Privacy Policy
eviolet.eu
Last updated: 23 August 2026
1. Introduction
Alena Autushenka (“we”, “us”, or “our”) operates the website https://eviolet.eu (the “Site”), an online store specializing in African violets (Saintpaulia) and related products.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our Site, place an order, create an account, or otherwise interact with us. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
The data controller responsible for your personal data is:
Alena Autushenka
Warszawa, Poland
Email: eviolet@eviolet.eu
3. Personal Data We Collect
We may collect the following categories of personal data:
A. Data you provide directly
- Full name
- Email address
- Phone number
- Billing and shipping address
- Order details and purchase history
- Account login details (if you create an account)
- Messages sent through contact forms or email
B. Data collected automatically
- IP address
- Browser type and version
- Device information
- Pages visited, time spent on the Site, and referring URL
- Cookies and similar tracking technologies
C. Data from third parties (in the future)
- Payment providers (e.g. Stripe, PayPal)
- Shipping carriers
- Analytics services
- Email marketing platforms
4. Purposes and Legal Bases for Processing
We process your personal data for the following purposes and on the following legal bases:
|
Purpose |
Legal Basis (GDPR) |
|
Processing and fulfilling orders |
Performance of a contract (Art. 6(1)(b)) |
|
Creating and managing your account |
Performance of a contract / Legitimate interest |
|
Customer support and communication |
Performance of a contract / Legitimate interest |
|
Sending order confirmations and updates |
Performance of a contract |
|
Marketing emails and newsletters |
Consent (Art. 6(1)(a)) |
|
Improving the website and user experience |
Legitimate interest (Art. 6(1)(f)) |
|
Analytics and statistics |
Consent or Legitimate interest |
|
Preventing fraud and ensuring security |
Legitimate interest |
|
Compliance with legal obligations (tax, accounting) |
Legal obligation (Art. 6(1)(c)) |
5. Cookies and Tracking Technologies
Our Site uses cookies and similar technologies.
Types of cookies we use:
- Essential cookies – necessary for the website to function (e.g. shopping cart, login session)
- Functional cookies – remember your preferences
- Analytics cookies – help us understand how visitors use the Site (e.g. Google Analytics – planned)
- Marketing cookies – used for advertising and remarketing (planned)
You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the Site.
A detailed Cookie Policy will be published separately or integrated into this document once tracking tools are implemented.
6. Who We Share Your Data With
We do not sell your personal data. We may share it with the following categories of recipients only when necessary:
- Payment service providers (e.g. Stripe, PayPal)
- Shipping and logistics companies
- Email marketing platforms (e.g. Mailchimp, SendPulse)
- Analytics providers (e.g. Google Analytics)
- Hosting and IT service providers
- Professional advisers (accountants, lawyers)
- Public authorities when required by law
All third-party processors are required to process your data only according to our instructions and in compliance with GDPR.
7. International Data Transfers
Some of our service providers may be located outside the European Economic Area (EEA), including in the United States. In such cases, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions
- Other lawful transfer mechanisms
8. Data Retention
We retain your personal data only for as long as necessary:
- Order and transaction data — for the duration of the contract + statutory retention periods (typically 5–7 years for tax and accounting purposes under Polish law)
- Account data — until you delete your account or request deletion
- Marketing data — until you withdraw consent
- Technical logs and analytics data — usually up to 26 months
- Correspondence — up to 3 years after the last contact
After the retention period expires, data is securely deleted or anonymised.
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you
- Right to rectification — correct inaccurate or incomplete data
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal)
- Right to lodge a complaint with a supervisory authority
To exercise any of these rights, please contact us at eviolet@eviolet.eu. We will respond within 30 days.
Supervisory Authority in Poland:
Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warszawa
Website: https://uodo.gov.pl
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include SSL encryption, secure hosting, access controls, and regular security reviews.
11. Children’s Privacy
Our Site is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us immediately.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be published on this page with a new “Last updated” date. We encourage you to review this page periodically.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Email: eviolet@eviolet.eu
Controller: Alena Autushenka, Warszawa, Poland