1. DEFINITIONS
1.1. This Privacy Policy (hereinafter referred to as the “Policy”) uses the following terms:
“Website Administration” — the authorized representatives responsible for managing and maintaining the website, including the collection and processing of personal data, and ensuring compliance with data protection requirements.
“Personal Data” — any information that relates to an identified or identifiable natural person (the “data subject”).
“Processing of Personal Data” — any operation or set of operations performed on personal data, whether by automated or manual means, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
“Confidentiality of Personal Data” — a requirement for any person handling personal data to maintain confidentiality and not disclose such information without the consent of the data subject, except where required by law.
“User” — any individual visiting the website or using its products, services, or functionality.
“Cookies” — small text files stored on the User’s device that allow the website to recognize the User’s browser and remember certain information.
“IP Address” — a unique identifier assigned to a device connected to a computer network using the Internet Protocol (IP).

2. GENERAL PROVISIONS
2.1. This Policy establishes the principles and procedures for processing personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
2.2. By browsing this website or using its services, the User acknowledges and agrees to the terms of this Policy.
2.3. Users who do not agree with the Policy must discontinue using the website.
2.4. This Policy applies solely to this website. The Administration is not responsible for third-party websites accessed through external links.
2.5. The Administration does not verify the accuracy of personal data provided by Users.

3. SUBJECT OF THE POLICY
3.1. The Administration undertakes to ensure the confidentiality and lawful processing of personal data collected through this website.
3.2. The personal data collected may include:
• full name;
• contact phone number;
• email address;
• billing and delivery address;
• other data voluntarily provided by the User through website forms.
3.3. The website may automatically collect technical data such as:
• IP address;
• cookies data;
• browser type and version;
• time and date of visit;
• referrer URL.
3.4. Disabling cookies may affect certain website functions or access to secured areas.

4. PURPOSES OF PROCESSING PERSONAL DATA
Personal data is collected and processed for the following purposes:
• to register and identify the User;
• to provide access to personalized website content and services;
• to process orders, payments, and deliveries;
• to communicate with the User regarding inquiries, support requests, or service updates;
• to ensure the security of transactions and prevent fraud;
• to improve website functionality and user experience;
• to send marketing information, product updates, or promotional offers, subject to User consent;
• to comply with legal obligations.

5. LEGAL BASIS AND METHODS OF DATA PROCESSING
5.1. The Administration processes personal data on lawful grounds, including consent, contractual necessity, legal obligation, and legitimate interest.
5.2. Personal data is processed using secure electronic systems and may also be handled manually where necessary.
5.3. Data may be transferred to third-party service providers (e.g., courier, postal, or payment processing services) to fulfill contractual obligations to the User. These third parties are bound by confidentiality and data protection agreements.
5.4. Data may be disclosed to competent authorities only when required by applicable law.
5.5. The Administration implements technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
5.6. In the event of a data breach, the Administration will take all necessary steps to mitigate potential harm and notify affected Users in accordance with GDPR requirements.

6. RIGHTS OF THE USER
Under GDPR, Users have the right to:
• access their personal data;
• request rectification or erasure of their data (“right to be forgotten”);
• restrict or object to processing;
• request data portability;
• withdraw consent at any time;
• lodge a complaint with a supervisory authority.

7. DATA RETENTION
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. Upon expiration of this period, data will be securely deleted or anonymized.

8. LIABILITY
The Administration is responsible for ensuring that personal data is processed in compliance with this Policy and applicable data protection regulations. However, the Administration is not liable for unauthorized access resulting from circumstances beyond its control, including force majeure events or User negligence.

9. UPDATES TO THIS POLICY
The Administration reserves the right to modify or update this Policy at any time. Updates take effect upon publication on the website unless otherwise stated.
Users are encouraged to review this Policy periodically to stay informed about how their data is protected.