Privacy Policy

The data controller is Rariti.es, Polska. Contact: hello@rariti.es.

We process personal data (name, shipping address, email, phone) to fulfil orders, communicate with customers, and meet tax obligations.

Legal basis: Art. 6(1)(b) GDPR (contract performance) and (c) (legal obligation – accounting).

We share data with shipping carriers, payment providers (Stripe, PayPal), and IT service providers (hosting, email).

Order data is retained for the period required by tax law (10 years). Marketing data – until consent is withdrawn.

You have the right to access, rectify, erase, restrict processing, port, and object to the processing of your data.

To exercise these rights, contact us at hello@rariti.es. You also have the right to lodge a complaint with the supervisory authority (ÚOOÚ in the Czech Republic).