Adatvédelmi szabályzat

Data Protection & Privacy Policy

Last Updated: September 14, 2026

At egvja.shop ("we," "our," or "the Store"), protecting the confidentiality and integrity of your personal information is a core commitment. Operating in full compliance with the General Data Protection Regulation (GDPR) and applicable European data protection directives, this Privacy Policy explains how we gather, manage, utilize, and safeguard your details during your interactions with our platform.

1. Categories of Personal Data Collected

Direct Order Details: When initiating an order, we collect essential fulfillment information, including your full legal name, delivery address within the Czech Republic and other supported destinations, active telephone number, email address, and records of customer support correspondence.
Exclusively Cash on Delivery (COD) Records: We conduct sales entirely via Cash on Delivery. Because customers do not complete advance payments online—paying directly in cash to the carrier after inspecting their goods, without incurring any hidden administrative or rejection charges—we do not capture, process, or store credit card numbers, debit details, or online banking credentials. If a return is approved within our 14-day return window, banking information (such as an IBAN) is requested strictly to remit the agreed refund.
Automated System Diagnostics: We automatically gather standard technical entries, including your device identifier, internet protocol (IP) address, operating system, and browsing session metrics to preserve operational site security.

2. Legal Grounds & Operational Use of Information

Your personal information is processed strictly under legitimate contractual and legal frameworks for the following operational requirements:

Processing and preparing your purchase during our standard 1 to 3 business days fulfillment window.
Coordinating carrier logistics and consignment transit to your address across the Czech Republic and supported regions, which requires approximately 7 to 15 business days.
Managing physical cash collection upon parcel arrival and package inspection at your doorstep.
Handling product verifications, return authorizations, and financial reimbursements within the 14 calendar days following package handover.
Communicating necessary fulfillment updates and safeguarding our services against fraudulent transactions.

3. Cookies & Tracking Technologies

We utilize necessary functional and analytical cookies to ensure store stability, retain site preferences, and detect abnormal traffic patterns. You retain full control over cookie permissions and may disable or adjust tracking preferences at any time through your browser settings.

4. Permitted Third-Party Sharing

We never monetize, rent, or trade your personal records. Data transmission is strictly confined to vetted operational third parties necessary to perform fulfillment tasks:

Logistics & Postal Partners: Designated domestic and international couriers assigned to complete parcel transit, verify deliveries, and collect Cash on Delivery payments.
Banking Services: Financial institutions utilized exclusively to execute authorized bank transfer refunds for approved returns.
Infrastructure Suppliers: Secure cloud hosting, database platforms, and technical service providers bound by strict confidentiality agreements.
Regulatory & Legal Authorities: State institutions or law enforcement bodies only when legally mandated by statutory directives or court orders.

5. Security Architecture & Data Retention

Technical Safeguards: We apply rigorous security standards, including robust SSL/TLS data encryption, defensive firewalls, and restricted administrative credentials to shield your records against unauthorized access, loss, or alteration.
Retention Periods: Customer fulfillment and order logs are preserved only for the duration required to complete transit, service the 14-day return and refund timeframe, and comply with mandatory tax and accounting record-keeping laws. Data is safely eliminated once these obligations expire.

6. Statutory Privacy Rights (GDPR)

Under European data privacy legislation, you maintain specific rights regarding your personal records:

The right to review and obtain copies of the personal data we hold about you.
The right to update or correct inaccurate or incomplete contact records.
The right to request the permanent erasure of your data ("right to be forgotten"), provided no statutory retention mandates apply.
The right to restrict, object to processing, or request data portability.

7. Support & Privacy Contact Desk

If you wish to exercise your data protection rights, request information regarding your records, or inquire about our privacy standards, please contact our data team: