Last updated: 08/05/2026

This Privacy Policy explains how the online store SOFIAVARY processes the personal data of customers and website visitors.

1. Information on the collection of personal data and contact details of the controller

1.1 Thank you for visiting our online store SOFIAVARY. The protection of your personal data is important to us. Below, we inform you about how we process your personal data when you use our website. Personal data refers to all data by which you can be directly or indirectly identified.

1.2 The data controller in the sense of the General Data Protection Regulation, i.e., GDPR, is:

SOFIAVARY
Operator: [enter legal name of company / sole trader]
Address: [enter address]
ID No.: [enter ID No., if applicable]
Email: [enter email]

The controller is a natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 Our website uses SSL or TLS encryption for security reasons. You can recognize an encrypted connection by the https:// prefix and the padlock symbol in your browser's address bar.

2. Data collection when visiting the website

If you use our website for informational purposes only, meaning you do not register, place an order, or otherwise provide us with information, we only collect data that your browser automatically transmits to our server, known as server logs.

When visiting the website, we may process the following data in particular:

• page visited,
• date and time of access,
• amount of data transferred,
• source or link from which you came to the page,
• browser used,
• operating system used,
• IP address used, possibly in anonymized form.

The processing of this data is based on Article 6(1)(f) GDPR, i.e., on our legitimate interest in ensuring the stability, security, and proper functioning of the website. We do not use this data to identify you unless there are specific indications of unlawful use of the website.

3. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device and enable the proper functioning of the website, improve the user experience, and in some cases, also serve marketing or analytical purposes.

We mainly use:

• technically necessary cookies,
• functional cookies,
• analytical cookies,
• marketing cookies,
• third-party cookies.

Some cookies are deleted after the browser session ends. Other cookies remain on your device for a certain period and allow us or our partners to recognize your browser on your next visit.

Cookies may process information about the browser, device, IP address, location, website settings, shopping cart content, and website behavior, in particular.

If personal data is processed through cookies, the processing takes place:

• according to Article 6(1)(b) GDPR, if the processing is necessary for the performance of a contract or the execution of an order,
• according to Article 6(1)(f) GDPR, if we have a legitimate interest in the functionality and optimization of the website,
• according to Article 6(1)(a) GDPR, if your consent is required, for example, for marketing or analytical cookies.

You can change your cookie settings at any time in your browser. If you disable cookies, some website functions, such as the shopping cart or order completion, may not work correctly.

4. Contacting

If you contact us via the contact form, email, or another communication channel, we process the personal data you provide us during contact.

This may include, in particular:

• name and surname,
• email address,
• phone number,
• message content,
• data related to your order or inquiry.

We use this data solely for the purpose of handling your inquiry, communicating with you, and related administration.

The legal basis for processing is Article 6(1)(f) GDPR, i.e., our legitimate interest in responding to your inquiry. If the contact is aimed at concluding a contract or relates to an order, the legal basis is also Article 6(1)(b) GDPR.

Your data will be deleted after the final processing of the request, unless there are legal obligations for further retention.

5. Data processing when creating a customer account and processing an order

If you create a customer account or place an order in the online store SOFIAVARY, we process the personal data necessary for creating the account, concluding, and fulfilling the purchase contract.

This may include, in particular:

• name and surname,
• billing address,
• delivery address,
• email address,
• phone number,
• order details,
• payment details,
• order history,
• data necessary for complaints, returns, or customer support.

Processing is carried out in accordance with Article 6(1)(b) GDPR, as it is necessary for the performance of the contract.

You can cancel your customer account at any time by sending a request to email: [enter email].

After the complete processing of the contract or cancellation of the customer account, your data will be blocked with regard to tax, accounting, and commercial law retention obligations and then deleted after the expiry of the relevant periods, unless you have consented to further use of the data.

6. Use of data for direct marketing

6.1 Email newsletter subscription

If you subscribe to the SOFIAVARY newsletter, we will regularly send you information about news, collections, promotions, and offers from our online store.

The mandatory data for sending the newsletter is your email address.

We send the newsletter only with your consent according to Article 6(1)(a) GDPR. If we use a subscription confirmation, a so-called double opt-in, we will only start sending you the newsletter after you confirm your consent via the link sent to your email address.

When subscribing to the newsletter, we may also store the IP address, date, and time of registration to be able to prove consent.

You can unsubscribe from the newsletter at any time via the link provided in each newsletter or by sending a message to email: [enter email].

After unsubscribing, your email address will be removed from the newsletter sending database, unless there is another legal reason for its retention.

6.2 Email advertising for existing customers

If you have provided us with your email address when purchasing goods, we may send you offers for similar products from our assortment, especially jewelry, accessories, new collections, or promotions.

This processing is carried out on the basis of our legitimate interest in direct marketing according to Article 6(1)(f) GDPR.

You can object to the use of your email address for marketing purposes at any time, either via the link in the email or by sending a message to: [enter email].

7. Data processing for order fulfillment

7.1 Shipping and delivery

We pass on personal data that we collect in connection with an order to the shipping company if it is necessary for the delivery of the goods.

The transmitted data may include, in particular:

• name and surname,
• delivery address,
• email,
• phone number,
• shipment data.

The legal basis for the transfer of data is Article 6(1)(b) GDPR, as the transfer is necessary for the fulfillment of the purchase contract.

7.2 Payment services

For the purpose of payment processing, we may transmit necessary payment data to the relevant payment service provider or banking institution. The transmission takes place only to the extent necessary for the payment.

The legal basis is Article 6(1)(b) GDPR.

PayPal

If you choose to pay via PayPal, card payment via PayPal, direct debit via PayPal, or another PayPal payment service, your payment data will be transmitted to:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

The data transfer takes place solely for the purpose of payment processing.

SOFORT / Klarna

If you choose the SOFORT payment method, the payment processing takes place through the provider:

SOFORT GmbH
Theresienhöhe 12
80339 Munich
Germany

SOFORT is part of the Klarna Group. Data is transmitted solely for the purpose of payment processing and only to the necessary extent.

8. Order rating reminder

If you have given us explicit consent to do so, we may use your email address for a one-time reminder to rate your order or purchase in the SOFIAVARY store.

Processing is based on your consent according to Article 6(1)(a) GDPR.

You can revoke your consent at any time by sending a message to email: [enter email].

9. Use of social media and social plugins

9.1 Facebook

Our website may use links or buttons to the social network Facebook. To increase the protection of your personal data, these buttons are not integrated as unrestricted plugins, but only as HTML links.

This means that during a regular visit to our website, there is no automatic connection to Facebook servers. A connection can only occur if you actively click on the relevant button or link.

9.2 Instagram

Our website may use links or buttons to the Instagram service. These elements are integrated only as links. A connection to Instagram servers only occurs after you actively click on the link.

9.3 Google

Our website may use links or elements of Google services. Data processing by Google may occur particularly if you click on the relevant link or if you have given consent to the use of corresponding cookies.

10. Online marketing

10.1 Google DoubleClick

Our website may use the Google DoubleClick online marketing tool. This tool may use cookies to display relevant advertisements, evaluate advertising campaigns, and prevent repeated display of the same advertisements.

Processing is carried out on the basis of our legitimate interest in effective marketing of our website according to Article 6(1)(f) GDPR, or on the basis of your consent according to Article 6(1)(a) GDPR, if consent is required.

10.2 Google Ads Conversion Tracking

Our website may use Google Ads and conversion tracking. If you click on a Google ad, a conversion cookie may be stored on your device. These cookies are used to determine whether a user has performed a specific action, such as a purchase, after clicking on an ad.

Processing is carried out for the purpose of evaluating the effectiveness of advertising campaigns and optimizing our offers.

11. Web analytics

Google Analytics

Our website may use Google Analytics, which serves to analyze website traffic and user behavior.

Google Analytics uses cookies that allow analyzing the use of websites. The information obtained through cookies can be used to evaluate website traffic, compile reports on website activity, and provide other services related to website usage.

If IP address anonymization is activated, your IP address will be shortened before transmission or storage so that it is not directly associated with your person.

The processing of analytical cookies is based on your consent according to Article 6(1)(a) GDPR, if consent is required.

You can revoke or change your consent at any time via the cookie settings on our website.

12. Retargeting, remarketing, and recommendation advertising

12.1 Facebook Pixel / Meta Pixel

Our website may use Facebook Pixel, or Meta Pixel. This tool allows tracking user behavior after viewing or clicking on an advertisement and serves to evaluate the effectiveness of advertisements, create target groups, and display relevant advertisements.

Processing is carried out only if you have given your consent according to Article 6(1)(a) GDPR.

The data is generally anonymous for us, but may be further processed by the service provider according to its own privacy policy.

You can revoke your consent to the use of Facebook Pixel / Meta Pixel at any time via the cookie settings.

12.2 Remarketing Google Ads

Naše webové stránky mohou používat funkce Remarketingu Google Ads. Společnost Google může ve vašem zařízení uložit soubor cookie, který umožňuje zobrazování reklam na základě vašich předchozích návštěv našich webových stránek.

Zpracování probíhá na základě vašeho souhlasu dle čl. 6 odst. 1 písm. a GDPR, pokud je souhlas vyžadován, nebo na základě našeho oprávněného zájmu dle čl. 6 odst. 1 písm. f GDPR, pokud to právní předpisy umožňují.

13. Práva subjektu údajů

Dle platných právních předpisů na ochranu osobních údajů máte v souvislosti se zpracováním vašich osobních údajů následující práva:

13.1 Právo na přístup

Máte právo získat potvrzení, zda zpracováváme vaše osobní údaje, a pokud ano, máte právo získat přístup k těmto údajům a k informacím o jejich zpracování dle čl. 15 GDPR.

13.2 Právo na opravu

Máte právo požadovat opravu nepřesných osobních údajů nebo doplnění neúplných osobních údajů dle čl. 16 GDPR.

13.3 Právo na výmaz

Máte právo požadovat výmaz osobních údajů, pokud jsou splněny podmínky dle čl. 17 GDPR.

13.4 Právo na omezení zpracování

Máte právo požadovat omezení zpracování osobních údajů dle čl. 18 GDPR.

13.5 Právo na oznámení

Máte právo být informováni o opravě, výmazu nebo omezení zpracování osobních údajů, pokud se vás to týká, dle čl. 19 GDPR.

13.6 Právo na přenositelnost údajů

Máte právo získat osobní údaje, které jste nám poskytli, ve strukturovaném, běžně používaném a strojově čitelném formátu dle čl. 20 GDPR.

13.7 Právo odvolat souhlas

Pokud je zpracování založeno na vašem souhlasu, máte právo tento souhlas kdykoliv odvolat dle čl. 7 odst. 3 GDPR. Odvolání souhlasu nemá vliv na zákonnost zpracování provedeného před jeho odvoláním.

13.8 Právo podat stížnost

Máte právo podat stížnost u dozorového úřadu, pokud se domníváte, že zpracování vašich osobních údajů porušuje právní předpisy.

Dozorovým úřadem v České republice je:

Úřad pro ochranu osobních údajů
Pplk. Sochora 27
170 00 Praha 7
Česká republika
E-mail: posta@uoou.gov.cz
Telefon: +420 234 665 111

14. Právo vznést námitku

Pokud zpracováváme vaše osobní údaje na základě našeho oprávněného zájmu dle čl. 6 odst. 1 písm. f GDPR, máte právo kdykoliv vznést námitku proti takovému zpracování z důvodů týkajících se vaší konkrétní situace.

Pokud námitku vznesete, přestaneme vaše osobní údaje zpracovávat, pokud neprokážeme závažné oprávněné důvody pro zpracování, které převažují nad vašimi zájmy, právy a svobodami, nebo pokud zpracování není nezbytné pro určení, výkon nebo obhajobu právních nároků.

Pokud zpracováváme vaše osobní údaje pro účely přímého marketingu, máte právo kdykoliv vznést námitku proti takovému zpracování. Pokud námitku vznesete, přestaneme vaše osobní údaje pro účely přímého marketingu zpracovávat.

15. Doba uchování osobních údajů

Osobní údaje uchováváme pouze po dobu nezbytnou pro účely, pro které byly shromážděny, nebo po dobu stanovenou právními předpisy.

Doba uchování se řídí zejména:

• dobou nezbytnou pro vyřízení objednávky,
• dobou existence zákaznického účtu,
• dobou potřebnou pro vyřízení reklamací nebo vrácení zboží,
• účetními a daňovými povinnostmi,
• dobou trvání souhlasu, pokud je zpracování založeno na souhlasu,
• dobou nezbytnou pro ochranu našich právních nároků.

Po uplynutí příslušné doby budou osobní údaje vymazány nebo anonymizovány, pokud již neexistuje právní důvod pro jejich další zpracování.

---

Důležité: před zveřejněním vyplňte především: obchodní název/vlastník, adresa, IČO, kontaktní e-mail, datum poslední aktualizace a odstraňte veškeré služby, které nepoužíváte, např. PayPal, Klarna, Google Ads, Google Analytics nebo Meta Pixel.