Privacy policy

For any questions regarding the protection and processing of your personal data, as well as to exercise your rights, you can contact us at any time. We will handle your request without undue delay.

The Controller processes the following categories of personal data:

• 1Record keeping, creation and processing of contracts and client data for the purpose of concluding purchase contracts
• 2Processing of accounting documents and documents related to business activities
• 3Compliance with legal regulations regarding document archiving (Slovak Act No. 431/2002 Z. z.)
• 4Order processing and goods delivery
• 5Communication regarding orders
• 6Handling complaints, contract withdrawals and the return of goods, including refunding payments to the bank account you provide.
• 7Newsletter and marketing activities: with consent, and for our own customers also offers of similar goods, post-purchase e-mails and a reminder about an unfinished shopping cart based on legitimate interest (you can opt out of them at any time). This also includes evaluating which e-mails interest you and tailoring our offers.
• 8Sending browser notifications about news and our shop's product range, and measuring which notification you clicked — only if you have allowed notifications in your browser. If you tick “Also notify in this browser” when watching a product, we store your browser's subscription identifier with that product watch so that the “back in stock” notification reaches only you.
• 9To improve our offering, we record which products you view in the lists on our website and which ones you click on, and, when we are testing two versions of a page, also which version you saw — if you place an order, we store that version with the order. We link these records only to a shortened pseudonymised identifier of your visit (not to your IP address) and to your account number if you are logged in; we do not create a new cookie for this. We delete individual records after 30 days and keep aggregated counts for no longer than 13 months.
• 10When you read articles on our blog, we record which article you read, for how long and how far, and which products or categories you clicked on from it. We link the record to a pseudonymised identifier of your visit and to a code, derived from your IP address, that changes every day — we do not store the IP address itself. We delete these records after 90 days. If you then place an order, we store with the order which article you read last, when, and how many articles you read during that visit; we keep this information together with the order.

We process personal data based on the following legal bases according to Article 6 of the GDPR:

Your personal data may be provided to the following categories of recipients:

We retain personal data only for the period necessary for the purposes of their processing:

• Order data: 10 years (legal obligation - accounting and tax regulations)
• Account data: for the duration of the account + 4 years after deletion
• Newsletter: until consent withdrawal
• Marketing data: maximum 10 years from last interaction
• Contract withdrawal and complaint submissions: 10 years from submission (legal obligation - the submission serves as proof that your withdrawal or complaint was received and handled, and any refund is subject to accounting and tax regulations)
• Security logs of access to the website (IP address, time, page visited and browser data; we process them to protect the website against attacks and fraud on the basis of legitimate interest): detailed logs for a maximum of 30 days, logs of blocked attacks for a maximum of 90 days; summary data on IP addresses that repeatedly return to the website or that we block, for as long as they are necessary to protect the website
• Browser notifications: subscription until consent withdrawal (turning off notifications in your browser). We delete the IP address and browser data recorded when you click a notification after 365 days; only a record of the click without them remains. We delete the subscription identifier that we stored for a product watch as soon as you cancel the watch, and at the latest the night after we send you the “back in stock” notification.

Under GDPR, you have the following rights regarding the processing of your personal data:

Tailoring offers in e-mails. To avoid sending you offers that do not interest you, we select products and campaigns based on what you have bought from us and what you have clicked on in our e-mails. For logged-in customers, we also take into account the products they have viewed in their account. Based on the same indicator of interest, we send some campaigns only to those who show interest in our e-mails. Some automated e-mails, for example those sent after a longer period without a purchase, may contain a discount coupon. We do not draw any conclusions from this that would produce legal effects concerning you. You can object to the tailoring of offers and to promotional e-mails at any time (Art. 21(2) GDPR), either by e-mail to the contact address given in Section X or via the unsubscribe link in the e-mail footer. We will then no longer send you promotional e-mails.

E-mail tracking. Our newsletter and automated e-mails contain a small tracking image and modified links. Thanks to them, we can see whether the e-mail was opened and which link you clicked. We store this data ourselves. We use it to evaluate which e-mails work, to tailor our offers and to send fewer e-mails to those who are not interested in them. When you visit our website after clicking a link, the tracking tools listed in the "Cookies and tracking" section will see that you came from our e-mail. If you do not want us to measure whether you open our e-mails, turn off automatic image loading in your e-mail program, or unsubscribe using the link in the e-mail footer.

We send browser notifications in bulk – every subscriber of the same shop in the same country to whom we send a notification receives the same one. We do not tailor them to what you have viewed, bought or clicked on the website. Whether you receive a notification may depend on when you last visited our shop. The exception is a notification you requested yourself when watching a product (the “Also notify in this browser” box) – it is sent only to you when the product is back in stock.

We have implemented appropriate technical and organizational measures to ensure the protection of your personal data:

• SSL/TLS encryption of the entire website (HTTPS)
• Secured database with restricted access
• Passwords stored in hashed form (bcrypt)
• Regular data backup

If you believe that the processing of your personal data is in violation of the law, you have the right to lodge a complaint with the supervisory authority:

This Privacy Policy is an integral part of the General Terms and Conditions and the Complaints Policy. The Controller reserves the right to change this policy.