Privacy policy

Privacy Policy

About This Policy

CALVESSA is committed to protecting the privacy of our customers. Please take the time to read this Privacy Policy ("Policy"), which explains what information we collect about you, how we use it, and what rights you have. This Policy contains important information, and you should not use any services on [Twoja domena] (the "Website") without first reading this Policy.

[Nazwa Twojej firmy], operating as CALVESSA ("CALVESSA," "we," or "us") is the data controller and processor of personal data collected through or in connection with the Website.

This Policy has been prepared in accordance with the California Consumer Privacy Act (CCPA) of 2018 and other applicable US privacy laws. If you are located outside the United States, additional rights may apply to you under your local law, as further explained below.

What Information Do We Collect About You, and Why?

Purpose Information Collected Legal Basis Retention Period
To process your purchase requests on the Website First name, last name, delivery address, phone number, email address, purchase price and currency To enter into and perform our contract with you 10 years after your last transaction, to comply with applicable accounting, tax, and legal obligations
To process payments on the Website First name, last name, delivery address, phone number, email address, purchase price and currency, card brand/type, BIN number, card issuer country To enter into and perform our contract with you For the duration necessary to perform the contract, and thereafter for 10 years as required under applicable accounting and tax law
To process your inquiries on the Website Unique token identification number, IP address, email address, phone number Your consent 1 year after your purchase on the Website
To send you personalized offers, marketing materials, and special discounts IP address, email address, phone number Your consent 1 month after your visit to the Website
To ensure the security of the Website IP address or other device address/ID, browser and/or device type, hardware and software settings, pages visited before/after the Website, actions taken on the Website, dates and times of access Our legitimate interest (ensuring Website security) 1 month after your visit to the Website
To manage our social media accounts, if you interact with us there First and last name, email address, gender, country, image, message content, time/date of message, replies Your consent 2 years
To manage customer reviews, testimonials, and other feedback First and last name, email address, image linked to your account, time/date, message content Your consent 2 years after receipt of your feedback or message
To process inquiries, requests, and complaints you submit First name, last name, email, country, phone number, subject and content of your request, attachments, our response Your consent and our legitimate interest 2 years from your last request
To contact you if your order was not completed, or if your order/payment could not be processed due to a technical error First name, last name, email, phone number, abandoned cart contents To perform our contract with you, and our legitimate interest 1 month after an unsuccessful order on the Website
To protect our rights and interests in legal proceedings Information listed above, documents sent to/from you, court filings, judgments, decisions Our legitimate interest (defending our legal rights) 10 years after account closure, or after conclusion of legal proceedings, whichever is later

What Information Must You Provide to Us?

Please refer to the section above — you must provide us with the information we need to process the orders you place on the Website, as well as to handle your inquiries, requests, and complaints. If you do not provide this information, we may be unable to offer you our services or process your orders.

What Do We Do to Protect Your Personal Data?

We use your data for the purposes outlined above. This includes:

  • Processing your purchase requests and delivering your orders
  • Sending you marketing and promotional materials
  • Contacting you from time to time about discounts, special offers, or general information about our products and services
  • Sharing your personal data with third parties who are our service providers or business partners, where necessary to fulfill your orders or protect our rights, or where our partners offer products we believe may interest you
  • Using the payment "token" described above and transferring it to our partner companies if you ask us to save your payment information for future purchases

If you consent to receiving marketing SMS, we may also share your phone number with our partners or companies within our corporate group. Neither we nor our partners will send you marketing SMS without your permission. You can revoke your permission to receive marketing SMS at any time by replying "STOP" to any SMS you receive from us. We will not send marketing SMS more than 3 times per week. Our marketing SMS are free of charge.

Sharing Your Personal Information

We share your personal information with:

  • Financial institutions handling payment processing, and banks to which your paid amounts are transferred
  • Attorneys, accountants, consultants, IT service providers, electronic communication providers, insurance companies, archiving services, and other entities providing services to us
  • Courts, law enforcement, and other government institutions, where legally required or where you violate this Policy or the Website's Terms of Service
  • Third parties for identity verification purposes related to your use of certain Website features
  • Our marketing partners, to deliver personalized marketing content
  • Our shipping providers, to deliver your purchases
  • Our service provider that manages the Website's online store
  • Providers of analytics tools (e.g., Google Analytics)

If you choose to complete your purchase using a direct payment gateway, our payment processor stores your credit card data. Encryption is handled through the Payment Card Industry Data Security Standard (PCI-DSS). Your transaction data is stored only as long as necessary to complete your purchase transaction.

If you choose to pay via Klarna's or PayPal's express checkout, you will provide certain personal data (such as your contact and payment details) directly to Klarna or PayPal. We do not collect or have access to your full payment details. Klarna and PayPal act as independent data controllers for the personal data you provide to them. For more information, please review Klarna's Privacy Policy and PayPal's Privacy Statement.

Generally, the third-party providers we use will only collect, use, and disclose your information to the extent necessary to provide their services to us. However, certain third parties, such as payment gateways, have their own privacy policies regarding the information we are required to provide them for your purchase-related transactions. We recommend reviewing their privacy policies to understand how they handle your personal data.

We may share your data with third-party marketing partners for advertising purposes. Certain providers may be located in a different jurisdiction than you or us. If you choose a transaction involving the services of a third-party provider, your information may become subject to the laws of the jurisdiction(s) in which that provider or its facilities are located. Once you leave our store's website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our Website's Terms of Service.

Information Security

To protect your personal data, we take reasonable precautions and follow industry best practices to ensure it is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed.

When you provide us with your credit card information, it is encrypted using Secure Socket Layer (SSL) technology. While no method of transmission over the internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional widely accepted industry standards.

Sale/Sharing of Personal Data (CCPA)

If you are a California resident, we may "sell" or "share" (as defined under the CCPA) the following categories of personal data:

  • Identifiers
  • Characteristics of protected classifications under California and federal law
  • Internet or other electronic activity
  • Commercial information
  • Inferences drawn from the categories above to create a profile reflecting your preferences, characteristics, behaviors, and attitudes

We only "sell" or "share" your personal data with carefully selected, trusted partners and/or digital advertising networks. We do not sell or share personal data of minors under 16 years of age.

California Residents' Rights Under the CCPA

If you are a California resident, you have the rights described below. If there is any conflict between this section and another provision of this Privacy Policy, the interpretation that provides greater privacy protection will prevail for California residents. If you have questions about this section or wish to know whether any of these rights apply to you, please contact us at [Twój e-mail supportu].

Right to Opt Out of Sale/Sharing

You have the right to request that we not sell or share your personal data. Your opt-out request remains effective for 12 months, after which we may ask you to consent again.

You can opt out by emailing us at [Twój e-mail supportu] or by clicking the "Do Not Sell My Personal Information" link on our Website.

We will comply with your opt-out request within 15 business days of receipt.

Right to Know

You have the right to request that we disclose what personal data we have collected, used, disclosed, or sold about you in the preceding 12 months, including:

  • Categories of personal data processed
  • Specific pieces of personal data collected
  • Categories of sources from which we collected personal data
  • The purposes for which we use personal data
  • Categories of third parties with whom we share personal data
  • Categories of information we sell or disclose to third parties

You can submit a "Right to Know" request by emailing us at [Twój e-mail supportu].

We will respond to your request within 45 calendar days. If necessary, we may extend our response period by an additional 45 days (90 days total) by notifying you.

We may decline your request if:

  • We cannot verify your identity
  • The request is manifestly unfounded or excessive, or we have already provided you with personal data twice within a 12-month period
  • Disclosure would involve certain sensitive information (e.g., Social Security number, financial account number, or account passwords) — though we will tell you whether we collect this type of information
  • Disclosure would limit our ability to comply with legal obligations, exercise or defend legal claims
  • The personal data involves certain medical information, consumer credit information, or other information exempted under the CCPA

Right to Delete

You may request that we delete the personal data we have collected about you and direct our service providers to do the same. Certain exceptions allow us to retain your personal data despite this request.

You can submit a deletion request by emailing us at [Twój e-mail supportu].

The same response timeline and grounds for denial described under "Right to Know" apply here.

Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights. We will not deny you goods or services, charge you different prices, or provide a lower quality of goods or services simply because you are a California resident or have exercised your CCPA rights.

Our Right to Request Additional Information

Whenever we receive a request under this section, we may need to verify your identity to confirm the request comes from the individual about whom we hold personal data, and to confirm you are a California resident. Accordingly, we may ask you for additional information for verification purposes only, and will use that information solely for that purpose.

Rights of Residents Outside the United States

If you are located in the European Union, United Kingdom, or another jurisdiction with applicable data protection law, you may have additional rights, including the right to access, correct, delete, or restrict the processing of your personal data, the right to data portability, and the right to withdraw consent. To exercise these rights, please contact us at [Twój e-mail supportu].

Age of Majority

By using this Website, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and have given us your consent to allow any minor dependents to use this Website.

We do not knowingly process personal data of minors 16 years of age or younger. If you are a minor under this definition, please stop using the Website immediately. We reserve the right to delete your personal data without separate notice if we have reason to believe you are under 16.

Cookies

Cookies are small text files stored by your browser on your device (e.g., computer, mobile phone, tablet) when you browse websites. Other technologies, including data we store in your web browser or device, identifiers associated with your device, and other software, are used for similar purposes. In this Policy, we refer to all such technologies as "cookies."

Our Website uses cookies for purposes including:

  • Advertising cookies (e.g., Facebook Pixel/_fbp, fr) — used to show you relevant advertising on Facebook or partner platforms based on your visit to our Website
  • Analytics cookies (e.g., Google Analytics/_ga, Hotjar) — used to understand website traffic, visitor behavior, and improve our Website's performance
  • Functional cookies — used to ensure the Website functions properly and to remember your preferences

You can configure your browser to reject some or all cookies, or to alert you when cookies are being set. Please note that disabling cookies may affect your ability to access certain areas or features of our Website. For more information on managing cookies, visit www.aboutcookies.org or www.allaboutcookies.org.

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time, so please review it periodically. Changes and clarifications take effect immediately upon posting to the Website. If we make material changes to this Policy, we will notify you here that it has been updated. If our business is acquired by or merged with another company, your data may be transferred to the new owners so that we may continue to provide you with products.

Contact Information

If you have questions about your purchase or this Privacy Policy, please contact our customer support at info@calvessa.store

Address:
Mateusz Mizinski
Tauchaer Straße 1, 04357 Leipzig