1. Controller
The controller of personal data processed through the Shop is eMarkest, s.r.o., with its registered and returns address at Domažlická 1232/3, 130 00 Praha 3 – Žižkov, Czech Republic, company registration number (IČO) 24272973, VAT number (DIČ) CZ24272973.
Questions about how we process personal data: info@kamashop.io or via the contact page.
We process personal data in accordance with Regulation (EU) 2016/679 (the GDPR) and applicable national data-protection law.
2. What data we process and why
| Purpose | Legal basis | Data categories | Retention |
|---|---|---|---|
| Fulfilling an order and performing the purchase contract | Performance of a contract (Art. 6(1)(b) GDPR) | Name, address, email, phone, order number, payment and delivery data | 5 years from the end of the contractual relationship |
| Handling complaints and withdrawals | Compliance with a legal obligation (Art. 6(1)(c) GDPR) | Name, address, email, order number, description of the complaint | 5 years from resolution of the complaint |
| Marketing (newsletter) | Consent (Art. 6(1)(a) GDPR) | Email address | Until consent is withdrawn, at most 3 years from your last confirmed activity |
| Cookies and site analytics | Consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR) | IP address, behavioural data, device fingerprint | Up to 24 months, depending on the cookie type |
| Legal obligations (accounting and tax) | Legal obligation (Art. 6(1)(c) GDPR) | Invoicing data | Per tax-law requirements (10 years) |
Special categories: the type of goods ordered may indirectly reveal information about your health or sexual life. Such data may qualify as a special category of personal data under Art. 9 GDPR. We are documenting the legal basis and the relevant exemption for this processing. Until that assessment is complete, please do not email us diagnoses, medical reports or other health documentation.
3. Recipients and processors
We share personal data only where necessary:
- Delivery: Packeta and its subcontractors, only to the extent needed to deliver your order.
- Payment: the payment provider used for your order. [PENDING gateway selection]
- Accounting and tax: the accounting firm and tax authorities, where legally required.
- Hosting: Hostinger, as a processor under Art. 28 GDPR, and its approved sub-processors.
- Newsletter and analytics tooling: [PENDING final tooling list]
Data is processed primarily in the EU/EEA. Where data is processed outside the EU/EEA, the transfer is based on an adequacy decision or appropriate safeguards, in particular the European Commission’s standard contractual clauses.
4. Your rights
You have the right to:
- access, rectify, erase and restrict the processing of your personal data;
- data portability;
- object to processing, including for marketing;
- withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal;
- lodge a complaint with a supervisory authority in your country of residence or where the controller is established.
Send requests to info@kamashop.io. We will respond within 30 days; this period may be extended by up to two further months where necessary.
5. Cookies
We use essential cookies (for example, to keep the basket working), analytics cookies and, where consented, marketing cookies. Consent is managed through the cookie banner, and you can change your cookie settings at any time. [PENDING final tooling list — analytics and marketing tooling to be confirmed]
6. Security and changes
We protect personal data with appropriate technical and organisational measures, including encryption and access controls. This policy may be updated from time to time; the current version is always published here. We will inform you of material changes in a manner appropriate to the nature of the change.