Privacy Policy

1. Data controller

Data controller: [Company name], [Legal form]. Registration number: [Registration number]. Legal address: [Legal address].

For questions regarding personal data processing and protection: [Privacy email].

2. Data we process

Account data: username, email address, first name, last name, interface language, account settings, and email verification status.

Contact and delivery data: phone number, street and house number, city, postal code, and saved addresses.

Order data: products, quantities, selected variants, prices, discounts, coupons, delivery information, order and shipment statuses, carrier, and tracking number.

User-provided data: profile picture, reviews, review images, favorite products, followed stores, addresses, and preferences.

Technical and security data: session information, IP address, and technical information required for account protection, abuse prevention, and error diagnostics.

After separate analytics consent, the marketplace processes a random browser identifier, monthly HMAC identifiers for the browser and IP, connection country, device type, browser name, paths without URL parameters, referral hostname and activity times. Signed-in visits are linked to the account. Country is determined locally; original IP addresses are not stored in analytics tables.

Passwords are not stored in plain text. One-time tokens and other sensitive data are protected using the system's security mechanisms.

3. Why we use personal data

Data is used for registration and sign-in, email verification, account recovery, account management, and active session management.

Data is also required for cart functionality, order placement and fulfilment, delivery, order history, returns, and customer support.

Technical data is used for security, fraud and abuse prevention, limiting suspicious activity, and error diagnostics.

Aggregated traffic statistics are used to understand current website load, visitor counts, and audience geography.

4. Legal bases for processing

Data required for account functionality and order fulfilment is processed in order to provide marketplace services to the user.

Where required by law, data may be processed to comply with legal obligations.

Security data may be processed to protect users and the service from fraud, abuse, and other threats.

5. Who may receive personal data

Access to personal data is provided only to the extent necessary to perform a specific marketplace function.

Order information may be shared with the relevant supplier and delivery provider to the extent necessary to fulfil the order.

Hosting, email, image storage, and third-party authentication services may be used for the technical operation of the website.

6. Sign in with Google

If a user chooses to sign in with Google, the marketplace may receive information required to identify the user and link the account, such as name, email address, and Google account identifier.

Use of Google services is also subject to Google's own privacy policy.

7. Data retention

Personal data is retained only for as long as necessary to operate the account, fulfil orders, and provide marketplace functionality.

Certain data may be retained for longer where required for legal compliance, accounting, security, dispute resolution, or protection of legitimate interests.

Detailed visit records containing an identifier hash are automatically deleted after 90 days. The anonymized list of country codes without user identifiers may be retained longer for general historical statistics.

8. Data security

Technical and organizational measures are used to prevent unauthorized access, alteration, disclosure, or destruction of personal data.

Access to administrative functions and data is restricted according to user roles and permissions.

9. User rights

Users may request information about their personal data, correction, deletion, or restriction of processing where provided by law.

Where provided by law, users may also have rights to data portability, objection to processing, and withdrawal of previously given consent.

For questions regarding personal data and exercising these rights, users may contact: [Privacy email].

10. Complaints

If a user believes their personal data is being processed in violation of applicable law, they may lodge a complaint with the competent data protection authority.

11. Cookies

The website may use cookies and similar technologies required for accounts, sessions, security, and other marketplace functionality.

Detailed information about the use of cookies is available on the separate Cookies page.

12. Changes to this policy

This Privacy Policy may be updated when marketplace functionality, data processing practices, or legal requirements change.

The current version of this Privacy Policy is always published on this page.