Legal
Privacy policy
We only process the data needed to deliver your order and run your account.
Controller
The data controller is stated on the Terms & conditions page and on receipts. To exercise your rights, write to the shop's email address.
Data processed
Orders: name, address, email and phone, needed for delivery (legal basis: contract), shared with the courier and the supplier fulfilling the shipment. Account: email and name, managed via Firebase Authentication (Google). Referral program: a technical cookie (rb_ref, 30 days) links your visit to the person who invited you; tax details and IBAN are requested only to pay commissions. Preferences: language, light/dark theme and age confirmation, stored on your device.
Retention
Order data is kept for 10 years for tax obligations; the account until you delete it.
Your rights
Access, rectification, erasure, portability and objection under the GDPR (Reg. EU 2016/679). You may also lodge a complaint with the supervisory authority.