1. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• Sensitive Personal Data: Personal data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
• Data Processing: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
• Data Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
• Data Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

2. Data Controller Information

3. What Personal Data We Collect

3.1 Personal Data Collected Voluntarily

• Contact Information: Such as your name, email address, telephone number, postal address, and other similar contact details, which you provide when making a purchase, creating an account, subscribing to our newsletter, or contacting our customer service.
• Payment Information: Such as your credit card number, debit card number, bank account details, or other payment method information, which is collected solely for the purpose of processing your payment for purchases.
• Order Information: Such as the products you purchase, order quantity, order date, delivery address, and order status, which is collected to process and fulfill your orders.
• Account Information: Such as your username, password (encrypted), and account preferences, which you create when registering an account with our shop.
• Sensitive Personal Data: If applicable, such as health information (if you purchase health-related products) or other sensitive personal data. We will only collect sensitive personal data with your explicit consent, and will take additional protective measures to ensure its security.

3.2 Personal Data Collected Automatically

• Device Information: Such as your device type, operating system, browser type and version, device ID, IP address, and other technical information about your device.
• Usage Data: Such as your browsing history on our online shop, the pages you visit, the products you view, the time and duration of your visits, the links you click, and other similar usage information. This data is collected to improve our shop’s functionality, user experience, and marketing efforts.
• Location Data: If you enable location services on your device, we may collect your approximate location to provide you with location-based services (such as local delivery options).

3.3 Personal Data Collected from Third Parties

• Payment Service Providers: Who may provide us with information about the success or failure of your payment transactions.
• Logistics and Delivery Partners: Who may provide us with information about the delivery status of your orders.
• Marketing Partners: Who may provide us with information about your interests and preferences (with your consent) to help us provide more relevant marketing content.

4. Purposes of Processing Your Personal Data

• Processing and Fulfilling Orders: To process your purchases, verify your payment, arrange for delivery, and inform you about the status of your orders.
• Managing Customer Accounts: To create and manage your account, allow you to access your account information, update your preferences, and provide you with personalized services.
• Providing Customer Support: To respond to your inquiries, complaints, and requests, resolve any issues you may encounter, and provide you with after-sales assistance.
• Marketing and Promotions: To send you information about our products, services, promotions, discounts, and other offers that may be of interest to you. We will only send you marketing communications if you have given your consent (where required by law), and you can unsubscribe at any time.
• Improving Our Shop and Services: To analyze user behavior, identify areas for improvement, optimize our online shop’s functionality and user experience, and develop new products and services that meet your needs.
• Ensuring Security and Preventing Fraud: To detect and prevent fraudulent activities, protect our shop, our customers, and our assets from security threats, and comply with our legal obligations.
• Complying with Legal and Regulatory Obligations: To comply with applicable laws, regulations, and legal processes, such as tax obligations, data protection laws, and consumer protection laws.
• Data Cross-Border Transmission: If applicable, to transfer your personal data to countries outside your country of residence (where our data processors or partners are located). We will ensure that all cross-border data transfers comply with GDPR requirements and take necessary safeguards.

5. How We Use Cookies and Similar Technologies

5.1 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the operation of our online shop. They enable you to navigate our shop, use its features (such as adding products to your cart), and process your orders. Without these cookies, our shop may not function properly.
• Analytics Cookies: These cookies help us analyze how users interact with our online shop, such as which pages are visited most frequently, how long users stay on each page, and where users come from. This information is used to improve our shop’s performance and user experience.
• Marketing Cookies: These cookies are used to track your browsing behavior and interests, so that we can send you personalized marketing communications and display relevant advertisements. We only use these cookies if you have given your consent.

5.2 Managing Cookies

6. Disclosure of Your Personal Data

• To Data Processors: We may disclose your personal data to trusted data processors who process personal data on our behalf (such as payment processors, logistics providers, and IT service providers). These data processors are bound by strict contractual obligations to process your personal data only in accordance with our instructions, and to implement appropriate security measures to protect your personal data.
• For Legal and Regulatory Purposes: We may disclose your personal data if required to do so by law, regulation, court order, or other legal process, or to respond to legitimate requests from public authorities (such as law enforcement agencies, tax authorities, or regulatory bodies).
• To Protect Rights and Interests: We may disclose your personal data if we reasonably believe that such disclosure is necessary to protect the rights, property, or safety of our shop, our customers, or other third parties, or to prevent or detect fraud, abuse, or illegal activities.
• In Connection with Business Transfers: If our shop undergoes a merger, acquisition, sale of assets, or other business transfer, your personal data may be transferred to the new owner or operator of the business, provided that they comply with the terms of this Privacy Policy and applicable data protection laws.

7. Security of Your Personal Data

• Technical Security Measures: Encryption of personal data (both in transit and at rest), secure server storage, firewalls, intrusion detection and prevention systems, and regular security updates and patches.
• Administrative Security Measures: Strict access control policies (limiting access to personal data only to authorized personnel who need it to perform their job functions), regular staff training on data protection and security, and regular audits of our data processing activities.
• Physical Security Measures: Secure storage of physical records containing personal data, access controls to our premises, and monitoring of physical access to sensitive areas.

8. Retention of Your Personal Data

• Order and payment information will be retained for the period necessary to process your order, resolve any disputes, and comply with tax and consumer protection laws.
• Account information will be retained for as long as your account is active, and for a reasonable period after account closure to comply with legal obligations and resolve any outstanding issues.
• Marketing data will be retained for as long as you have given your consent to receive marketing communications, or until you unsubscribe.

9. Your Data Subject Rights

• Right of Access: You have the right to request access to your personal data that we process, including information about the purposes of processing, the types of personal data processed, the recipients to whom your personal data has been disclosed, and the retention period for your personal data.
• Right to Rectification: You have the right to request that we rectify any inaccurate or incomplete personal data that we hold about you.
• Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data if it is no longer necessary for the purposes for which it was collected, if you withdraw your consent (and there is no other legal basis for processing), if you object to processing (and there are no overriding legitimate interests), or if your personal data has been processed unlawfully.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data if you contest the accuracy of your personal data, if processing is unlawful but you do not want it erased, if we no longer need the personal data but you need it for legal claims, or if you have objected to processing pending a decision on whether our legitimate interests override your interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller without hindrance from us, where processing is based on your consent or a contract.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on our legitimate interests (or those of a third party) if you believe that your fundamental rights and freedoms override our legitimate interests.
• Right to Withdraw Consent: If we process your personal data based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe that we have processed your personal data in violation of applicable data protection laws.

10. Changes to This Privacy Policy

11. Contact Us