DRAFT — must be legally reviewed and adapted to the services actually used before going live.
1. Data controller
[Company name, address, email address, telephone number]
2. Collection and processing of personal data
We process your data to fulfil your order on the basis of Article 6(1)(b) GDPR. This includes name, address, email address and payment details.
3. Shop system
This shop runs on Shopify. The provider is Shopify International Limited, Dublin, Ireland. Shopify processes data on our behalf.
4. Carriers and suppliers
To carry out your order we pass your delivery details to our suppliers and to the appointed carrier. Our goods are dispatched from a warehouse within the European Union. The supplier and fulfilment partner used is Matterhorn Moda Sp. z o.o., Poland.
5. Payment providers
When you pay, your data is transmitted to the relevant payment provider. [Provider to be added.]
6. Cookies and analytics
We use cookies. Technically necessary cookies are set on the basis of Article 6(1)(f) GDPR. All other cookies, in particular for analytics and marketing, are set only with your consent under Article 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie banner.
7. Meta pixel
If you have consented, we use the Meta pixel from Meta Platforms Ireland Limited to measure and optimise advertising. Data may be transferred to third countries in the process.
8. Product reviews
To collect and display product reviews we use the service Judge.me (Judge.me Limited, Hong Kong). After an order is completed you may be sent an email asking for a review. For this, your email address, your name and the items ordered are transmitted to Judge.me. Processing takes place on the basis of Article 6(1)(f) GDPR. You may object at any time. Any transfer outside the EU takes place on the basis of the EU standard contractual clauses.
9. Newsletter
Newsletter sign-up uses a double opt-in procedure. You can unsubscribe at any time.
10. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a supervisory authority.
11. Retention period
We store your data for as long as is necessary for the stated purposes or as long as statutory retention periods apply.