1. IMPORTANT INFORMATION
   This Privacy Policy outlines the principles for processing the personal data of users of the x-supplements.com website. We are committed to ensuring the highest level of protection for your privacy and the information you provide to us. It is essential to familiarize yourself with these privacy protection principles or fair data processing rules, as this will provide full knowledge of the ways and purposes for which we use users’ data. These privacy principles supplement other rules but do not replace them.
2. DATA CONTROLLER
   The controller of your personal data is Fundamina s. r. o., Hornočermánska 1556/76, 949 01 Nitra, Slovakia, Business ID: 57065578. For any questions regarding data protection, please contact us at the email address: kontakt@x-supplements.com or by phone: 537933464.
3. SCOPE OF PROCESSED PERSONAL DATA
   We process your personal data to the extent necessary to achieve the following purposes:

– Order fulfillment: name, surname, correspondence address, email address, phone number, payment details;
– User account creation: name, surname, email address, phone number;
– Newsletter dispatch: email address;
– Handling inquiries via the contact form: name, surname, email address;
– Website traffic analysis and marketing: IP address, cookies, purchase history.

4. LEGAL BASIS FOR DATA PROCESSING
   Personal data processing is carried out on the basis of Article 6(1)(a), (b), (c), and (f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR). Users’ data will be processed exclusively in accordance with data protection legislation. In cases where data is processed by a controller or processor with a seat in the European Union or involves data of persons in the European Union, data protection legislation includes the General Data Protection Regulation (Regulation (EU) No 2016/679) (“EU GDPR”), the ePrivacy Directive (2002/58/EC) (as amended) (“ePrivacy Directive”), and any implementing legislation related to the aforementioned provisions.

Depending on the user’s location, additional regulations may also apply. Unless otherwise specified, we will process users’ personal data in accordance with the data protection regulations outlined above.

5. DATA RETENTION PERIOD
   Your personal data will be stored for the period:

– Necessary to perform the contract or provide services;
– Required by tax and accounting laws;
– Until you withdraw consent to data processing (e.g., in the case of newsletters).

6. USER RIGHTS
   Under the GDPR, you have the following rights:

– The right to access your personal data;
– The right to rectification of personal data;
– The right to erasure (“right to be forgotten”);
– The right to restriction of processing;
– The right to data portability;
– The right to object to processing;
– The right to withdraw consent to the processing of personal data at any time.

7. RECIPIENTS OF PERSONAL DATA
   Your data may be disclosed to entities supporting us in providing services, such as:

– IT service providers;
– Courier and logistics companies;
– Payment service providers;
– Accounting and advisory firms.

External Providers
We cooperate with the following external providers:

– PayU – online payment processing system;
– InPost – logistics and courier services provider;
– Google Analytics – website traffic analysis tool.

8. COOKIES
   Our website uses cookies for analytical and marketing purposes. They serve to improve the site’s functionality and tailor content to your preferences.
   If you comment on the site, you can opt to save your name, email address, and website in cookies, so that these details are conveniently pre-filled for future comments. These cookies expire after one year.
   If you visit the login page, we will create a temporary cookie to check if your browser accepts cookies. It contains no personal data and will be deleted when the browser is closed.
   During login, we also create several cookies to store your login information and selected display options. Login cookies expire after two days, while display option cookies expire after one year. If you select “Remember Me,” your login will expire after two weeks. If you log out of your account, the login cookies will be removed.

8.1 Types of Cookies
We use two types of cookies:

– Session cookies: stored on your device until the browser session ends;
– Persistent cookies: remain on your device until they are deleted.

8.2 Purposes of Cookie Use
Cookies are used for:

– Ensuring the proper functioning of the website;
– Analyzing website traffic;
– Personalizing content and advertisements.

9. DATA SECURITY
   We make every effort to ensure the maximum security of your personal data. Our website uses data encryption (SSL), and data processing procedures are regularly monitored and updated. To protect users’ personal data from accidental loss, misuse, unauthorized access, modification, or disclosure, we apply appropriate IT security measures. We make every effort to ensure the maximum security of your personal data.
10. CHANGES TO THE PRIVACY POLICY
    We reserve the right to make changes to this Privacy Policy.
    We will inform you of any changes via our website.### Privacy Policy
11. Important Information
    This Privacy Policy outlines the principles for processing personal data of users of the x-supplements.com website. We are committed to providing the highest level of protection for your privacy and the information you share with us. It is essential to familiarize yourself with these privacy protection principles or fair data processing guidelines, as this will give you full knowledge of how and for what purposes we use user data. These privacy principles complement other policies but do not replace them.
12. Data Controller
    The controller of your personal data is Fundamina s. r. o., Hornočermánska 1556/76, 949 01 Nitra, Slovakia, Business ID: 57065578. For questions regarding personal data protection, please contact us via email at: kontakt@x-supplements.com or by phone: 537933464.
13. Scope of Processed Personal Data
    We process your personal data to the extent necessary to achieve the following purposes:

– Order fulfillment: name, surname, correspondence address, email address, phone number, payment details;
– User account creation: name, surname, email address, phone number;
– Newsletter dispatch: email address;
– Handling inquiries via contact form: name, surname, email address;
– Website traffic analysis and marketing: IP address, cookies, purchase history.

4. Legal Basis for Data Processing
   Personal data processing is carried out on the basis of Article 6(1)(a), (b), (c), and (f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR). User data will be processed solely in accordance with data protection legislation. Where data is processed by a controller or processor established in the European Union or concerns data of persons in the European Union, data protection legislation includes the General Data Protection Regulation (Regulation (EU) No 2016/679) (“EU GDPR”), the ePrivacy Directive (2002/58/EC) (as amended) (“ePrivacy Directive”), and any implementing legislation related to the aforementioned provisions.

Additional regulations may apply depending on the user’s location. Unless otherwise specified, we will process users’ personal data in accordance with the data protection regulations outlined above.

5. Data Retention Period
   Your personal data will be stored for the period:

– Necessary to fulfill the contract or provide services;
– Required by tax and accounting laws;
– Until consent to data processing is withdrawn (e.g., for newsletters).

6. User Rights
   Under the GDPR, you have the following rights:

– Right of access to your personal data;
– Right to rectification of personal data;
– Right to erasure (“right to be forgotten”);
– Right to restriction of processing;
– Right to data portability;
– Right to object to processing;
– Right to withdraw consent to the processing of personal data at any time.

7. Recipients of Personal Data
   Your data may be shared with entities supporting us in providing services, such as:

– IT service providers;
– Courier and logistics companies;
– Payment service providers;
– Accounting and advisory firms.

External Providers
We collaborate with the following external providers:

– PayU – online payment processing system;
– InPost – logistics and courier services provider;
– Google Analytics – website traffic analysis tool.

8. Cookies
   Our website uses cookies for analytical and marketing purposes. They serve to improve the site’s functionality and tailor content to your preferences.

If you comment on the site, you can opt to save your name, email address, and website in cookies, so that this information is conveniently pre-filled for future comments. These cookies expire after one year.

If you visit the login page, we will create a temporary cookie to check if your browser accepts cookies. It does not contain any personal data and will be deleted when the browser is closed.

During login, we also create several cookies to store your login information and selected screen options. Login cookies expire after two days, and screen option cookies after one year. If you select “Remember Me,” your login will expire after two weeks. If you log out of your account, the login cookies will be removed.

8.1 Types of Cookies
We use two types of cookies:

– Session cookies: stored on your device until the browser session ends;
– Persistent cookies: remain on your device until deleted.

8.2 Purposes of Cookie Usage
Cookies are used for:

– Ensuring the proper functioning of the website;
– Analyzing website traffic;
– Personalizing content and advertisements.

9. Data Security
   We make every effort to ensure the maximum security of your personal data. Our website uses data encryption (SSL), and data processing procedures are regularly monitored and updated. To protect users’ personal data from accidental loss, misuse, unauthorized access, modification, or disclosure, we implement appropriate IT security measures. We strive to provide the highest level of security for your personal data.
10. Changes to the Privacy Policy
    We reserve the right to amend this Privacy Policy.
    We will notify you of any changes via our website.