Privacy policy

Data controller: Karol Piotr Nieweglowski, sole trader (OSVČ), trading as ELZORVAN, Cyrilská 351/3, 602 00 Brno-město, Czech Republic. Contact: [email protected], +420 776 282 764.

Privacy Policy

This policy explains what personal data we collect when you visit or order from ELZORVAN, why we process it, and what rights you have under the GDPR (Regulation (EU) 2016/679).

Data we collect

  • Order data: name, delivery and billing address, email address, phone number and the contents of your order.
  • Payment data: processed by our payment provider. We never receive or store full card numbers.
  • Technical data: IP address, browser and device type, and pages viewed — to operate the store, prevent fraud and improve the site.
  • Communications: messages you send us and our replies.

Why we process it

To perform our contract with you and fulfil your order (Art. 6(1)(b) GDPR); to comply with tax and accounting obligations under Czech law (Art. 6(1)(c)); and for our legitimate interest in securing the store and preventing fraud (Art. 6(1)(f)). Marketing emails are sent only with your consent (Art. 6(1)(a)), which you may withdraw at any time.

Providing your data

Providing the data needed to process an order is a contractual requirement. Without it we cannot accept or deliver your order. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Who receives your data

Our shop platform (Shopify), our payment provider and our delivery carriers, each only to the extent needed to process and deliver your order. We do not sell personal data. Where a recipient is outside the EEA, transfers are covered by an adequacy decision or standard contractual clauses.

How long we keep it

Order and accounting records are kept for the statutory retention period under Czech accounting and tax law. Server and access logs are deleted after 30 days. Other personal data is deleted once the purpose for which it was collected no longer applies.

Your rights

You have the right of access, rectification, erasure, restriction of processing, objection, and data portability, and the right to withdraw consent at any time with effect for the future. To exercise any of these rights write to [email protected] or call +420 776 282 764.

Supervisory authority

You have the right to lodge a complaint with a supervisory authority. The competent authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz.

Cookies

We use cookies that are strictly necessary for the store to function (cart, checkout, security). Analytics cookies are set only with your consent, which you can withdraw at any time in your browser settings or our cookie preferences.