Privacy

1. Controller

PRAHA BIZ CZ s.r.o., Reg. No. 23946181, Sokolská 1883/8, Nové Město, 120 00 Praha 2, Czech Republic — [email protected]

2. What we process

• The name and message on the candle — shown publicly on the wall. That is the point of the service.
• The intention (whichever reason you pick from the list, or your own words). Please do not enter the name of a living person together with anything about their health, or with a religious intention, unless they have asked you to — you cannot give that consent on someone else’s behalf. If you are unsure, use initials or a first name only.
• Your email — you give it to Stripe at checkout and Stripe passes it to us with the order. Stripe sends you the receipt with the permanent link to your candle; we keep the address so that we can reach you about that candle — a correction you asked for, a logo we had to take down, or a refund. We never send marketing and there is no newsletter.
• Technical data — your IP address, for rate limiting and preventing abuse. Two things we also store: the IP address and browser recorded at the moment you ticked the boxes before paying, and the IP address, browser and referring page recorded when a candle’s own page is opened. For a product that is never shipped and needs no account, that is our only evidence of what was agreed and that the candle was delivered — it is the answer to a bank asking whether a payment was genuine. How long we keep it is in section 5.
• Analytics — Google Analytics, which sets a cookie, and only if you accept it in the cookie bar. Declining costs you nothing on this site.

3. Legal basis

• Performance of a contract (Art. 6(1)(b)) — lighting and displaying your candle
• Legitimate interest (Art. 6(1)(f)) — security and preventing abuse
• Consent (Art. 6(1)(a)) — analytics, and only if you accepted it
• Legal obligation — accounting records

4. Who else sees it

Stripe (payments, as merchant of record), Hetzner (hosting, Germany — EU), Cloudflare (network and security), and Google (analytics, only with your consent). We do not sell your data. Ever.

5. How long we keep it

The candle is intended to be permanent — that is what you bought. Order records are kept as long as accounting law requires.

The technical evidence described in section 2 is deleted after 18 months. The IP address and browser stored with your consent are erased from the order, and the records of candle pages being opened are deleted outright. Eighteen months because card networks allow a payment to be disputed for roughly that long — after it, the data protects nobody and there is no reason to hold it.

If you ask us to erase your data, we will remove your candle. We cannot keep it published and erase it at the same time, and we will not pretend otherwise. We can do this while we run the wall; once it is sealed at a million candles and preserved in a public archive, we can no longer change what that archive holds, and a candle already in it stays — by lighting one you accept this.

6. A candle naming someone else

A candle carries a first name or a short name — “María”, “my grandmother” — and the date it was lit. No date of birth, no address, no identification number.

If you lit the candle and want it gone, write from the address your receipt was sent to and we remove it — no questions.

If someone else lit it and it truly names you or someone close to you, write to [email protected] with the link. A shared first name is not enough — a single “María” could be anyone — so we will ask you to show what genuinely connects you to that candle: something only the family would know, not a document. We then contact the person who lit it and decide based on their reply. If they cannot be reached, and the candle clearly exposes a real, identifiable person, we may still remove it. We never pass their details on to you, or yours to them.

7. Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time. Write to [email protected]. You may also complain to your data protection authority (in the Czech Republic: ÚOOÚ).