Privacy Policy

We collect the minimum amount of personal data necessary to process orders and support customers:

• Contact Information: name, email, phone number
• Company Data: name, VAT number, registered address
• Order Data: ordered products, delivery address, payment information
• Usage data: visit statistics and completed orders in Umami (separate server in the EU, without cookies; order number, amount, country, source) and – only with your consent – pseudonymized analytics from Google Analytics and Microsoft Clarity (including session recordings)

We use your personal data for the following purposes:

• Processing and fulfilling orders
• Responding to inquiries and customer support
• Improving the site and service based on aggregated data
• Fulfilling legal obligations (tax accounting, bookkeeping)

We process personal data on the following legal bases:

• Contract performance: order processing and product delivery
• Consent: analytical and marketing cookies (Google Analytics, Microsoft Clarity, Google Ads, pp_attr attribution cookie), as well as loading YouTube videos and Google Maps – immediately upon consent to marketing cookies, without it – by clicking on a specific video or map. Consent can be withdrawn at any time on the cookies policy page.
• Legitimate interest: measuring traffic, channel and sales effectiveness using statistics without cookies (Umami), service improvement, fraud prevention. You can object to such processing, including disabling visit tracking on the cookies page.
• Legal obligation: tax and accounting requirements

We retain personal data only as long as necessary: order and invoice data – 7 years (legal requirement), contact form inquiries – 2 years, analytics data – 26 months. You can request deletion of non-essential data at any time.

Under GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to data portability: receive data in a machine-readable format
• Right to object: object to processing based on legitimate interest

We share data with trusted third parties only when necessary:

• Google (Google Analytics, Google Ads) and Microsoft (Clarity): pseudonymized site usage data – only with your consent. These companies may process data in the USA; the transfer is based on mechanisms provided by GDPR (EU-U.S. Data Privacy Framework or standard contractual clauses).
• Google (YouTube, Google Maps): videos and maps on the site load if you have allowed marketing cookies or clicked on a specific video or map. At this moment, Google receives your IP address and browser technical data and may store cookies in your browser. We are jointly responsible with Google for the transmission of this data; further processing is conducted by Google independently, including in the USA, – the transmission is based on mechanisms provided by GDPR (EU-U.S. Data Privacy Framework or standard contractual clauses), – according to its privacy policy: policies.google.com/privacy.
• Hosting providers: data processing for site operation (in the EU)