1. General Provisions
This Data Protection Policy sets out how personal data is processed when using the online store.
Personal data is processed in accordance with the General Data Protection Regulation (GDPR) of the European Union and other applicable legal acts.
By using the website, you confirm that you have read this policy.
2. What Data We Collect
We may collect the following personal data:
- full name
- shipping and billing address
- email address
- phone number
- order and purchase information
- payment data (processed through secure payment service providers)
- IP address
- device and browser information
- cookie data
3. Purpose of Data Processing
Personal data is processed in order to:
- fulfil orders
- organise delivery
- administer payments
- provide customer support
- comply with legal obligations
- prevent fraud
- improve website functionality and user experience
- carry out marketing activities (only with consent)
4. Legal Basis for Data Processing
Data is processed on the basis of:
- performance of a contract (order fulfilment)
- legal obligation
- legitimate interest (website security, fraud prevention)
- user consent (marketing, cookies)
5. Data Sharing with Third Parties
Data may be shared with:
- payment service providers
- delivery service providers
- IT and hosting service providers
- accounting or legal service providers
Data may be processed within the European Union. If data is transferred outside the EU, appropriate safeguards are ensured in accordance with GDPR requirements.
Personal data is not sold to third parties.
6. Cookies
The website uses cookies:
- essential for website operation
- analytics (e.g., Google Analytics)
- marketing (e.g., Meta Pixel)
Analytics and marketing cookies are used only with user consent.
Users may change their cookie settings at any time in their browser or through the cookie management tool on the website.
7. Marketing
If a user agrees to receive marketing communications, their email address may be used to send newsletters or offers.
Consent may be withdrawn at any time by clicking the unsubscribe link in the email or by contacting us via email.
8. Data Retention
Personal data is retained:
- for as long as necessary to fulfil the contract
- as required by law (e.g., accounting documents)
- until consent is withdrawn (in the case of marketing)
9. Data Security
Technical and organisational security measures are implemented to protect data against unauthorised access, loss, or disclosure.
10. Data Subject Rights
You have the right to:
- access information about the data being processed
- request correction of inaccurate data
- request deletion of data (“right to be forgotten”), where permitted by law
- restrict data processing
- object to processing based on legitimate interest
- withdraw consent
- lodge a complaint with the relevant supervisory authority in your country of residence
To exercise your rights or if you have questions regarding personal data processing, you may contact: [email protected]
Requests are reviewed and responses are provided within the time limits established by applicable law.
11. Policy Updates
This Data Protection Policy may be updated. The latest version is always published on the website.