PRIVACY POLICY

PRIVACY POLICY of the website aviant.shop

Effective date: “___” ________ 2025

1. General provisions

1.1. This Privacy Policy (the “Policy”) explains how we collect, store, use, protect and disclose personal data of users of the website aviant.shop (the “Website”).

1.2. The controller of your personal data processed via the Website is:

PP VKF “AVIANT”
Address: Pryvokzalna St. 15, 43000 Lutsk, Ukraine
E-mail: info@aviant.net.ua
Tel.: +38 (044) 240-42-05

1.3. By using the Website, placing an order, submitting feedback, sending an inquiry or otherwise providing information through contact forms, you confirm that you:

• have read this Policy;
• understand its content;
• give your consent to the processing of your personal data as described in this Policy and in accordance with applicable data protection legislation, including, where relevant, Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and national laws.

1.4. If you do not agree with the terms of this Policy, please stop using the Website.

1.5. If you are located in the EU/EEA or in a country where GDPR-like rules apply, this Policy is intended to provide you with information required by Articles 12–14 GDPR, to the extent applicable.

2. Personal data we collect

We may collect the following categories of personal data that you voluntarily provide when using the Website and related services (ordering products, submitting questions or reviews, etc.).

2.1. Data you provide when placing an order

• First name, last name, (and middle name, where applicable).
• Phone number.
• E-mail address.
• Delivery address (city/town, postal operator branch or address for courier delivery).
• Other contact details necessary to process and deliver your order (preferred carrier, delivery notes, etc.).

2.2. Data you provide through contact and feedback forms

The Website may offer forms such as:

• “Leave your review”;
• “Ask a question to learn more”;
• other contact forms (name, phone, e-mail, message text).

Through these forms you may provide:

• your name / full name;
• phone number;
• e-mail address;
• the content of your message, suggestion or review, which may contain additional data you decide to share.

2.3. Data related to orders and Website interactions

• Information about ordered products (product name, quantity, price, total amount).
• Order history data.
• Comments to the order (if any).

2.4. Technical (non-identifying) data

When you visit the Website, we may automatically collect:

• IP address;
• device information (device type, operating system, browser type);
• date and time of visit, duration of session;
• information about pages viewed and interface elements used;
• cookies and similar technologies.

These data are typically collected in an anonymised or aggregated form and are not used to identify a specific individual without additional steps on our side.

3. Legal bases for processing

We process your personal data on the following legal bases:

3.1. Consent – when you voluntarily fill in forms on the Website, provide contact details, place an order, subscribe to newsletters or agree to receive marketing communications.

3.2. Performance of a contract – where processing is necessary for concluding and performing a distance sales contract (order processing, delivery, payment handling, customer service).

3.3. Compliance with legal obligations – where we must retain certain data in order to comply with tax, accounting, consumer or other applicable laws.

3.4. Legitimate interests – for example, to ensure the security and proper functioning of the Website, prevent fraud, improve our services and protect our rights, provided that such interests are not overridden by your rights and freedoms.

4. Purposes of processing

We process your personal data only for specific and legitimate purposes.

4.1. Order processing and performance of contract

• accepting and processing your orders for our products (rusks, bakery snacks, etc.);
• arranging delivery of your order;
• contacting you to clarify order details and delivery/payment options;
• informing you about the status of your order.

4.2. Customer support and communication

• responding to your requests, questions and suggestions;
• processing reviews regarding our products and services;
• communicating with you via the contact details you provide.

4.3. Improving our products and services

• analysing customer feedback;
• compiling internal statistics and analytics;
• improving our product range, Website content and customer service.

4.4. Marketing and information (based on consent)

• sending information about promotions, new products, recipes and other news related to the AVIANT brand;
• possibly providing personalised offers where you have given consent and where this is lawful.

4.5. Security and fraud prevention

• protecting the Website and IT systems from unauthorised access;
• preventing fraudulent or abusive activities;
• protecting our rights and interests in case of disputes or claims.

5. Sharing of personal data

We do not sell your personal data to third parties. However, in certain cases we may share your data with:

5.1. Postal and courier services – in order to deliver your order, certain data (name, phone number, delivery address, etc.) may be shared with the carrier.

5.2. Payment service providers and banks – where you choose a non-cash payment method, necessary data may be processed by payment systems and banks to execute the payment.

5.3. IT service providers – hosting, e-mail and technical support providers may have limited access to data solely to the extent necessary to provide their services, under appropriate contractual safeguards.

5.4. Public authorities – courts, law enforcement and supervisory authorities where disclosure is required by law.

5.5. Other third parties with your consent – where you have given explicit consent to such sharing.

6. Retention periods

6.1. We store your personal data only for as long as necessary for the purposes for which they were collected, taking into account:

• order processing and after-sales support periods;
• legally required retention periods for accounting and tax documentation;
• limitation periods for legal claims.

6.2. After the purposes of processing have been fulfilled or the relevant retention period has expired, your data will be either:

• securely deleted (destroyed); or
• anonymised so that you can no longer be identified.

6.3. You may request restriction or deletion of your data where we have no further legal basis to continue processing your personal data.

7. Cookies and similar technologies

7.1. Cookies are small text files stored in your browser when you visit the Website. They help us to:

• ensure proper functioning of the Website;
• remember your preferences (for example, language);
• analyse visits and interactions with the Website in order to improve our services.

7.2. We may use:

• strictly necessary (technical) cookies – essential for the Website, shopping cart and forms;
• functional cookies – to remember your preferences;
• analytical cookies – in anonymised form, to evaluate how users interact with the Website.

7.3. You can manage cookies through your browser settings (block or delete). Disabling cookies may affect the proper functioning of some Website features.

8. Security of personal data

8.1. We implement organisational and technical measures in order to protect personal data against:

• unauthorised or unlawful access;
• accidental loss, destruction or damage;
• unauthorised disclosure or alteration.

8.2. Access to personal data is granted only to those employees and contractors who need it to perform their duties and are bound by confidentiality obligations.

8.3. Although we strive to maintain a high level of security, no method of transmission over the Internet or electronic storage is completely secure. In the event of a data breach, we will take all reasonable steps to mitigate the consequences and, where required, notify the competent supervisory authority and affected individuals.

9. Your rights as a data subject

Depending on your location and applicable law (including GDPR, where relevant), you may have the following rights:

9.1. Right to information – to know who processes your data, for what purposes, on what legal bases and with whom your data may be shared.

9.2. Right of access – to obtain confirmation as to whether we process your personal data and, if so, to access such data and related information.

9.3. Right to rectification – to request correction of inaccurate or incomplete data.

9.4. Right to erasure (“right to be forgotten”) – to request deletion of your personal data in specific situations (for example, where data are no longer necessary for the purposes for which they were collected, you withdraw consent and there is no other legal basis, or the data have been processed unlawfully).

9.5. Right to restriction of processing – to request temporary restriction of processing of your data (except for storage) under certain conditions.

9.6. Right to data portability – where processing is based on consent or contract and is carried out by automated means, you may request to receive your personal data in a structured, commonly used and machine-readable format or have it transmitted to another controller, where technically feasible.

9.7. Right to object – to object, on grounds relating to your particular situation, to processing based on legitimate interests, including profiling and direct marketing.

9.8. Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

9.9. Right to lodge a complaint – you may lodge a complaint with a competent data protection supervisory authority (for example, the authority of your place of residence in the EU, such as the Office for Personal Data Protection in the Czech Republic).

10. Children’s data

10.1. The Website and our services are not intended for children under the age threshold defined by applicable law without the involvement of their parents or legal guardians.

10.2. If you are a parent or legal guardian and believe that your child has provided us with personal data without your consent, please contact us and we will take appropriate steps (including deletion of such data where appropriate).

11. Contact details

If you have any questions about this Policy or our processing of your personal data, or if you wish to exercise your rights, please contact:

PP VKF “AVIANT”
Address: Pryvokzalna St. 15, 43000 Lutsk, Ukraine
E-mail: info@aviant.net.ua
Tel.: +38 (044) 240-42-05

Please include in your request:

• your full name;
• contact details for reply;
• a brief description of the request (access, rectification, erasure, restriction, objection, withdrawal of consent, etc.).

12. Changes to this Policy

12.1. We may update this Policy from time to time to reflect changes in applicable laws, our services or internal processes.

12.2. The current version of this Policy is always available on this page of the Website aviant.shop. We encourage you to review it periodically.

12.3. In case of material changes (e.g. changes in purposes of processing), we may additionally inform you via the Website and, where feasible, via contact details you have provided.