Privacy Policy

This Privacy Policy explains how Cleorix ("we", "us", "our") collects, uses, stores, and protects personal data when you visit and interact with https://cleorix.shop/ and its localized versions for the Czech Republic (CZ), Hungary (HU), Slovakia (SK), and Slovenia (SI).

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable national data protection laws.

1. Data Controller

The data controller responsible for your personal data is Cleorix, operating the website https://cleorix.shop/ and its localized versions for the Czech Republic, Hungary, Slovakia, and Slovenia.

2. Personal Data We Collect

We may collect the following categories of personal data when you use our website and place an order:

• Identification data: first name, surname.
• Contact data: phone number, email address.
• Order data: products ordered, order value, delivery details.
• Technical data: IP address, browser type, device information, operating system.
• Usage data: pages visited, time spent on the website, referring URLs.

3. How We Use Your Personal Data

We process your personal data for the following purposes:

• Order fulfillment: to process and deliver your order, including confirmation calls and delivery coordination.
• Customer support: to respond to your inquiries and provide assistance.
• Legal compliance: to comply with applicable legal and regulatory obligations.
• Marketing: with your consent, to send you promotional communications about similar products and offers.
• Analytics: to improve our website, products, and services based on aggregated usage data.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Performance of a contract – processing is necessary to fulfill your order.
• Legal obligation – processing is required by applicable law.
• Consent – where you have given explicit consent (e.g., marketing communications).
• Legitimate interest – for website security, fraud prevention, and service improvement.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and support our marketing activities. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share your data with:

• Delivery partners: to deliver your order.
• Payment processors: to process cash-on-delivery transactions.
• IT service providers: who support our website and infrastructure under strict data processing agreements.
• Legal authorities: when required by law or to protect our rights.

7. International Data Transfers

Your personal data may be transferred to and processed in countries within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Order and transaction data: retained for the period required by applicable tax and accounting laws.
• Marketing data: retained until you withdraw your consent.
• Technical and usage data: retained for a maximum of 26 months.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data under certain conditions.
• Right to restrict processing: to request limitation of how we use your data.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: at any time, where processing is based on consent.

To exercise any of these rights, please contact us via the email address provided on our website. We will respond within 30 days of receiving your request.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS.
• Access controls and authentication mechanisms.
• Regular security assessments and monitoring.
• Employee training on data protection and privacy.

11. Children's Privacy

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us so we can take appropriate action.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

13. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us via the email address provided on our website.