PRIVACY POLICY

1. General Provisions

This Privacy Policy defines the procedure for collecting, processing, using, and protecting the personal data of users of the “EcoLuxMat” website (hereinafter – the Site).

We process personal data in accordance with:

• The Law of Ukraine “On Personal Data Protection”;
• EU General Data Protection Regulation (GDPR) No. 2016/679;
• Directive 2002/58/EC (ePrivacy Directive) — regarding the use of cookies.

By using the Site, you confirm that you have read this Privacy Policy.

2. Data Controller

The data controller is:

We are not required to appoint a Data Protection Officer (DPO) according to Art. 37 GDPR.

3. Personal Data We Collect

We process only the personal data necessary to provide services and fulfill the sales contract, including:

• Identification data: first and last name;
• Contact data: email address, phone number;
• Delivery data: country of residence, postal address;
• Payment information: data necessary for processing payments (full card details are not stored; they are processed by payment providers);
• Communication data: content of messages sent via contact forms or email;
• Technical data: IP address, device type, browser type, cookies.

4. Purpose and Legal Basis for Processing Personal Data

• Contract performance (Art. 6(1)(b) GDPR): for processing, payment, and delivery of orders;
• User consent (Art. 6(1)(a) GDPR): for receiving marketing communications and using analytical or marketing cookies;
• Legitimate interest (Art. 6(1)(f) GDPR): to ensure Site security, analytics, improve its operation, and prevent fraud;
• Legal obligation (Art. 6(1)(c) GDPR): to comply with tax and accounting requirements.

5. Cookies and Analytics

The Site uses cookies to:

• Ensure proper operation of the Site and shopping cart (technical cookies);
• Analyze traffic and improve the user experience (analytical cookies).

Analytical and marketing cookies are used only after obtaining your consent via the cookie banner upon first visit. You can change or withdraw your consent at any time via cookie settings or browser options. Disabling cookies may affect Site functionality.

6. Sharing Personal Data with Third Parties

We share personal data only to the extent necessary to provide services, including:

• Payment providers (LiqPay, PayPal, Stripe) — for payment processing;
• Delivery services (Nova Poshta, DHL, Ukrposhta, InPost, DPD) — for order delivery;
• IT providers — hosting, technical support;
• Government authorities — in cases required by law.

Data processing agreements are concluded with all data processors if required by law.

7. International Data Transfers

Since the data controller is located in Ukraine, personal data of EU users may be transferred outside the EU. Such transfer is carried out based on the necessity to perform the sales contract (Art. 49(1)(b) GDPR) and with the application of appropriate technical and organizational security measures.

8. Data Retention Period

Order and financial data are retained for periods prescribed by tax and accounting legislation. Data processed on the basis of consent are retained until consent is withdrawn. After the retention period, data are deleted or anonymized.

9. User Rights

You have the right to:

• Access your personal data and obtain a copy;
• Request correction of inaccurate or outdated data;
• Request deletion of personal data (“right to be forgotten”), if not in conflict with the law;
• Restrict the processing of personal data;
• Receive your data in a structured, machine-readable format (right to data portability);
• Withdraw consent to personal data processing at any time;
• Object to the processing of personal data based on legitimate interest.

You can file a complaint:

• In Ukraine — to the Commissioner of the Verkhovna Rada of Ukraine for Human Rights;
• In the EU — to the data protection supervisory authority in your country of residence.

10. Contact Information

11. Changes to the Privacy Policy

We reserve the right to change this Privacy Policy. The current version is always available on the Site.