Privacy Policy

This Privacy Policy explains how MARV, s.r.o. ("we", "us", "our"), the operator of this online store and authorized distributor of the incognito® brand for Central Europe, processes your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national legislation.

1. Data Controller

MARV, s.r.o.
Registered office: Medkova 1591/34, Pra&zcaron;ské P&rcaron;edm&ecaron;stí, 500 02 Hradec Králové, Czech Republic
Company ID (I&Ccaron;O): 05898587
Tax ID (DI&Ccaron;): CZ05898587 (currently not a VAT payer)
Registered with the Regional Court in Hradec Králové, file C, insert 39096
Email: info@incognito.eco

2. Personal Data We Collect

We collect only the data necessary to fulfil our contract with you and to comply with legal obligations:

Identification data: first name, last name
Contact data: email address, phone number, billing and delivery address
Order data: products purchased, order value, payment method
Technical data: IP address, browser type, device identifiers, cookies
Communication: messages you send to our customer service

3. Purposes and Legal Bases of Processing

Performance of contract (Art. 6(1)(b) GDPR): processing your order, delivery, payment, returns
Legal obligation (Art. 6(1)(c) GDPR): tax, accounting and consumer protection laws
Legitimate interest (Art. 6(1)(f) GDPR): fraud prevention, network security, direct marketing to existing customers
Consent (Art. 6(1)(a) GDPR): newsletters, non-essential cookies, marketing

4. Retention Periods

Order and accounting data: 10 years (statutory archiving obligation)
Customer account data: until account deletion plus 3 years
Marketing consent records: until consent withdrawal plus 3 years
Cookies: see our cookie banner for individual lifetimes

5. Recipients of Personal Data

We share data only with trusted processors strictly to fulfil the purposes listed above:

Carriers and logistics partners (e.g. Czech Post, PPL, Zásilkovna, DPD)
Payment service providers
IT and hosting providers (including Shopify Inc.)
Accounting and tax advisors
Public authorities where required by law

6. International Transfers

Some processors operate outside the European Economic Area. Where this happens, we rely on European Commission adequacy decisions or Standard Contractual Clauses to ensure an equivalent level of protection.

7. Your Rights

Under the GDPR you have the right to:

Access your personal data
Request rectification or erasure
Restrict or object to processing
Data portability
Withdraw consent at any time
Lodge a complaint with your national supervisory authority

Requests can be sent to info@incognito.eco. We respond within one month.

8. Cookies

We use essential cookies necessary for the website to function, and, with your consent, analytics and marketing cookies. You can manage cookie preferences at any time via our cookie banner.

9. Security

We apply appropriate technical and organisational measures (encrypted connections, access controls, regular reviews) to protect your data from unauthorised access, loss or disclosure.