Privacy policy

1. Introduction

Welcome to karatoyaa.com. We are committed to protecting your privacy and ensuring that your personal data is handled securely and in compliance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR").

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website, purchase our products, or use our services.

2. Data Controller

The data controller responsible for processing your personal data is:

KARATOYAA S.R.O.

Nosticova 7, Prague 118 00, Czech Republic

karatoyaa@karatoyaa.com

3. Data We Collect

We may collect the following categories of personal data:

  • Identity Data: Name, surname, date of birth.

  • Contact Data: Email address, phone number, billing and shipping address.

  • Payment Data: Payment method details (processed securely by third-party payment processors).

  • Account Data: Username, password, order history.

  • Technical Data: IP address, browser type, operating system, device information.

  • Marketing Data: Preferences, interests, survey responses.

4. How We Collect Your Data

We collect your data through the following methods:

  • Direct interactions (e.g., when you place an order or contact customer support).

  • Automated technologies (e.g., cookies and tracking technologies).

  • Third-party sources (e.g., payment providers, delivery services).

5. Purpose of Processing

We process your personal data for the following purposes:

  • To fulfill and deliver your orders.

  • To manage your account and provide customer support.

  • To process payments securely.

  • To comply with legal obligations.

  • To send promotional offers and marketing communications (if consented to).

  • To enhance and personalize your shopping experience.

  • To prevent fraud and ensure website security.

6. Legal Basis for Processing

We process your data under the following legal bases:

  • Contractual Necessity: When processing is necessary to fulfill our contract with you.

  • Legal Obligation: Compliance with legal requirements (e.g., tax laws).

  • Legitimate Interests: To improve our services, fraud prevention.

  • Consent: For marketing and non-essential cookies (which can be withdrawn at any time).

7. Data Sharing

We may share your personal data with:

  • Payment service providers.

  • Shipping and logistics providers.

  • Marketing and advertising partners.

  • Legal and regulatory authorities if required.

We do not sell your personal data to third parties.

8. International Data Transfers

As we operate worldwide, your data may be transferred outside the EU/EEA to countries that may not provide the same level of data protection. In such cases, we ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place to protect your data.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law (e.g., tax and accounting regulations).

10. Your Rights

You have the following rights under GDPR:

  • Right of Access: Request a copy of your personal data.

  • Right to Rectification: Request corrections to your data.

  • Right to Erasure: Request deletion of your data.

  • Right to Restrict Processing: Request limitations on data processing.

  • Right to Data Portability: Request transfer of your data.

  • Right to Object: Object to processing based on legitimate interests.

  • Right to Withdraw Consent: Withdraw consent for marketing communications.

To exercise your rights, please contact us at karatoyaa@karatoyaa.com.

11. Security Measures

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction.

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and analyze website traffic. You can manage cookie preferences through our cookie settings tool or your browser.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting an updated version on our website.

15. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

KARATOYAA S.R.O.

karatoyaa@karatoyaa.com

By using our website and services, you agree to the terms of this Privacy Policy.