1. Controller
Adam Orlovský
Mlynská 230/26, 044 11 Trstené pri Hornáde, Slovak Republic
Business ID: 55442528
Tax ID: 1127300702
Email: info@foghart.com
2. What Data We Collect
We collect personal data in the following situations:
a) Account Registration
When you create an account, we collect:
- Email address (used as your login identifier)
- Password (stored as a one-way cryptographic hash — we never have access to your plain-text password)
- First name and last name (optional, used for personalisation)
- Date and time of registration
b) Login Activity
Each time you log in to your account, we may record:
- IP address and approximate location
- Date and time of login
- Browser type and device information
c) Placing an Order
When you place an order (with or without an account), we collect:
- Full name, email address, phone number
- Billing and delivery address
- Order contents, value, and payment method
- Order history and transaction records
d) Browsing and Technical Data
- IP address, browser type, and browsing behaviour on our site (via cookies and server logs)
- Pages visited, time spent on site, referring URL
e) Newsletter
If you subscribe to our newsletter, we collect your email address and the date of consent.
3. How We Use Your Data
- Account management — to create and maintain your account, authenticate your login, and personalise your experience
- Order fulfilment — to process, pack, and deliver your order
- Customer support — to handle returns, exchanges, and enquiries
- Security — to detect and prevent fraud, unauthorised access, and abuse
- Legal obligations — to meet accounting and tax requirements under Slovak law
- Marketing — to send newsletters (only with your explicit consent)
4. Legal Basis (GDPR)
- Contract performance (Art. 6(1)(b) GDPR) — for processing your order and managing your account
- Legal obligation (Art. 6(1)(c) GDPR) — for tax and accounting records
- Legitimate interest (Art. 6(1)(f) GDPR) — for fraud prevention, site security, and login monitoring
- Consent (Art. 6(1)(a) GDPR) — for newsletter emails; you may withdraw consent at any time
5. Data Retention
- Order and billing records are kept for 10 years as required by Slovak accounting law
- Account data (registration details, login history) is kept for as long as your account is active; you may request deletion at any time
- Newsletter subscriptions are kept until you unsubscribe
- Technical logs (IP, login records) are kept for up to 12 months
6. Third Parties
We share data only to the extent necessary:
- Packeta — delivery partner; receives your name, address, and phone number for shipment
- Stripe — payment processor; handles card transactions securely; we do not store card details; Stripe may collect and process additional data under their own privacy policy
- WooCommerce / WordPress — our e-commerce and account management platform (data stored on servers within the EU)
- MailPoet — newsletter platform (only if you subscribe); processes your email address
We do not sell your personal data to any third party.
7. Cookies
We use cookies for the following purposes:
- Essential — to keep your shopping cart and login session active
- Analytics — to understand how visitors use our site (anonymised data)
- Payment — Stripe uses cookies to detect fraud and provide secure payment processing
You can disable cookies in your browser settings; however, some parts of the site (including the cart and checkout) may not function correctly without essential cookies.
8. Your Rights
Under GDPR you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data (“right to be forgotten”)
- Restriction — ask us to limit processing of your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — for any processing based on consent (e.g. newsletter)
To exercise any of these rights, contact us at info@foghart.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Slovak supervisory authority: Úrad na ochranu osobných údajov SR — dataprotection.gov.sk
9. Data Security
All data is transmitted over HTTPS. Passwords are stored using one-way cryptographic hashing and are never stored or accessible in plain text. Payment information is processed exclusively by Stripe and is never stored on our servers. Access to customer data is restricted to authorised personnel only.
10. Changes to This Policy
We may update this policy from time to time. Any significant changes will be announced on this page. Last updated: March 2026.