Privacy Policy
Home »1. Controller
This privacy policy explains what personal data KamaShop processes and why. The controller of personal data processed through the Shop is eMarkest, s.r.o., with its registered and returns address at Domažlická 1232/3, 130 00 Praha 3 – Žižkov, Czech Republic, company registration number (IČO) 24272973, VAT number (DIČ) CZ24272973.
Questions about this privacy policy: info@kamashop.io or via the contact page. You can also file a complaint if you believe we mishandled your data.
We process personal data in accordance with Regulation (EU) 2016/679 (the GDPR) and applicable national data-protection law.
2. What data we process and why
| Purpose | Legal basis | Data categories | Retention |
|---|---|---|---|
| Fulfilling an order and performing the purchase contract | Performance of a contract (Art. 6(1)(b) GDPR) | Name, address, email, phone, order number, payment and delivery data | 5 years from the end of the contractual relationship |
| Handling complaints and withdrawals | Compliance with a legal obligation (Art. 6(1)(c) GDPR) | Name, address, email, order number, description of the complaint | 5 years from resolution of the complaint |
| Marketing (newsletter) | Consent (Art. 6(1)(a) GDPR) | Email address | Until consent is withdrawn, at most 3 years from your last confirmed activity |
| Cookies and site analytics | Consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR) | IP address, behavioural data, device fingerprint | Up to 24 months, depending on the cookie type |
| Legal obligations (accounting and tax) | Legal obligation (Art. 6(1)(c) GDPR) | Invoicing data | Per tax-law requirements (10 years) |
Special categories: the type of goods ordered may indirectly reveal information about your health or sexual life. Such data may qualify as a special category of personal data under Art. 9 GDPR. We are documenting the legal basis and the relevant exemption for this processing. Until that assessment is complete, please do not email us diagnoses, medical reports or other health documentation.
3. Recipients and processors
We share personal data only where necessary:
- Delivery: Packeta and its subcontractors, only to the extent needed to deliver your order.
- Payment: the payment provider used for your order.
- Accounting and tax: the accounting firm and tax authorities, where legally required.
- Hosting: Hostinger, as a processor under Art. 28 GDPR, and its approved sub-processors.
- Newsletter and analytics tooling: Google Analytics 4
We process data primarily in the EU/EEA. Where data is processed outside the EU/EEA, the transfer is based on an adequacy decision or appropriate safeguards, in particular the European Commission’s standard contractual clauses.
4. Privacy policy: your rights
You have the right to:
- access, rectify, erase and restrict the processing of your personal data;
- data portability;
- object to processing, including for marketing;
- withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal;
- lodge a complaint with a supervisory authority in your country of residence or where the controller is established.
Send requests to info@kamashop.io. We will respond within 30 days; this period may be extended by up to two further months where necessary.
5. Privacy policy: cookies
We use essential cookies (for example, to keep the basket working), analytics cookies and, where consented, marketing cookies. For example, you manage consent through the cookie banner, and you can change your cookie settings at any time.
6. Security and changes
We protect personal data with appropriate technical and organisational measures, including encryption and access controls. We may update this policy from time to time; we always publish the current version here. Therefore, check this page whenever you want to confirm the current rules. We will inform you of material changes in a manner appropriate to the nature of the change.