Floway

The administrator of personal data is

based in

Tax ID

Business ID

hereinafter referred to as the "Company"

Contact with the administrator is possible at the email address

1. Scope of collected data

Data provided voluntarily by the user (name, surname, address, email, phone number) for order fulfillment.

Transaction data (payment information handled by the payment operator).

Technical data (IP address, browser information, cookies).

2. Purposes and legal basis for data processing

Execution of the sales contract and order handling

Art. 6(1)(b) GDPR

Fulfillment of legal obligations (accounting, tax)

Art. 6(1)(c) GDPR

Own marketing (newsletter, if consent was given)

Art. 6(1)(a) GDPR

Legitimate interest of the administrator (e.g. pursuing claims)

Art. 6(1)(f) GDPR

3. Data retention period

Data related to contract execution – for the duration of the contract and until the expiry of claims (usually 6 years).

Data required by tax regulations – for 5 years from the end of the tax year.

Data processed on the basis of marketing consent – until consent is withdrawn.

Technical data (e.g. logs, cookies) – up to 30 days or until anonymized.

4. User rights

Data subjects have the following rights:

access to data,

rectification of data,

erasure of data ("right to be forgotten"),

restriction of processing,

data portability,

object to data processing,

withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),

lodge a complaint with the President of the Personal Data Protection Office (PUODO).

5. Right to be forgotten

The user has the right to request the deletion of their personal data if:

the data are no longer needed for the purposes for which they were collected,

consent for processing has been withdrawn,

an objection to processing has been raised,

the data were processed unlawfully.

Data deletion may be limited if legal regulations require the administrator to retain them (e.g. accounting documentation).

6. Data recipients

Courier companies and parcel locker operators – for order delivery.

Payment operator – for online payment processing.

IT and hosting service providers – for technical support of the store.

7. Cookies

The store uses cookies to ensure proper website operation, analyze traffic, and personalize content. Cookies can be blocked or deleted in browser settings, but this may affect site functionality.

8. Data security

Personal data are protected by appropriate technical and organizational measures ensuring security and confidentiality of processing.

9. Changes to the privacy policy

The administrator reserves the right to make changes to this Privacy Policy. The new version will be published on the Store's website in advance.