Privacy Policy

Disclaimer: This document is provided as a template for informational purposes. By using it, you agree to this disclaimer and acknowledge that Webnode is not responsible for any actions taken or any use based on the content of this website. We highly recommend seeking legal advice and customizing this document to suit the needs of your business.

The online store […], on the website […], company ID […], based in […], processes personal data provided by the Customer to comply with and further confirm the General Terms and Conditions, to process electronic orders and shipments, and for necessary communication during a legally required period. 

General Provisions 

1. The data controller for personal data, in accordance with the GDPR (hereinafter referred to as the "Regulation"), is […..], company ID [….], based in [….] (hereinafter referred to as the "Data Controller");

2. The contact details of the Data Controller are: email: [……], tel: [………];

3. Personal data is any information relating to an identified or identifiable natural person.

Source of Personal Data 

1. The Data Controller processes personal data obtained with the Customer's consent and collected through the contract for the purchase and execution of the electronic order made in the online store [….];

2. The Data Controller processes only the identification and contact details of the Customer, which are necessary for the performance of the purchase contract;

3. The Data Controller processes personal data for shipping and accounting purposes and for necessary communication between the parties to the contract for the duration required by law. Personal data will not be disclosed or transferred to other countries.

Purpose of Data Processing 

The Data Controller processes the Customer's personal data for the following purposes:

1. Registration on the website [….] in accordance with Chapter 4, Section 2 of the GDPR;

2. For the execution of the electronic order placed by the Customer (name, address, email, phone number);

3. To comply with laws and regulations arising from the contractual relationship between the Customer and the Data Controller;

4. Personal data is necessary for the performance of the purchase contract. The contract cannot be concluded without personal data.

Retention Period of Personal Data 

1. The Data Controller stores personal data for the period necessary for the fulfillment of rights and obligations arising from the contractual relationship between the Data Controller and the Customer and for a period of 3 years after the end of the contractual relationship;

2. The Data Controller must delete all personal data after the expiration of the period required for the storage of personal data.

Recipients and Processors of Personal Data 

Third parties processing the Customer's personal data are subcontractors of the Data Controller. The services of these subcontractors are indispensable for the successful execution of the contract for the purchase and processing of the electronic order between the Data Controller and the Customer.

Subcontractors of the Data Controller are:

• Webnode AG (online store system);
• Shipping company;
• Google Analytics (website analytics);

Customer's Rights 

In accordance with the Regulation, the Customer has the right to:

1. the right of access to personal data;

2. the right to rectify personal data;

3. the right to erasure of personal data;

4. the right to object to the processing of personal data;

5. the right to data portability;

6. the right to withdraw consent for the processing of personal data, in writing or by email at: [….];

7. the right to lodge a complaint with the supervisory authority in case of suspected violation of the Regulation.

Security of Personal Data 

1. The Data Controller declares to take all technical and organizational precautions necessary for the protection of personal data;

2. The Data Controller has taken technical precautions to secure data storage, including securing computer access with a password, using antivirus software, and performing regular maintenance on computers.

Final Provisions 

1. By placing an electronic order on the website [….], the Customer confirms being informed of all the terms for the protection of personal data and fully accepts them;

2. The Customer accepts these rules by checking the box in the order form;

3. The Data Controller may update these Rules at any time. The new, updated version must be published on its website.

These Rules enter into effect on [Date]