This Privacy Policy explains what personal data is processed when the ENTUZIAST Online Store at https://entuziast.shop/en/ is used, the purposes for which the data is used, the recipients to whom it may be disclosed, and the rights available to the User.

1. PERSONAL DATA CONTROLLER AND SCOPE

1.1. The personal data controller is:

Товариство з обмеженою відповідальністю «Торговий дім Ентузіаст»
EDRPOU code: 45219565
Tax identification number: 452195604232
Legal address: 51284, Дніпропетровська область, Самарівський район, с. Новоселівка, Осіння, будинок № 59Б
Telephone: +380935668382
Email: entuziast-td@ukr.net

hereinafter referred to as the Seller.

1.2. This Policy applies to data obtained by the Seller through the Online Store when pages are viewed, an account is created, an order is placed and fulfilled, the Seller is contacted, or other Online Store functions are used.

1.3. Personal data is processed in accordance with the Law of Ukraine “On Personal Data Protection” No. 2297-VI, the Law of Ukraine “On Electronic Commerce” No. 675-VIII, and other applicable requirements of Ukrainian law.

1.4. The conditions for purchasing goods are set out in the Public Offer Agreement.

2. DATA THAT MAY BE PROCESSED

2.1. The Seller processes only the data required to operate the Online Store, place and fulfil orders, communicate with the User, and comply with legal requirements.

2.2. Depending on the User’s actions, the following data may be processed:

• first and last name;
• telephone number and email address;
• country, region, settlement, postcode, delivery address or selected carrier branch;
• account data, if the User creates an account, including the email address and authentication data in protected form;
• the contents, total and history of orders, selected payment and delivery methods, order comments and fulfilment status;
• the identifier and status of a payment transaction required to confirm payment or issue a refund;
• the contents of enquiries and correspondence, and information voluntarily provided by the User when communicating with the Seller;
• IP address, browser and device information, browser language, date and time of access, technical logs, pages visited and actions performed on the Site;
• cookies and other technical identifiers described in Section 7 of this Policy.

2.3. The Seller does not receive or store complete payment card details. Card details are entered on a secure payment page and processed by the WayForPay payment service.

2.4. For age confirmation, the Online Store stores only a technical indication that the 18+ confirmation button was selected. The age window does not collect a date of birth or identity document details.

3. SOURCES OF DATA

3.1. The Seller obtains data:

• directly from the User when forms are completed, an order is placed, an account is registered, or the Seller is contacted;
• automatically through the operation of the Online Store, its servers, cookies and connected services;
• from the payment service, in the form of payment transaction status information;
• from the delivery service, in the form of information required to arrange delivery and track its status.

3.2. The User is responsible for ensuring that the data provided to the Seller is accurate and up to date.

4. PURPOSES OF DATA PROCESSING

4.1. Personal data may be processed for:

• creating and maintaining the User’s account;
• placing, confirming, paying for, delivering, returning and recording orders;
• communicating with the User about an order or enquiry;
• creating payment, accounting and tax records;
• complying with legal requirements and responding to lawful requests from authorised public authorities;
• maintaining the operation, security and technical stability of the Online Store, preventing misuse and resolving errors;
• analysing use of the Online Store, measuring advertising performance and improving pages;
• sending advertising or informational messages only where the User has provided separate consent.

4.2. Data shall not be used for purposes incompatible with this Policy without an appropriate legal basis.

5. LEGAL BASES FOR PROCESSING

5.1. The legal bases for processing are:

• entering into and performing a contract with the User, or taking steps at the User’s request before entering into a contract;
• compliance with the Seller’s legal obligations;
• the User’s consent where such consent is required, including for marketing messages;
• other grounds expressly provided by Ukrainian law.

5.2. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal and does not terminate processing required to perform a contract or comply with a legal obligation.

6. RECIPIENTS OF DATA

6.1. Data is disclosed only to the extent necessary for the relevant operation to the following recipients:

• WayForPay, to process, confirm and refund online payments;
• Nova Poshta, to arrange, deliver and track shipments;
• banks and other participants in payment transactions where required to perform the transaction;
• hosting, email, technical support and other service providers required to operate the Online Store;
• Google Analytics and Google Ads, for web analytics, measurement of Site visits and actions, and advertising performance measurement;
• public authorities, courts or other persons where disclosure is required by law or necessary to protect lawful rights.

6.2. Payment, logistics and analytics service providers may independently determine how they process the data they receive under their own terms and privacy policies.

6.3. Information about data processing by Google services is available in the Google Privacy Policy.

7. COOKIES AND ANALYTICS SERVICES

7.1. The Online Store uses cookies and similar technical means to:

• maintain sessions and authentication;
• store the shopping cart, language and other settings;
• remember confirmation that the User has reached the age of 18;
• maintain security and stable operation;
• perform web analytics and measure advertising performance.

7.2. The entuziast_age_verified cookie stores the 18+ confirmation indication for 30 days. It does not contain a date of birth or identity document details.

7.3. Session cookies are retained for the duration of a session or for the technical period required for the relevant function. Google Analytics may use the _ga and _ga_<identifier> cookies to distinguish visitors and sessions. Google Ads may use cookies and other identifiers to measure advertising clicks and conversions.

7.4. The User can view, block or delete cookies through browser settings. Blocking technically necessary cookies may prevent authentication, the shopping cart, checkout and age confirmation from operating correctly.

8. DATA RETENTION AND SECURITY

8.1. Personal data is retained no longer than required for the purposes specified in this Policy, unless a longer period is required by law, accounting or tax rules, or the need to protect the rights of the parties.

8.2. After the relevant purpose and mandatory retention period have ended, the data is deleted or anonymised unless further retention is required by law.

8.3. The Seller uses organisational and technical measures to protect data against unauthorised access, alteration, loss, destruction or disclosure. Access is granted only to persons who require it to perform the relevant duties.

8.4. Transmission of information over the Internet cannot be completely protected against every risk. If circumstances that may affect data security are identified, the Seller takes measures appropriate to the nature of the incident and applicable law.

9. USER RIGHTS

9.1. The User has the rights provided by Article 8 of the Law of Ukraine “On Personal Data Protection”, including the right to:

• know the sources, location and purposes of collection and the identity of the controller of their personal data;
• receive information about access conditions and third parties to whom the data is disclosed;
• access their personal data;
• request correction or destruction of inaccurate or unlawfully processed data;
• object to processing in cases provided by law;
• withdraw consent where processing is based on consent;
• submit a complaint to the Ukrainian Parliament Commissioner for Human Rights or a court;
• use legal remedies in the event of a violation of data protection law.

9.2. To exercise these rights, the User may contact the Seller using the details in Section 10. The Seller may request information necessary to identify the applicant and protect the data against unauthorised access.

9.3. A request for deletion is fulfilled within the limits of applicable law. Data required to fulfil an outstanding order or comply with accounting, tax or other legal obligations may be retained for the period established by law.

10. MESSAGES, POLICY UPDATES AND CONTACT DETAILS

10.1. Messages concerning the placement, payment, delivery or status of an order are service messages and may be sent without separate marketing consent because they are required to fulfil the order.

10.2. Advertising and other marketing messages are sent only where the relevant consent has been provided. The User may unsubscribe by using the link in a message, where available, or by contacting the Seller. Unsubscribing from advertising does not affect order fulfilment.

10.3. The Online Store is intended for the sale of alcoholic beverages to persons who have reached the age of 18. The Seller does not knowingly collect data for the sale of alcoholic beverages to minors.

10.4. The Seller may update this Policy following changes to the law, Online Store functionality or connected services. A new version applies from the time it is published unless otherwise stated in that version. The current version is available at https://entuziast.shop/en/privacy.html.

10.5. The User may contact the Seller concerning personal data processing or the exercise of their rights:

Товариство з обмеженою відповідальністю «Торговий дім Ентузіаст»
EDRPOU code: 45219565
Address: 51284, Дніпропетровська область, Самарівський район, с. Новоселівка, Осіння, будинок № 59Б
Telephone: +380935668382
Email: entuziast-td@ukr.net