GDPR

Privacy Policy

Effective from January 1, 2026 · Compliant with GDPR

1. Data Controller

  • The data controller is ShopSK, based in Slovakia, contact: info@ourstone.fun.
  • We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data.

2. Data We Collect

  • Identification and contact data: name, email address, phone number, delivery address.
  • Transaction data: order history, payment amounts, chosen payment method.
  • Technical data: IP address, browser type, pages visited — collected anonymously for analytics purposes.

3. Purpose and Legal Basis for Processing

  • Order fulfilment and delivery — performance of a contract (Art. 6(1)(b) GDPR).
  • Sending order confirmations and status updates — legitimate interest of the controller.
  • Sending marketing emails — only with customer consent (Art. 6(1)(a) GDPR).
  • Compliance with legal obligations (accounting, tax documents) — legal obligation (Art. 6(1)(c) GDPR).

4. Data Retention

  • Personal data related to orders is retained for 5 years due to statutory accounting and tax obligations.
  • Registered customer data is retained for the duration of the customer account and 1 year after its deletion.
  • Marketing consent — until it is withdrawn.

5. Data Recipients

  • Shipping companies — for the purpose of order delivery (name, address, phone number).
  • Payment gateways — for payment processing (the controller has no access to card details).
  • Email service provider Resend — for sending confirmation emails.
  • Supabase — cloud database storage, EU server operator in Germany.

6. Your Rights

  • Right of access — you may request a copy of your personal data that we process.
  • Right to rectification — you may request correction of inaccurate data.
  • Right to erasure — you may request deletion of your data if there is no legal basis for further processing.
  • Right to data portability — you may request your data in a structured format.
  • Right to object — you may object to processing based on legitimate interest.
  • Right to withdraw consent — if processing is based on consent, you may withdraw it at any time.

7. Complaints

  • If you believe your rights have been violated, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (www.dataprotection.gov.sk).

8. Cookies

  • Our website uses technical cookies necessary for the shopping cart and login functionality. We do not use third-party advertising or analytics cookies without your consent.

Have questions about our Privacy Policy?

Contact us