Privacy Policy
Privacy at Elvarisa
This policy describes the general principles of data usage in the Elvarisa store. You can send questions and requests regarding data to support@elvarisa.com.
What data do we use?
When making a purchase, you provide the data necessary to fulfill the order, such as your full name, shipping address, e-mail address, and, if required for delivery, a phone number. We also process information about the order, payment status, and correspondence. While using the website, technical data such as IP address, browser type, and information about the use of the store may be processed.
Why do we need data?
- To accept the order, process payment, delivery, and handle returns — based on the performance of a contract, Art. 6(1)(b) of the GDPR.
- To fulfill legal obligations, e.g., accounting — Art. 6(1)(c) of the GDPR.
- To respond to inquiries, protect against fraud, and establish or defend claims — legitimate interest, Art. 6(1)(f) of the GDPR, taking your rights into account.
- For marketing or optional tools, if enabled and requiring consent — based on appropriate consent, Art. 6(1)(a) of the GDPR.
Providing data is voluntary, but without the data necessary for the order, it cannot be fulfilled.
Store operation and payments
The store uses the Shopify platform. Data may be received by entities necessary to fulfill the order: platform and technical service providers, payment processors, carriers, and mail and accounting service providers. The scope of data depends on the service and the chosen method of payment or delivery. Data may also be transferred to authorized bodies based on law.
Payment is handled by the operator appropriate for the method selected at the store checkout. Enter payment data only in the payment form. Do not send us your full card number, CVV code, or password via e-mail.
International data transfer
Internet services may involve data processing outside the European Economic Area. Such a transfer requires a basis provided for in the GDPR, e.g., an adequacy decision or appropriate safeguards. You can obtain information regarding recipients, places of processing, and applied safeguards by contacting us.
How long do we store data?
Data is needed for the duration of order or request processing, and subsequently for the period required by regulations regarding documentation and claims. We use data processed based on consent until its withdrawal or the earlier completion of the purpose. The specific period depends on the type of data and applicable legal obligations.
Your rights
To the extent provided by law, you can request access to, rectification, erasure, restriction of processing, and portability of data. You can object to processing based on legitimate interest, and to direct marketing — at any time. You can withdraw your consent without affecting the lawfulness of processing before its withdrawal. You can lodge a complaint with the President of the Personal Data Protection Office (UODO) or another competent supervisory authority.
We generally respond to data-related requests within one month. If regulations allow extending this deadline, we will inform you of the reason. You can also contact us regarding matters of automated transaction assessment and your rights.
Cookies and similar technologies
Cookies are small files saved in your browser. Essential files help handle the shopping cart, security, and privacy choices. Depending on the features enabled, preference, analytical, or marketing files may also be used.
Optional technologies requiring consent may only work after it has been granted. You can refuse consent and withdraw it later; simply browsing the store does not constitute consent. You can also manage files in your browser settings. Blocking essential files may hinder the use of the shopping cart.
You can obtain information about currently used tools and privacy settings at support@elvarisa.com.