Privacy policy

Last updated: January 18, 2026

The company WARAGOD s.r.o. (hereinafter referred to as "we" or the "Controller") operates this online store with the aim of providing you with a high-quality shopping experience. The protection of your personal data is our priority. This Privacy Policy describes how we collect, use, and protect your data in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data.

1. Personal Data We Collect

In order to process your order and provide our services, we process the following categories of data:

Identification and Contact Details: Name, surname, delivery and billing address, email address, phone number.
Purchase Data: Order history, purchased goods, payment documentation, data for potential returns (bank account number).
Technical Data: IP address, device type, cookie data (e.g., for shopping cart functionality).

2. Why We Process Data (Legal Basis)

We process your data only on the following legal grounds:

Performance of a Contract: Processing is necessary to fulfill your order, deliver the goods, and communicate regarding the status of the purchase. Without this data, a purchase cannot be completed.
Legal Obligation: We must retain invoices and accounting records (Accounting Act) and handle claims/complaints (Civil Code).
Legitimate Interest: Protection against fraud, basic traffic analytics, sending satisfaction surveys (Verified by Customers), and direct marketing (provided you are our customer).
Consent: For sending newsletters (if you are not a customer) or for using marketing cookies. You may withdraw your consent at any time.

3. To Whom We Provide the Data (Recipients)

Your data is safe. We only provide it to verified partners who are essential for the operation of the e-shop and are bound by data protection agreements:

Operations and Logistics:

Shopify Inc. – technical platform and e-shop hosting.
Carriers: Packeta Slovakia s. r. o., Slovenská pošta, a.s., or other courier companies (GLS, DPD, etc.) for the purpose of delivering the shipment.
Payment Services: Payment gateway providers (e.g., Stripe, Apple Pay, Google Pay, Comgate) and banks for secure processing of your payment.
External Accounting Firm – for processing accounting and tax documents.

Marketing and Analytics:

Google Ireland Ltd. – Google Analytics (traffic analysis) and Google Ads (advertising) tools.
Meta Platforms Ireland Ltd. – marketing tools for Facebook and Instagram.
Inspigroup s.r.o. (Glami) – product search engine and display of relevant advertising (Glami Pixel).

Verified by Customers (Heureka)

We determine your satisfaction with your purchase through email surveys as part of the Verified by Customers program, in which our e-shop participates. We send these to you every time you shop with us, unless you refuse the sending of electronic mail for direct marketing purposes pursuant to Act No. 452/2021 Coll. on Electronic Communications. The processing of personal data for the purpose of sending surveys within the Verified by Customers program is carried out on the basis of our legitimate interest, which consists of determining your satisfaction with your purchase. To send surveys, evaluate your feedback, and analyze our market position, we use a processor, which is the operator of the Heureka.sk portal (Heureka Group, a.s.). For these purposes, we may transfer information about the purchased goods and your email address. Your personal data is not transferred to any third party for its own purposes when sending email surveys. You may object to the sending of email surveys within the Verified by Customers program at any time by opting out of further surveys using the link in the survey email. In the event of your objection, we will no longer send you the survey.

4. Use of Cookies

Our e-shop uses cookies – small text files that are stored on your device. They help us ensure the proper functioning of the site, analyze traffic, and (with your consent) display relevant advertising.

Types of cookies we use:

Necessary (Technical): Required for the functioning of the site (e.g., adding goods to the cart, logging in). These cookies do not require your consent.
Analytical: Help us track the number of visitors and improve the site (e.g., Google Analytics). We process these only with your consent or on the basis of legitimate interest in an anonymized form.
Marketing: Allow us to display advertising on social media and other websites (e.g., Google Ads, Facebook Pixel, Glami). We use these cookies exclusively with your consent.

Cookie Management: You can set your cookie preferences in the cookie banner during your first visit to the site. You can also change settings directly in your browser (Chrome, Safari, Firefox, etc.), where you can block or delete cookies.

5. Data Transfer Outside the EU

When using the services of Google Ireland Ltd., Meta Platforms Ireland Ltd., Shopify Inc., and Stripe, personal data may be transferred to third countries (outside the EEA), specifically the USA and Canada. These transfers are carried out in accordance with the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) or on the basis of Standard Contractual Clauses (SCCs), ensuring a high level of protection for your data.

6. How Long We Retain Data

Invoices and Accounting Documents: 10 years (as required by the Accounting Act).
Order Fulfillment and Complaints: For the duration of the warranty period and statutes of limitation in order to defend our legal claims.
Marketing: Until you unsubscribe from the newsletter (an unsubscribe link is provided in every email).

7. Your Rights

You have the right to know what data we hold about you. Specifically, you have the right to:

Access to Data: You can ask us for confirmation of whether we process your data and request a copy thereof.
Rectification: If your data is outdated or incorrect, we will gladly correct it.
Erasure (Right to be Forgotten): You can request the erasure of data if it is no longer necessary for the purpose for which it was obtained (e.g., after the warranty and accounting periods have expired).
Objection: You have the right to object to processing based on legitimate interest (e.g., marketing, Heureka surveys).
Restriction of Processing: You have the right to request that we process your data only in a limited capacity (e.g., if you contest its accuracy).

You can exercise your rights by email at: info@katsudo.com.

If you are not satisfied with the handling of your request, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).