Privacy policy
1. Who is responsible
The controller under the General Data Protection Regulation (GDPR) is Timur Cimerman, sole trader, 29. augusta 5682/36A, 058 01 Poprad, Slovakia (Company ID 56643454), email: support@marelo.shop. See also the Legal notice.
2. What data we process and why
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Processing your order and delivery | Name, address, email, phone number (if given), order details | Art. 6(1)(b), performance of a contract |
| Payment | Payment details, handled by the payment provider | Art. 6(1)(b) |
| Support requests | Name, email, order number, message | Art. 6(1)(b) and (f) |
| Accounting and tax | Invoice and order data | Art. 6(1)(c), legal obligation |
| Fraud prevention and security | IP address, order data | Art. 6(1)(f), legitimate interest |
| Analytics and marketing, only with your consent | Cookie and device data | Art. 6(1)(a), consent |
3. Who receives your data
- Shopify (Shopify International Limited, Ireland, and affiliates) hosts our store and processes orders.
- Payment providers process your payment at checkout, for example Shopify Payments, PayPal and card networks. For customers in the Netherlands this includes iDEAL and in Poland BLIK.
- Shipping carriers receive your name, address and, if needed, phone number and email to deliver the parcel.
- Service providers for email, support and accounting receive only the data they need for that purpose, under a data processing agreement where required.
We do not sell your data.
4. Transfers outside the EU
Some providers, such as Shopify, may process data outside the EU or EEA. In that case we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
5. Cookies
We use cookies that are strictly necessary for the store, such as the shopping bag and checkout. Cookies for analytics or marketing are only set after you give consent in the cookie banner of the store. You can change or withdraw your consent at any time.
6. How long we keep data
We keep order and invoice data for as long as the law requires, for example for tax purposes; in Slovakia accounting documents are kept for 10 years. Order data we need for a possible complaint or claim is deleted after the limitation period ends. Other data is deleted when it is no longer needed.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. Write to us at support@marelo.shop.
8. Complaints
You have the right to lodge a complaint with a supervisory authority. The authority for our place of establishment is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky, dataprotection.gov.sk). You can also complain to the authority in your own country: in the Netherlands the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), in Poland the Prezes Urzędu Ochrony Danych Osobowych, UODO (uodo.gov.pl).
9. Changes
We may update this policy. The current version is always on this page. Last updated: 11 November 2026.