Privacy Policy

1. Data Controller

The operator of jondralclothing.com is responsible for your personal data processing.

2. Collected Data

We process:

  • Identity Data (name, address)
  • Transaction Data (order history, payment info)
  • Technical Data (IP address, cookies)

Processing occurs under:
✓ Contract fulfillment (Art. 6(1)(b) GDPR) – Order processing
✓ Consent (Art. 6(1)(a) GDPR) – Marketing communications
✓ Legal obligation (Art. 6(1)(c) GDPR) – Tax compliance

4. Data Sharing

Recipients may include:
• Payment processors (Stripe, PayPal)
• Logistics partners (DHL, UPS)
• IT service providers (EU-based with GDPR contracts)

5. International Transfers

Data may transit through:

  • Switzerland (Adequacy Decision)
  • USA (Privacy Shield-certified providers only)

6. Retention Periods

  • Orders: 10 years (tax requirements)
  • Accounts: Until deletion request
  • Cookies: 12-24 months

7. Your Rights

You may request:
→ Data access/rectification
→ Erasure (“right to be forgotten”)
→ Processing restriction
→ Data portability

8. Cookies

We use:
• Essential cookies (checkout functionality)
• Analytics cookies (anonymized)
Manage preferences via browser settings.

9. Security Measures

We implement:
• TLS 1.3 encryption
• Regular security audits
• Two-factor authentication for staff

10. Policy Updates

Changes will be posted here. Last updated: [Month/Year]

Exercising Your Rights
Submit requests via:

  • Your account privacy dashboard
  • Dedicated GDPR request form