Privacy Policy

Last Updated: June 10, 2023

Welcome to Kovafeo.com ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services related to our mini-bakery business, including the production and sale of fresh pastries and desserts, including gluten-free and vegan options.

By accessing or using Kovafeo.com, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our website.

This Privacy Policy is compliant with the General Data Protection Regulation (GDPR) and other applicable privacy laws. We regularly review and update our practices to ensure ongoing compliance with evolving privacy regulations.

1. Information We Collect

We collect several types of information from and about users of our website, including:

Personal Identifiable Information: This may include your name, email address, postal address, telephone number, and payment information when you place an order, register for an account, subscribe to our newsletter, or participate in promotions or surveys.
Order Information: Details about the products you purchase, including dietary preferences, order history, and special instructions.
Technical Data: Information about your browsing actions and patterns, including IP address, browser type and version, time zone setting, operating system, and platform.
Usage Data: Information about how you use our website, products, and services.
Communication Data: Includes any communication you send to us, whether through email, contact forms, or social media.
Cookie Data: Information collected through cookies and similar tracking technologies (see our Cookie Policy section below).

2. How We Collect Your Information

We use different methods to collect data from and about you, including:

Direct Interactions: You may provide us with your personal information when filling in forms, creating an account, placing orders, or communicating with us.
Automated Technologies: As you navigate through our website, we may automatically collect technical data through cookies, server logs, and similar technologies.
Third Parties: We may receive information about you from various third parties, such as analytics providers, payment processors, and delivery services.

3. How We Use Your Information

We use your information for the following purposes:

To process and deliver your orders, including managing payments and collecting fees
To manage our relationship with you, including notifying you about changes to our terms or privacy policy
To improve our website, products, and services
To recommend products that may interest you based on your order history and preferences
To administer and protect our business and website
To deliver relevant website content and advertisements to you
To measure or understand the effectiveness of the advertising we serve to you
To comply with legal obligations

4. Legal Basis for Processing

Under the GDPR, we must have a legal basis for processing your personal data. We rely on the following legal bases:

Contractual Necessity: Processing is necessary for the performance of a contract with you (e.g., to fulfill your order).
Legitimate Interests: Processing is necessary for our legitimate interests, provided those interests don't override your fundamental rights and freedoms.
Legal Obligation: Processing is necessary to comply with a legal obligation.
Consent: You have given us consent to process your personal data for specific purposes.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and applicable legal requirements.

6. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Your Data Protection Rights

Under the GDPR and other applicable privacy laws, you have the following rights:

Right to Access: You can request copies of your personal data.
Right to Rectification: You can request that we correct inaccurate or complete incomplete data.
Right to Erasure: You can request that we erase your personal data in certain circumstances.
Right to Restrict Processing: You can request that we restrict the processing of your data in certain circumstances.
Right to Data Portability: You can request the transfer of your data to you or a third party.
Right to Object: You can object to the processing of your personal data in certain circumstances.
Rights Related to Automated Decision-Making: You have rights related to automated decision-making and profiling.

8. Cookie Policy

Cookies are small text files that are placed on your device when you visit our website. We use cookies to enhance your browsing experience, understand site usage, and assist in our marketing efforts.

We use the following types of cookies:

Essential Cookies: Required for the operation of our website.
Analytical/Performance Cookies: Allow us to recognize and count visitors and see how they move around our website.
Functionality Cookies: Enable our website to remember your preferences.
Targeting Cookies: Record your visit to our website, the pages you visit, and the links you follow.

You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

9. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will delete such information from our records.

10. Changes to Our Privacy Policy

We may update our Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

11. International Data Transfers

Your personal data may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We have implemented appropriate safeguards to protect your personal data when it is transferred internationally, including the use of standard contractual clauses approved by the European Commission.

This Privacy Policy was last updated on June 10, 2023.