Information on personal data processing

In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”). Who processes your data? Controller: Center for the Development of Intimate Relationships s.r.o. Company ID (IČO): 23321342 Registered office: Na Folimance 2155/15, Vinohrady, 120 00 Praha 2, Czech Republic Registered in the Commercial Register maintained by the Municipal Court in Prague, section C, insert 425202. The company provides paid adult sexual-wellbeing education via mysteries.love (localized sections /ru, /en, /de). Which personal data are processed and for what purposes? Depending on how you use the platform, we may process: • Identification data: first name, surname, date of birth (where collected at signup or checkout) • Contact data: shipping address (boutique), email, phone • Account & learning data: course progress, consultation and live-session bookings, lesson notes and bookmarks • Payment metadata: order and transaction records (payments are processed by our payment provider) • Technical data: IP address, browser and device type, cookie identifiers, server logs Purposes: performing our contract with you, customer support, marketing (where consent or law allows), accounting and taxes, security and availability of the service. Are data transferred outside the EEA? Some infrastructure or vendors may process data in the EU/EEA and — for global CDNs or cloud services — outside the EEA. Where that happens we rely on EU Standard Contractual Clauses, adequacy decisions or other GDPR-approved safeguards. Legal bases for processing • Performance of a contract (courses, consultations, boutique fulfilment) • Legal obligation (tax, accounting, regulatory requests where applicable) • Legitimate interests (security, fraud prevention, service analytics — balanced against your rights) • Consent — where we explicitly ask for it (e.g. marketing emails, non-essential cookies) Cookies and logs • We use technical, functional and where applicable analytics cookies • Third-party marketing cookies are used only with your consent (banner / settings) • Server logs may record IP address, timestamps and user agent — for security, troubleshooting and statistics See our Cookie Policy on this site for details. Services involved in processing The list may evolve; key categories for the current mysteries.love stack: • Hosting & CDN — Vercel • Database — Neon (PostgreSQL) • Payments — Stripe • Transactional email — Resend • Video meetings — Zoom • Lesson streaming (when enabled) — Bunny.net Stream • Browser/PWA push notifications (when enabled) — Firebase (Google) Some historic purchases may have been handled via separate LMS platforms — check the documents supplied with that purchase. Retention We keep data only as long as needed for the purposes above (e.g. account and order history while your relationship with us exists and legal retention requires). Cookies follow the retention described in the Cookie Policy. Your rights You have the right to: • Obtain information about processing • Request rectification of inaccurate data • Request restriction of processing where GDPR allows • Object to processing based on legitimate interests • Request data portability where applicable • Withdraw consent where processing is consent-based • Request erasure (“right to be forgotten”) unless we must retain data by law • Lodge a complaint with a supervisory authority — in the Czech Republic: ÚOOÚ (www.uoou.cz), Pplk. Sochora 27, 170 00 Praha 7.