1. Introduction

This Privacy Policy describes how we collect, use, share, and protect your personal information when you visit or make a purchase from our website https://shungite-c60.com (the “Site”). It applies to all users worldwide, including users in the European Union (GDPR), the United States (CCPA), and other regions.

  1. Data Controller

Company Name: KARELIA D.O.O.

Company registration number: 9095268000
Registered address: Presernova Ulica 49, Murska Sobota, 9000, Slovenia
Email: shungitec60@gmail.com

Our company does not process sensitive data or data of minors on a large scale, hence we have not appointed a Data Protection Officer (DPO).

  1. Types of Data We Collect

We collect the following personal data to provide our services:

  • Identification and contact details: Name, email address, phone number, and shipping address.
  • Payment data (processed securely via Stripe, PayPal, Apple Pay, Google Pay).
  • Technical data: IP address, device information, browsing history (via Google Analytics and Facebook Pixel).
  • Location data (voluntarily provided for shipping purposes).
  1. Legal Basis for Data Processing

We collect and process your personal data based on:

  • Your consent (cookie usage, analytics)
  • Contractual necessity (order processing and delivery)
  • Compliance with legal obligations (tax and record-keeping)
  • Legitimate interests (fraud prevention, website security)
  1. How We Use Your Data

We use your personal data to:

  • Process and deliver your orders.
  • Communicate with you regarding your orders.
  • Improve our website’s functionality and performance.
  • Prevent fraud and enhance security.
  1. Sharing Your Personal Data

We may share your data with trusted third-party service providers:

  • Payment processors (Stripe, PayPal, Apple Pay, Google Pay)
  • Logistic providers and couriers for delivery purposes
  • Analytics providers (Google Analytics, Facebook Pixel)
  • Warehouse Management System (Multiorders API)

Data shared with some of these service providers might be processed outside the European Union. We ensure appropriate safeguards, such as standard contractual clauses, are implemented to protect your data.

  1. Cookies and Tracking Technologies

Our website uses cookies, including:

  • Essential cookies (necessary for basic functionality)
  • Analytics cookies (Google Analytics) for performance evaluation
  • Marketing cookies (Facebook Pixel) to improve user experience and targeting

You can control or disable cookies through your browser settings at any time. We obtain your consent for non-essential cookies (analytics and marketing) through a cookie consent tool on our Site. You may withdraw consent or manage preferences at any time.

  1. Data Security Measures

We take data security seriously and implement appropriate technical and organizational measures:

  • Secure data encryption (SSL)
  • Access controls
  • Regular security audits
  • Secure payment gateways compliant with PCI DSS
  • Limited access to data by authorized personnel only
  1. International Data Transfers

Some third-party providers may process data outside the EU/EEA. We ensure compliance with applicable laws by entering Standard Contractual Clauses or other legally recognized safeguards.

  1. Your Rights Under GDPR and CCPA

If you reside in the EU (GDPR) or California, USA (CCPA), you have rights regarding your personal data:

  • Access your data
  • Request corrections to inaccurate data
  • Request deletion of your data
  • Request restriction or object to data processing
  • Request data portability
  • Withdraw consent at any time
  • Opt-out of data sale (specific for California residents, even though we do not sell your data). We do not sell your personal data as defined under CCPA, except where such data is shared with analytics or marketing providers under strict agreements limiting its use.

You can exercise your rights by emailing us at shungitec60@gmail.com

  1. Age Restrictions

Our Site is not intended for use by individuals under 16 (or 13 where applicable under local law). We do not knowingly collect personal data from minors. If we become aware of such data collection, we will immediately delete this information.

  1. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined above or to comply with legal requirements. Data related to purchases is retained for up to 10 years for accounting and tax purposes. Technical and analytics data is retained for up to 26 months (Google Analytics default retention period) unless otherwise required by law.

  1. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be effective immediately upon posting on this page. You can view our current Privacy Policy at any time at: https://shungite-c60.com/privacy-policy/. We recommend reviewing this policy periodically to stay informed.

Last updated: 16 March 2025

  1. Complaints and Contacts

If you have any questions or concerns regarding our Privacy Policy, contact us at shungitec60@gmail.com.

If you believe your rights have been violated or are unsatisfied with our handling of your request, you have the right to lodge a complaint:

  • Slovenian Data Protection Authority:
    Informacijski pooblaščenec Republike Slovenije
    Dunajska cesta 22, 1000 Ljubljana, Slovenia
    Website: https://www.ip-rs.si
  • California Attorney General (for California residents):
    Website: https://oag.ca.gov/privacy/ccpa
    Phone: +1 (800) 952-5225

Contact Us

For any questions or concerns regarding this Privacy Policy or your data protection rights, please contact us at:

  • Email: shungitec60@gmail.com