Privacy Policy (GDPR)

Data Controller
Eytan [Last Name] – Circa73
Address: [Full Address]
Email: [GDPR Email]

Data Collected
- Account information: first name, last name, email, address
- Order and delivery information
- Navigation data (cookies, IP, statistics)
- Payment data (via secure provider)

Purposes
- Order management
- Delivery
- Billing
- Customer service
- Statistics
- Website security
- Newsletter (with consent)

Legal Basis
- Contract performance
- Consent
- Legitimate interest
- Legal obligation

Recipients
- Payment providers
- Carriers
- Host
- Statistical tools
- Accountant (if applicable)

Retention Period
- Orders: 10 years
- Customer account: duration of activity
- Marketing: 3 years
- Cookies: 13 months

User Rights
Right to access, rectification, opposition, erasure, data portability, restriction.
Contact: [GDPR Email]

Security
- HTTPS
- Restricted access
- No storage of banking data
- Secure backups

Cookies
See the Cookie Policy.

Transfers outside the EU
Framed by GDPR-compliant safeguards.

Minors
The site is not intended for minors under 15 years of age.

Changes
The policy may be updated at any time.