PROCESSING OF PERSONAL DATA

We place great importance on protecting your personal data and comply with the applicable legislation of the Republic of Estonia and the European Union, including the General Data Protection Regulation (GDPR).

This Privacy Policy explains what personal data we collect, the purposes for which it is processed, and the measures we take to protect it.

PURPOSE OF PROCESSING PERSONAL DATA

Personal data is processed for the following purposes:

• processing and fulfilling orders (including payment, delivery, and other actions necessary to complete an order);
• communicating with customers;
• providing information related to orders and services;
• improving the quality of customer service and the operation of the online store;
• fulfilling contractual obligations under the Terms of Sale;
• complying with legal obligations, including accounting requirements and the resolution of consumer disputes.

The data controller of the sexbaza.eu online store is:

Sbaza OÜ

Registration Code: [Registration Code]

Address: Jaama 179-2, 50704 Tartu, Estonia

Phone: +372 58806001

E-mail: info@sexbaza.eu

(hereinafter referred to as the "Controller").

WHAT PERSONAL DATA DO WE PROCESS?

When you use our online store and place orders, we may process the following personal data:

• first and last name;
• contact details, including telephone number and email address;
• delivery and billing address;
• payment information required to process your order;
• purchase and order history;
• communications with customer support;
• information voluntarily provided through surveys or promotional campaigns;
• IP address and other network identifiers.

HOW DO WE USE PERSONAL DATA?

Personal data is processed for the performance of the contract between the Customer and Sbaza OÜ and to comply with applicable legal obligations.

Customer data is used for:

• processing orders;
• confirming purchases;
• arranging delivery;
• providing order-related information;
• responding to inquiries regarding products and services;
• processing refunds and payments;
• maintaining accounting records;
• handling complaints and consumer disputes.

Purchase history (including purchase date, products purchased, quantities, and related order information) may be used for order administration, business analysis, and improving customer service.

Customer banking information is processed only where necessary to complete or refund payments.

The Customer's email address, telephone number, and name are used to communicate regarding orders and customer service.

IP addresses and other technical information may be processed to ensure the security, functionality, and performance of the website and to analyze website usage.

DISCLOSURE OF PERSONAL DATA TO AUTHORIZED PROCESSORS

Sbaza OÜ treats personal data as confidential and does not disclose it to third parties except where such disclosure is necessary to fulfill an order, provide services, or comply with applicable legal requirements.

The Customer acknowledges and agrees that Sbaza OÜ may transfer the necessary personal data to trusted service providers involved in processing orders.

These processors may include:

Delivery Service Providers

• DPD
• Itella
• Omniva
• Venipak
• SmartPosti
• other delivery partners used by the online store

Payment Service Providers

• Maksekeskus
• Paysera
• PayPal
• Stripe
• banks and other payment service providers integrated into the online store

Analytics and Website Improvement

• Google Analytics
• other analytics and website optimization services

Personal data is transferred only to the extent necessary for providing the relevant service.

DATA SECURITY AND ACCESS

Sbaza OÜ applies appropriate technical, organizational, and physical security measures to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure, or unauthorized access.

Personal data is stored on servers located within the European Union or the European Economic Area or in other jurisdictions providing an adequate level of protection in accordance with the GDPR.

Access to personal data is restricted to employees and authorized partners who require such access to perform their duties.

ACCESS TO AND CORRECTION OF PERSONAL DATA

Customers have the right to obtain information about the personal data processed by Sbaza OÜ and to request the correction of inaccurate or incomplete data.

If a purchase was made without creating an account, requests may be submitted via email:

info@sexbaza.eu

DIRECT MARKETING

The Customer's email address and telephone number may be used for direct marketing communications only where the Customer has given appropriate consent or where another lawful basis exists under applicable law.

The Customer may withdraw consent or unsubscribe from marketing communications at any time by:

• clicking the unsubscribe link included in marketing emails; or
• contacting Sbaza OÜ by email.

Where personal data is processed for direct marketing or profiling purposes, the Customer has the right to object to such processing at any time.

COOKIES AND TRACKING TECHNOLOGIES

The sexbaza.eu online store uses cookies to ensure the proper functioning of the website, improve user experience, and analyze website traffic.

Cookies are small text files stored on the user's device when visiting the website.

The website may use the following categories of cookies:

Essential Cookies

Required for the proper functioning, security, and operation of the website.

Analytics Cookies

Used to analyze website traffic, understand user behavior, and improve website performance.

Advertising Cookies

May be used to provide more relevant advertising and promotional content.

Other Cookies

Used for additional website functionality and integrated third-party services.

Users may manage their cookie preferences through the cookie settings available on the website.

SMS AND EMAIL COMMUNICATIONS

Sbaza OÜ may send SMS messages and emails to Customers who have provided the necessary contact details.

Such communications may include:

• order confirmations and updates;
• service notifications;
• information about products and special offers, where the Customer has provided the required consent.

The Customer may opt out of marketing communications at any time.

RETENTION OF PERSONAL DATA

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal obligations.

Account information will be deleted after account closure unless retention is required for:

• compliance with accounting obligations;
• the establishment, exercise, or defense of legal claims;
• the resolution of consumer disputes.

Data relating to guest purchases may be retained for the period necessary to fulfill legal obligations.

Accounting records are retained for the period required by the legislation of the Republic of Estonia.

NOTICE REGARDING THE USE OF AI-GENERATED IMAGES

All images depicting people, faces, or characters displayed on this website are artificially created using artificial intelligence technologies.

The individuals depicted are fictional and do not represent real persons. They are not photographs, video recordings, or other visual representations of actual individuals.

Any resemblance to real persons, names, facial features, appearances, or other characteristics is purely coincidental and unintended.

The images presented on this website are used solely for informational, illustrative, promotional, artistic, or demonstration purposes and should not be interpreted as depicting actual customers, employees, partners, or any other natural persons.

As the depicted individuals are fictional, the website does not collect, process, or disclose personal data relating to them.

Artificial intelligence technologies are used exclusively to create unique digital content. Any similarity to real persons is entirely accidental.

By accessing and using this website, the user acknowledges and understands that some or all visual content may have been created using artificial intelligence technologies.

DELETION OF PERSONAL DATA

Customers may request the deletion of their personal data by contacting:

E-mail: info@sexbaza.eu

Sbaza OÜ will review and process such requests in accordance with applicable law.

Personal data will not be deleted where its retention is necessary to comply with legal obligations or to establish, exercise, or defend the legitimate rights and interests of Sbaza OÜ.