Personal data
Privacy policy
What data we collect, what for, how long we keep it and what you can do about it — in line with the GDPR, without legal jargon.
Version 1.0 · 4 November 2026Data controller
The controller of personal data is the seller running the oviqo.eu shop.
No data protection officer has been appointed. For data protection matters write to mail@oviqo.eu — we reply within one month.
What data, why and on what basis
| Purpose | Data | Basis (GDPR) | Retention |
|---|---|---|---|
| Order fulfilment | name, delivery address, e-mail, phone, invoice details, ordered products | Art. 6(1)(b) — contract | 5 years from the end of the tax year |
| Accounting and tax | data from the invoice | Art. 6(1)(c) — legal obligation | 5 years |
| Enquiries and claims | contact details, correspondence, photos of the defect | Art. 6(1)(b) or (f) — legitimate interest | 12 months after the case closes |
| Establishing and defending claims | order and correspondence data | Art. 6(1)(f) — legitimate interest | until the limitation period expires |
| Customer account | e-mail, order history | Art. 6(1)(b) — contract | until the account is deleted |
We do not build user profiles and do not make automated decisions about users.
Recipients
Data goes only to parties needed to run the shop:
- hosting and e-mail providers — servers in the European Union,
- accounting office — for billing and invoices,
- carriers and payment providers — once sales open, to fulfil the order,
- authorities entitled to access under the law.
We do not sell data and do not share it for advertising.
Transfers outside the EEA
Processing takes place in the European Economic Area; hosting is in Germany. No transfers to third countries occur.
Your rights
- access to your data and a copy of it,
- rectification of inaccurate or incomplete data,
- erasure, restriction of processing and data portability,
- objection to processing based on legitimate interests,
- withdrawal of consent at any time, without affecting earlier processing.
You may lodge a complaint with the President of the Polish Data Protection Authority (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl — or with the supervisory authority in your country.
Security and voluntariness
Providing data is voluntary, but without it we cannot fulfil an order or issue an invoice. We use HTTPS, restricted access to the admin area and regular backups.
The shop is intended for adult buyers. We do not knowingly collect children’s data.
Cookies
How cookies are stored is described in the Cookie policy. Check your choices in Privacy settings.
Version 1.0 of 4 November 2026.