Privacy policy
Last updated: 15 October 2026
This policy describes how we process personal data when you visit the AURORIQA online shop at auroriqa.com, order goods or communicate with us. It is based on Regulation (EU) 2016/679 (GDPR) and related Czech legislation.
Controller
The controller of personal data is Jan Světinský, a self-employed natural person, IČO 17309778, Bezručova 4201, 430 03 Chomutov, Czech Republic. E-mail: info@auroriqa.com.
What data we process
- Identification and contact data: first name, last name, delivery and billing address, e-mail, phone number.
- Order data: goods purchased, variant, price, shipping and payment method, order status, withdrawals and complaints.
- Payment data: payment confirmation and transaction status. The payment card number is processed by the payment gateway; we neither see nor store it.
- Communication with us: the content of e-mails and messages you send us.
- Technical data: IP address, device and browser data, website usage data and cookies.
Purposes and legal bases
- Processing your order (concluding and performing the purchase contract, payment, production, shipping, withdrawal, complaints): performance of a contract, Art. 6(1)(b) GDPR.
- Accounting, taxes and other legal obligations: compliance with a legal obligation, Art. 6(1)(c) GDPR.
- Fraud prevention, website security, protection and enforcement of legal claims: legitimate interest, Art. 6(1)(f) GDPR.
- Communicating with you (replies to questions and requests): performance of a contract or legitimate interest.
- Commercial communications and newsletter: only on the basis of your consent, Art. 6(1)(a) GDPR, or to the extent permitted by law; you can unsubscribe at any time via the link in the e-mail or by writing to our e-mail.
- Analytics and marketing cookies: only on the basis of your consent.
Providing the data needed to process an order is a contractual requirement; without it, the order cannot be concluded or delivered. You provide other data voluntarily.
Who we share data with
We share data only to the extent necessary for the stated purposes, with the following categories of recipients (processors and other controllers):
- Shopify – the operator of the platform on which the online shop runs (hosting, order management, checkout, sending e-mails to customers).
- Payment gateway provider – payment processing; you enter payment details directly at checkout.
- Print manufacturer in the European Union – to make and dispatch the goods, we pass on the data needed to process the order, in particular name, delivery address and contact.
- Carrier – name, delivery address, phone number and e-mail for delivering the parcel.
- IT, e-mail and accounting service providers, and where applicable a tax or accounting advisor.
- Public authorities, where the law requires us to.
We do not sell personal data.
Transfers outside the EU
Some providers (in particular Shopify and payment service providers) may also process data outside the European Economic Area. In that case we rely on lawful transfer mechanisms, for example a European Commission adequacy decision or standard contractual clauses. You can find more about how Shopify processes data in Shopify's privacy policy for consumers and at privacy.shopify.com.
How long we keep data
We keep data only for as long as we need it for the given purpose: order data for the duration of the contractual relationship and the handling of any withdrawal or complaint; accounting and tax documents for the period set by law; data needed to protect legal claims for as long as the claims can be asserted; data processed on the basis of consent until the consent is withdrawn. After these periods we delete or anonymize the data.
Cookies
The Shopify platform uses cookies that are necessary for the operation of the shop, for example for the cart, checkout and security. These do not require your consent. Other cookies (analytics and marketing), if we use them, are stored only on the basis of your consent, which you can give or refuse in the cookie banner and change or withdraw at any time. You can also delete or block cookies in your browser settings; some functions of the website may then not work.
Your rights
You have the right:
- to access your personal data and to receive a copy of the data processed,
- to rectification of inaccurate data or completion of incomplete data,
- to erasure of data where the reason for processing has ceased and the law does not require us to retain it,
- to restriction of processing,
- to portability of the data you have provided to us and that we process automatically on the basis of consent or a contract,
- to object to processing based on legitimate interest,
- to withdraw consent at any time; withdrawal does not affect the lawfulness of processing before its withdrawal.
You can exercise your rights by e-mail at info@auroriqa.com. Before handling a request we may ask you to verify your identity. We do not use automated decision-making that would produce legal effects concerning you or similarly significantly affect you.
Complaint
If you believe that we process data in breach of legal regulations, please contact us so we can resolve the matter. You also have the right to lodge a complaint with the supervisory authority, which in the Czech Republic is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), uoou.gov.cz.
Children
The online shop is not intended for children and we do not knowingly collect personal data from them.
Changes to this policy
We may update this policy, for example when service providers or legal regulations change. The current version is always published on this page with the date of the last update.
Contact
For questions about the processing of personal data you can contact us by e-mail at info@auroriqa.com or by post at Jan Světinský, Bezručova 4201, 430 03 Chomutov, Czech Republic.