Privacy Policy

This privacy policy applies to all personal data collected and used by us when you visit or use our website, place an order, contact us, or engage with us through social media or other channels. “Personal data” means any information through which we can identify you, as further described below.

Who we are

We are Sperky Anna (“Sperky Anna”, “we”, “us” or “our”), a jewellery brand based in Slovakia. Sperky Anna is the data controller responsible for the processing of your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Act no. 18/2018 Coll. on Personal Data Protection of the Slovak Republic.

Company details:
Sperky Anna
[ADD YOUR STREET ADDRESS]
[ADD POSTAL CODE AND CITY]
Slovakia
Company ID (IČO): [ADD YOUR IČO]
VAT ID (IČ DPH): [ADD YOUR VAT NUMBER]
Email: info@sperkyanna.com

Personal data we collect

We may collect the following categories of personal data:

  • Contact details: name, billing and shipping address, telephone number, email address.
  • Account and technical data: login details, IP address, browser type, device identifiers, approximate geographic location, pages visited, session duration.
  • Purchase information: products ordered, order history, delivery address, payment method and payment status. We never receive or store your full card details — these are processed directly by our payment providers.
  • Communication data: messages you send us by email, social media or customer service, including returns and warranty requests.
  • Marketing preferences: your consent and preferences for receiving updates and promotions.
  • Social media activity: your engagement with our content on social platforms.
  • Cookies and tracking technologies: see the Cookies section below.

Purpose and legal basis of processing

Purpose Legal basis
Fulfilling orders, processing payments, handling shipping, returns and support Contract performance (Art. 6(1)(b) GDPR)
Sending marketing communications (email, SMS) Consent (Art. 6(1)(a) GDPR)
Website analytics and improving our products and services Legitimate interest (Art. 6(1)(f) GDPR)
Fraud prevention and security monitoring Legitimate interest (Art. 6(1)(f) GDPR)
Compliance with legal, accounting and tax obligations Legal obligation (Art. 6(1)(c) GDPR)

Our legitimate interests include improving your customer experience, keeping our store secure, and understanding how our website performs. We have carefully balanced these interests against your privacy rights.

Marketing communications

You will only receive marketing communications from us if you have given your explicit consent. You can unsubscribe at any time by clicking the link at the bottom of any marketing email, or by contacting us at info@sperkyanna.com. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Cookies

Our website uses cookies and similar technologies to provide core functionality, analyse traffic and personalise content. Non-essential cookies (for example analytics and advertising cookies) are only placed after you give your consent through our cookie banner. You can change or withdraw your cookie preferences at any time through the cookie settings on our website or through your browser settings.

How we share your data

We do not sell your personal data. We may share it with trusted third parties:

  • Service providers — hosting, analytics, email and SMS delivery, customer service.
  • Payment and logistics partners — to process payments, ship your order and handle returns.
  • Marketing and advertising partners — only where you have given your consent.
  • Authorities — where we are required to do so by law.
  • Platform vendors — such as Shopify, our payment providers and our email marketing platform, as necessary to run the store.

All third parties that process personal data on our behalf do so under a Data Processing Agreement (DPA) that ensures GDPR-compliant handling of your data.

International data transfers

Some of our service providers are located outside the European Economic Area (EEA), including in the United States. Where that is the case, we ensure your data remains protected through Standard Contractual Clauses (SCCs) approved by the European Commission, an adequacy decision, or another safeguard permitted under Chapter V of the GDPR.

Data security

We take appropriate technical and organisational measures to protect your data, including:

  • SSL/TLS encryption across the whole store;
  • access controls and authentication for staff accounts;
  • use of PCI-DSS compliant payment processors;
  • regular review of our systems and providers;
  • secure data storage practices.

Data retention

We keep your personal data only for as long as necessary for the purposes described above, or to meet our legal obligations:

  • Order, invoicing and accounting records: 10 years, as required by Slovak law (Act no. 431/2002 Coll. on Accounting and Act no. 222/2004 Coll. on Value Added Tax).
  • Customer account data: for as long as your account remains active, and up to 2 years after your last interaction with us.
  • Marketing consent: until you unsubscribe or withdraw your consent.
  • Customer service interactions: up to 2 years from the last contact.
  • Analytics and cookie data: for the retention periods set out in our cookie settings.

Your rights under the GDPR

You have the following rights in relation to your personal data:

  • Right of access — obtain a copy of the personal data we hold about you.
  • Right to rectification — correct inaccurate or incomplete data.
  • Right to erasure — request deletion of your data, where no legal obligation requires us to keep it.
  • Right to restrict processing — limit how we use your data.
  • Right to data portability — receive your data in a structured, commonly used format.
  • Right to object — object to processing based on legitimate interest, or to direct marketing.
  • Right to withdraw consent — at any time, for marketing or any optional data collection.

To exercise any of these rights, contact us at info@sperkyanna.com. We will respond within one month, as required by the GDPR.

You also have the right to lodge a complaint with the Slovak data protection authority:

Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12, 820 07 Bratislava 27, Slovakia
Website: dataprotection.gov.sk

Children’s privacy

Our store is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this privacy policy from time to time. Any material changes will be communicated through our website. Please check this page regularly for updates.

Last updated: 29.07.2026