Privacy Policy

This privacy policy explains how we process your personal data when you use our online store and what rights you have under the GDPR.

Data controller

The controller of your personal data is the entity operating the store: [Company name], with its registered address at [Address]. For data protection matters, you can contact us at info@shroomsy.eu.

What data we collect

In connection with purchases and order fulfillment, we may process your first name, last name, email address, delivery address (or pickup point), phone number, and data necessary for invoicing and accounting.

Purpose of processing

We process data to: fulfill orders and provide our services, communicate about your order (including shipment status), issue sales documents (invoices), and meet tax and accounting obligations under applicable law.

Legal basis

Processing is based on: performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR), consent where required — e.g. certain cookies or marketing communications (Art. 6(1)(a) GDPR), and legal obligation, in particular for tax and accounting records (Art. 6(1)(c) GDPR).

Data retention

Order-related and accounting data are kept for as long as required by law; in practice, generally for 5 years from the end of the calendar year in which the tax obligation arose, where tax and accounting rules so require. Marketing data processed on the basis of consent are kept until you withdraw that consent.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, and to object where applicable. To exercise your rights, contact us at info@shroomsy.eu. You also have the right to lodge a complaint with a supervisory authority in your country of residence or where an issue arises.

Cookies

The website uses cookies for proper functioning, analytics (Google Analytics), and marketing (Facebook Pixel). You can manage cookie preferences via the consent banner shown on your first visit and through your browser settings.

Third parties

Data may be shared with partners necessary to provide our services, including the courier (DPD) for delivery, payment processors, and analytics providers — in line with GDPR-compliant arrangements such as processing agreements where required.

Contact

For any privacy-related questions, write to info@shroomsy.eu.