Privacy policy

Privacy Policy

This Privacy Policy describes how we collect, use, store, and disclose personal information when you visit our website, use our services, make a purchase, or otherwise communicate with us.

1. Data Controller

The controller responsible for the processing of personal data is:

Cristian-Stefan Pițoiu
Schulstraße 8, Tür 1
4053 Ansfelden
Austria

Email: pitcris93@gmail.com

2. Personal Data We Collect

Depending on how you interact with our store, we may collect information such as:

name;
billing address;
shipping address;
email address;
telephone number;
order and transaction information;
products purchased;
payment-related information;
IP address;
device and browser information;
information provided in customer service communications;
personalization information supplied for custom products;
information collected through cookies and similar technologies.

We only process personal data where there is an appropriate legal basis.

3. How We Use Personal Data

We may process your personal data for purposes including:

processing and fulfilling orders;
providing digital downloads;
producing and shipping personalized or physical products;
processing payments;
communicating with you about your order;
providing customer service;
preventing fraud and misuse;
maintaining the security of our store;
complying with accounting, tax, and other legal obligations;
improving the operation and performance of our website;
sending marketing communications where legally permitted or where you have provided the necessary consent.

4. Legal Bases for Processing

Depending on the circumstances, we process personal data on the basis of:

performance of a contract or steps taken before entering into a contract;
compliance with legal obligations;
our legitimate interests, where those interests are not overridden by your fundamental rights and freedoms;
your consent, where consent is required.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Shopify

Our online store is hosted and operated using Shopify.

Shopify may process personal data necessary to provide the online store, checkout, order management, security, analytics, and related services.

Your personal data may therefore be processed by Shopify and its service providers in accordance with applicable data protection law and Shopify's own privacy practices.

6. Payment Processing

When you make a purchase, payment information may be processed by Shopify Payments or other payment providers available at checkout.

We generally do not receive or store complete payment card details. Payment providers process payment data as necessary to complete transactions, prevent fraud, and comply with legal obligations.

7. Service Providers

We may disclose personal data to service providers where necessary to operate our business, including providers involved in:

website hosting and ecommerce services;
payment processing;
order fulfilment;
shipping and delivery;
email communications;
analytics;
IT and security;
accounting and legal compliance.

These providers may process personal data only as permitted under applicable law and according to their respective contractual obligations.

8. International Data Transfers

Some service providers may process personal data outside Austria or outside the European Economic Area.

Where required, international transfers of personal data are protected using mechanisms permitted under applicable data protection law, such as adequacy decisions or appropriate contractual safeguards.

9. Cookies

Our website may use cookies and similar technologies for functions such as:

operating the shopping cart and checkout;
remembering preferences;
maintaining website security;
measuring website performance;
analytics;
advertising and marketing, where permitted.

Where legally required, non-essential cookies will only be used after you have provided the appropriate consent.

You can manage your cookie preferences through the cookie settings available on our website, where provided.

10. Retention of Personal Data

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required by tax, accounting, contractual, or other legal obligations.

Different categories of personal data may therefore be retained for different periods.

11. Your Data Protection Rights

Subject to the conditions provided by applicable law, you may have the right to:

request access to your personal data;
request correction of inaccurate personal data;
request deletion of your personal data;
request restriction of processing;
object to certain processing;
receive certain personal data in a portable format;
withdraw consent where processing is based on consent;
lodge a complaint with a competent data protection authority.

Requests concerning your personal data can be sent to:

pitcris93@gmail.com

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).

12. Children's Data

Our products and services are not directed specifically toward children, and we do not knowingly seek to collect personal data directly from children where parental consent would be legally required.