transfers outside the EEA we rely on adequacy decisions, the EU-U.S. Data Privacy Framework where applicable, Standard Contractual Clauses, or other valid safeguards.
Retention
Retention targets are documented in the compliance pack retention matrix. An account may be deleted or anonymised after three years of inactivity following advance notice. Completed bookings are generally retained for three years; minimum tax records may be retained for up to ten years as required by Czech law.
Rights
You may request access, correction, deletion, restriction, portability, object, withdraw consent, and lodge a complaint. Send requests to privacy@edenmoor.eu. We ordinarily respond within one month.
Supervisory authority
Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.
Security
Controls include role-based access, named accounts, MFA for privileged users, secure password storage, encrypted transport, secure cookies, same-origin and CSRF controls, rate limiting, logging, separated environments, backups, and incident management.
Minors
Accounts and bookings on The Edenmoor Case are available only to persons aged 18 or over. We do not knowingly process personal data of persons under 18 through account or booking data.