Your privacy matters to us. This Privacy Policy complies with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and applicable national data protection laws.
1. Data Controller
The data controller is the seller operating the website vitonika.shop. For any questions regarding the processing of your personal data, you may contact us via the contact form on the website.
2. What Personal Data We Collect
We collect the following categories of personal data:
- Identification data: first and last name, delivery address, telephone number, email address.
- Order data: selected product, quantity, order value, payment method (cash on delivery).
- Technical data: IP address, browser type, operating system version, device information.
- Usage data: pages visited, time spent on the site, referral sources.
3. Legal Basis for Processing
We process your personal data on the following legal bases:
- Performance of a contract — when we process data necessary for handling and delivering your order.
- Legal obligation — when we are required to retain transaction data in accordance with tax and accounting regulations.
- Legitimate interest — for analysing and improving our website and services.
- Consent — when you have given us consent for the use of cookies for marketing purposes.
4. How We Use Your Data
We use your personal data exclusively for the following purposes:
- Processing and delivering your order.
- Communicating with you regarding your order (confirmation, delivery, complaints).
- Improving the user experience on our website.
- Fulfilling legal obligations.
5. Sharing Data with Third Parties
We do not sell or rent your personal data to third parties. We share data only with:
- Delivery carriers — to deliver your order.
- Payment service providers — for processing cash-on-delivery payments.
- Competent authorities — when required by law.
6. How Long We Retain Your Data
We retain your personal data for as long as necessary to fulfil the purpose for which it was collected, including:
- Order data is retained for 5 years in accordance with tax regulations.
- Communication data is retained for 2 years.
- Technical data is retained for up to 12 months.
7. Your Rights
In accordance with the GDPR, you have the following rights:
- Right of access — you may request a copy of your personal data.
- Right to rectification — you may request correction of inaccurate data.
- Right to erasure — you may request deletion of your data ("right to be forgotten").
- Right to restriction of processing — you may request restriction of processing.
- Right to data portability — you may request transfer of your data in a machine-readable format.
- Right to object — you may object to processing based on legitimate interest.
8. Data Security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. This includes SSL encryption, restricted data access and regular security reviews.
9. Cookies
Our website uses cookies to improve the user experience, analyse traffic and personalise content. For detailed information about the cookies we use and how you can control them, please see our Cookie Policy.
10. Changes to This Policy
We reserve the right to amend this Privacy Policy. We will notify you of any significant changes on our website. By continuing to use our website after the changes take effect, you accept the updated policy.
11. Contact
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us via the contact form on the website.