Privacy Policy
1. Data Controller and contact details
The controller of personal data is:
Tijara Essence s.r.o.
IČO / DIČ: CZ23592087
Sídlo: Soukenická 877/9, Moravská Ostrava, 702 00 Ostrava
Czech Republic
Contact for data protection matters: Tijara.czech@gmail.com
2. Data categories and sources of collection
We process the following categories of data: identification, contact, and address data; user account data; order data (including payment identifiers); logistics data (tracking numbers, delivery statuses); declarations and consents (acceptance of terms and conditions); technical logs (IP address, device identifiers, timestamps); data from cookies and SDKs.
Data is obtained directly from the Customer, from payment systems, from carriers, and from the Customer's device (via cookies and SDKs).
3. Purposes and legal bases for processing
- Performance of a contract (registration, handling of purchases, payments, deliveries, returns, complaints) – Art. 6(1)(b) GDPR.
- Compliance with legal obligations (accounting, tax settlements, OSS procedure, archiving, product safety, cooperation with authorities) – Art. 6(1)(c) GDPR.
- Age verification, fraud prevention, pursuing claims – Art. 6(1)(c) and (f) GDPR.
- Communication regarding public law obligations (e.g., reminders about formalities) as part of order processing – Art. 6(1)(b) and (c) GDPR.
- Analytics and personalization – based on consent (Art. 6(1)(a)) or the legitimate interest of the controller (Art. 6(1)(f)) GDPR, with respect for privacy regulations.
- Maintenance and security of the Service (logs, fraud prevention, testing) – Art. 6(1)(f) GDPR.
4. Data recipients
Data may be transferred to: payment service providers, logistics operators and carriers, hosting and IT service providers, CRM/CS systems, accounting offices, law firms, analytics tool providers, and competent public authorities when required by law (including tax and customs authorities).
5. Data transfer outside the European Economic Area (EEA)
If our providers are based outside the EEA, we ensure appropriate legal bases for the transfer (e.g., Standard Contractual Clauses of the European Commission) and apply adequate security measures. A copy of the safeguards can be obtained by contacting us.
6. Data retention periods
- Account data and purchase history – for the period of using the account, and then for the time resulting from accounting regulations and the statute of limitations for claims.
- Tax data and evidence for OSS purposes – in accordance with applicable regulations (generally 10 years from the end of the tax year).
7. Rights of data subjects
You have the rights to: access your data, rectify it, delete it, restrict processing, data portability, object to processing, and withdraw consent (which does not affect the lawfulness of processing before its withdrawal). A complaint can be lodged with the Personal Data Protection Office (in Poland) or the supervisory authority competent for your place of residence.
8. Automated decision making and profiling
We do not make decisions producing legal effects based solely on automated processing. We may use profiling for analytical purposes and offer personalization; you have the right to object at any time.
9. Cookies and similar technologies
The Website uses cookies and similar technologies (e.g., local storage) to provide functionality and analyze traffic.
We use a consent mechanism (cookie banner) that allows you to select categories: Essential, Analytical. Settings can be changed in the website footer.
Data from cookies may be linked to your account after logging in – solely based on the consents granted.
10. Security and breach reporting
We apply adequate technical and organizational measures (encryption, access control, pseudonymization, security tests). In the event of a data breach, we proceed in accordance with GDPR requirements; in high-risk situations, we inform the data subjects.
11. Policy changes and contact
We reserve the right to update the Privacy Policy. We will inform you about significant changes on the Website and – where possible – by email.
In matters relating to personal data protection, please contact us at:
Tijara.czech@gmail.com