Privacy Policy
1. Who is responsible for your data?
The business owner identified in our Legal Notice is responsible for the processing of personal data described in this policy.
For privacy inquiries or to exercise your data protection rights, please use the contact details in the Legal Notice.
2. Website hosting and technical data
This website is hosted by Hostinger.
When you visit the website, technical information may be processed to deliver the website, maintain its security and investigate errors. This may include your IP address, browser and device information, requested pages and the date and time of access.
Processing necessary for website operation and security is based on our legitimate interests under Article 6(1)(f) GDPR. Service providers may process data on our behalf under data processing agreements.
3. Orders and payments
When you place an order, we process the information needed to enter into and fulfill the contract. This may include your name, billing and shipping addresses, contact details, ordered products and payment information.
We use this information to process orders, identify payments, arrange delivery, provide order updates and handle returns, refunds or statutory claims.
Contract-related processing is based on Article 6(1)(b) GDPR. Processing required for tax, accounting and other legal obligations is based on Article 6(1)(c) GDPR.
Bank transfers
If you pay by bank transfer, we process the payment details needed to identify and record your payment, such as the account holder’s name, payment reference, amount and transaction date.
Card payments, Apple Pay and Google Pay
Card payments and supported digital wallet payments are processed through WooPayments, a payment service provided by the Automattic group in partnership with Stripe.
Information necessary to process your payment may be shared with these providers and the banks or payment networks involved. This may include your name, contact and billing details, order amount, transaction identifiers, payment details and technical information such as your IP address and device information.
We do not store your full card number or card security code on our website server. We receive information needed to manage the transaction, such as payment status, transaction references and limited payment method details.
Payment-related processing is based on Article 6(1)(b) GDPR. Processing necessary to prevent fraud and maintain payment security is based on legitimate interests under Article 6(1)(f) GDPR. Payment providers may also process information as independent controllers to meet their legal obligations and for the purposes described in their privacy notices.
If you choose Apple Pay or Google Pay, the relevant wallet provider also processes information under its own privacy policy.
Further information:
4. Delivery
We provide DHL Express with the information necessary to deliver your order and provide shipment updates. Depending on the delivery requirements, this may include your name, shipping address and relevant contact details.
This processing is necessary to fulfill the purchase contract under Article 6(1)(b) GDPR.
5. Correspondence and customer inquiries
If you contact us, we process your contact details, message and any information necessary to respond.
Processing relating to an order or steps before entering into a contract is based on Article 6(1)(b) GDPR. Other correspondence is generally processed on the basis of our legitimate interest in responding to inquiries under Article 6(1)(f) GDPR.
Business email is provided through Hostinger. Website-generated messages are sent using the website’s email configuration, including WP Mail SMTP.
6. Withdrawal requests
If you submit a withdrawal, we process the information needed to identify the contract, record the request and handle the return and refund.
This may include your name, contact details, order identification, declaration and submission date and time.
Processing is based on Article 6(1)(b) and, where required to fulfill legal obligations, Article 6(1)(c) GDPR.
7. Cookies and consent
The website uses cookies or similar technologies where necessary for functions such as the shopping cart, checkout and the recording of consent preferences.
Access to or storage of information on your device that is strictly necessary for a service you request is based on Section 25(2) TDDDG. The associated processing of personal data is based on the applicable GDPR legal basis, particularly Article 6(1)(b) or Article 6(1)(f).
Technologies requiring consent are used only after consent has been given under Section 25(1) TDDDG and Article 6(1)(a) GDPR.
Complianz is used to manage consent preferences. Where optional technologies are enabled, you can change or withdraw your consent through the website’s consent settings.
8. Google Search Console and newsletters
We use Google Search Console through the Site Kit plugin to monitor our website’s visibility and technical performance in Google Search.
Search Console provides reports on search impressions, clicks, search queries and indexing. This connection does not install Google Analytics or add visitor-tracking cookies to our website.
We do not use Google Analytics and do not operate an email newsletter.
This policy will be updated when additional services involving personal data are introduced.
9. Recipients and international processing
Personal data may be shared with service providers where necessary for hosting, communications, payments, delivery and other services described in this policy, or where disclosure is required by law.
Where personal data is transferred outside the European Economic Area, the applicable requirements of Chapter V GDPR must be met, for example through an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
Further information about processing by payment providers, including international transfers, is available in the privacy notices linked in Section 3.
10. Retention
We retain personal data only for as long as necessary for the purpose for which it was collected, unless a longer period is required by law.
Order, invoice and business correspondence records are retained for the applicable statutory periods. Other inquiries are retained as necessary to resolve them and, where relevant, address legal claims.
11. Your rights
Subject to the applicable legal conditions, you have the right to:
- Access your personal data.
- Request correction of inaccurate data.
- Request erasure or restriction of processing.
- Receive applicable data in a portable format.
- Object to processing based on legitimate interests.
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Lodge a complaint with a data protection supervisory authority.
To exercise your rights, use the contact details in our Legal Notice.
12. Required information
Information identified as necessary during checkout is needed to process and fulfill your order. If it is not provided, we may be unable to complete the purchase or delivery.