Privacy policy

Protecting your privacy is important to us. This policy explains what personal data we process, for what purpose, how long we keep it and what rights you have. Processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Slovak Act No. 18/2018 Coll. on the protection of personal data.

Controller

The online store Malá Sonya is operated by:

Svitlana Osyka
Agátová 3460/7F, 841 01 Bratislava – Dúbravka, Slovakia
Company ID (IČO): 56578636
E-mail: eu.msonya@gmail.com

What personal data we process

We only process data that you provide to us when placing an order or communicating with us:

first and last name,
delivery and billing address,
e-mail address and phone number,
order and payment details.

We do not process or store payment data (e.g. card numbers) – payments are processed by the payment gateway provider (Stripe).

Purpose and legal basis of processing

Processing and delivering your order – the legal basis is the performance of the purchase contract.
Invoicing and accounting – compliance with legal obligations.
Handling complaints or returns – performance of the contract and legal obligations.
Customer communication – our legitimate interest in answering your questions.
Sending news (newsletter) – only with your consent, which you can withdraw at any time.

How long we keep your data

We keep personal data only for as long as necessary for the given purpose – for the time needed to process the order and then for the period required by law (accounting and tax documents usually 10 years). Data processed on the basis of consent is kept until consent is withdrawn.

Who we share data with

We do not share your data with third parties for marketing purposes. We only share it with parties necessary to fulfil your order:

the carrier Slovenská pošta, a.s. (Slovak Post), to deliver your parcel,
the payment gateway provider (Stripe), to process your payment,
the e-commerce platform provider Shopify,
the person responsible for our accounting.

Cookies

Our website uses cookies – small text files stored in your browser that help ensure the store works properly and improve our services. We use the following types of cookies:

Necessary cookies – ensure the basic functioning of the site (cart, login, checkout). They are always used and do not require consent.
Analytics cookies – help us understand how visitors use the site. They are only used with your consent.
Marketing cookies – used to show relevant advertising, including on third-party platforms (Google, Meta/Facebook). They are only used with your consent.

On your first visit, we will ask for your consent to use analytics and marketing cookies. You can change or withdraw your decision at any time in your browser settings, where you can also delete stored cookies.

Your rights

In connection with the processing of your personal data, you have the right of access, rectification, erasure, restriction of processing, data portability, the right to object to processing and the right to withdraw consent at any time. You also have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection of the Slovak Republic (Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk), or with the supervisory authority in your country.

You can exercise your rights by e-mail at eu.msonya@gmail.com.