Privacy Policy

Last updated: 1 May 2026

Data Controller

The controller of your personal data is INARD Atelier, based in Prizren, Kosovo (address to be completed after company registration). Contact: info@inard.eu.

What Data Do We Collect?

Contact details (first name, last name, email, phone) — when placing an order and for delivery
Delivery address — used solely to fulfil the order
Payment data — passed directly to the payment operator (we do not store card numbers)
Email address — when subscribing to the newsletter (with your consent)
Technical data (IP address, cookies) — for analytics and security purposes

For What Purpose Do We Process Data?

Order fulfilment (Art. 6(1)(b) GDPR)
Handling complaints and returns (Art. 6(1)(b) GDPR)
Sending newsletters (Art. 6(1)(a) GDPR — with consent)
Website analytics (Art. 6(1)(f) GDPR — legitimate interest)
Accounting and tax obligations (Art. 6(1)(c) GDPR)

Your Rights

Under GDPR you have the right to: access your data, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection to processing, and withdrawal of newsletter consent at any time.

To exercise your rights, contact us by email. We will respond within 30 days.

Cookies

This website uses first-party cookies (technical — essential for the operation of the shop, cart, and session) and analytics cookies (Google Analytics — with consent). You can manage cookies in your browser settings or via the cookie banner on the website.

Data Sharing

Your data may be shared with: payment operators, the courier company (delivery address only), the hosting provider, and the analytics system (Google Analytics, anonymised IP).

Data is not transferred outside the European Economic Area without appropriate safeguards.

Data Retention

Order data: 5 years (tax obligations). Contact form data: 3 years from last contact. Newsletter: until consent is withdrawn.

Right to Lodge a Complaint

If you believe we are processing your data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (UODO).