We take the protection of data and privacy very seriously and comply with applicable national and European data protection regulations.
Below we provide the most important information about how we collect, process and use data, including (and in particular) what information
and personal data we store and what we do with it.

1. Controller

   The person responsible for the collection, processing and use of your personal data on this website, in accordance with the General Data
   Protection Regulation (“GDPR”), is Lenka Koutníková, Prague – Nusle, Jaromírova 686/41, 128 00, Company ID: 01064860.

2. Collection, processing and use of personal data
   1. Personal data

      Personal data is defined as any information relating to an identified or identifiable natural person (Article 4(1) GDPR). This includes,
      in particular, your name, e-mail address, telephone number, address, date of birth, as well as other data you provide when placing an
      online order, registering, creating a customer account or submitting an enquiry via our contact form (hereinafter “Personal Data”).

      This Privacy Notice does not apply to statistical data that we collect for technical reasons when you visit our website and that is anonymous
      and cannot be directly linked to you. Such statistical data may include information about the number of visits to our website, time spent on the
      website, pages visited, information about your web browser, IP address, and software/hardware characteristics. This data is collected and processed
      in aggregated or anonymized form to understand how the website is used and to optimize it accordingly.

   2. General purposes and legal bases

      In general, you can use our website without providing Personal Data. Where our website collects Personal Data, this is done voluntarily whenever possible.
      We collect and process the following categories of Personal Data for the following purposes and legal bases:

      1. Contract performance and customer communication (WooCommerce)

         Our website uses the WordPress platform and the WooCommerce e-commerce system. For our business relationship, we process Personal Data necessary
         to perform a contract and handle your requests, such as your name, billing and delivery address, e-mail address, telephone number, order contents,
         purchase history and related information. We use this data to process orders, provide customer support, manage deliveries, and for technical and
         administrative purposes.

         The legal basis for this processing is Article 6(1)(b) GDPR (performance of a contract) and, where applicable, Article 6(1)(c) GDPR (compliance with legal obligations).
         We retain order and invoicing data for the period required by applicable accounting and tax laws, typically up to 10 years.

      2. Creation of a customer profile in our database

         When you first contact us by e-mail or via the contact form, or when you create a customer account and/or place an order, we may create a profile in our database.
         Any Personal Data you subsequently provide, for example when placing additional orders or contacting customer support, may be linked to your profile.

         The legal basis for this processing is Article 6(1)(b) GDPR (performance of a contract and pre-contractual measures) and, where applicable, Article 6(1)(c) GDPR
         (legal obligations). We retain such data for the duration of the business relationship and in accordance with statutory retention periods.

      3. Subscription to the e-mail newsletter & analysis of newsletter usage
         1. Subscription

            If you subscribe to our e-mail newsletter, we use the Personal Data you provide (in particular your e-mail address) to send you newsletters.
            Any additional information is provided voluntarily and may be used to address you more personally and tailor newsletter content to your interests.
            Newsletters may contain current news and information about our products as well as general advice and information related to our products.

            The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR. We retain this Personal Data until you unsubscribe, or for a maximum
            of 18 months if you have not opened any newsletter, unless we are legally required to retain it longer. You may withdraw your consent at any time with immediate
            effect by using the unsubscribe link included in our newsletters or by contacting us.

         2. Newsletter usage analysis

            We continuously strive to improve our services. For this reason, we may evaluate newsletter delivery and usage, for example whether the provided e-mail address exists,
            whether the newsletter was opened, which links were clicked, and whether a response or a return (e.g., an automatic reply or error message) occurred.

            The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR. We retain this Personal Data for up to 2 years, unless we are legally required
            to retain it longer.

         3. The website operator VERmedia s.r.o., Dřevná 381/4, 128 00 Nové Město, Company ID: 08559228 – analyzes only anonymized data obtained from Google Analytics.

      4. Website analytics (Google Analytics 4)

         Our website uses Google Analytics 4 (“GA4”), a web analytics service provided by Google LLC. GA4 is implemented through the Complianz consent management platform.

         Depending on the user’s consent preferences, GA4 may operate in two modes:

         • Without consent: GA4 may be technically loaded in a limited, anonymized mode. In this mode, no cookies are stored, IP addresses are anonymized,
           and the collected data is used exclusively for aggregated statistical purposes without profiling or user identification.
         • With consent: GA4 performs full analytical measurement using cookies, including information about user interactions with the website.

         The processed data may include anonymized IP addresses, device and browser information, operating system, and interaction events.

         Data collected via GA4 may be transferred to servers outside the European Union, in particular to the United States. Such transfers are based on the EU Standard
         Contractual Clauses in accordance with Article 46 GDPR.

      5. Payment processing (Stripe)

         Payments on this website are processed via Stripe Payments Europe Ltd. Stripe acts as an independent data controller for payment data.

         Payment card details are processed directly by Stripe and are never stored on our servers. Stripe may process personal data such as name, payment details, transaction data
         and IP address in accordance with applicable legal requirements, including PCI-DSS standards and fraud prevention obligations.

         Payment data may be transferred outside the European Union, including to the United States. Such transfers are safeguarded by EU Standard Contractual Clauses.

         Further information can be found in Stripe’s Privacy Policy.

   3. Persons under the age of 16 may not provide us with any Personal Data without the prior consent of their parent or legal guardian.
   4. Right to withdraw consent

      Where your consent is the legal basis for the processing of your Personal Data, you may withdraw your consent at any time without giving reasons.
      Please note that withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

3. How we share your personal data with third parties
   1. If we engage other companies to process Personal Data on our behalf and for this purpose transfer your Personal Data to them, we require such companies to protect
      your Personal Data and to use it only for the purposes specified in our agreements with them.
   2. Our website is hosted by Contabo GmbH, an EU-based hosting provider. Contabo acts as a data processor and processes Personal Data solely on our instructions and in
      accordance with Article 28 GDPR.
   3. Where, depending on the services used, Personal Data is transferred to countries outside the EU/EEA (in particular in connection with Google Analytics and Stripe),
      such transfers are made only where appropriate safeguards are in place, such as the EU Standard Contractual Clauses (Article 46 GDPR).
   4. Further information, such as copies of the relevant safeguards regarding protective measures implemented for specific transfers, may be requested at [email protected].
4. Your rights regarding your Personal Data
   1. If certain conditions are met, you have the following rights:
      1. To request access to the Personal Data we process about you
      2. To request correction of your Personal Data
      3. To request deletion of your Personal Data
      4. To request restriction of the processing of your Personal Data
      5. To request that your Personal Data be provided in a structured, commonly used and machine-readable format (right to data portability)
      6. To withdraw any future consent with future effect
      7. Not to be subject to a decision based solely on automated processing, including profiling
   2. To exercise your rights, you may contact us:
      • Company
      • Lenka Koutníková
      • Registered office
      • Prague – Nusle, Jaromírova 686/41
      • E-mail
      • [email protected]

      We will respond to your request in accordance with the applicable legal provisions.

5. Cookies
   1. If you would like to learn more about our cookie policy, please click here and read our cookie policy:
      https://fashioninfantasy.com/cookies/
6. Data security
   1. We endeavor to store your Personal Data using all available technical and organizational measures in order to prevent access by third parties.
   2. Personal Data is stored on servers with appropriate security standards to prevent unauthorized access.
7. Our contact for data protection matters
   1. If you have any questions regarding this Privacy Notice or the manner in which your Personal Data is processed, please contact us at [email protected].
8. Your right to lodge a complaint
   1. If you believe that our processing of Personal Data violates data protection laws, you have the right to lodge a complaint with the competent supervisory authority.