We are dedicated to protecting your data. Its processing is carried out in accordance with the principles set out in the Data Protection Act 2018, including the General Data Protection Regulation (GDPR).
The personal data controller is SOLLISTI LIMITED with its registered office at Chocolate Factory 2, 4 Coburg Rd, Hornsey, London N22 6UJ, United Kingdom; Company Number: 12591479.
We have not appointed a Data Protection Officer, but you can contact us at email@example.com in all matters relating to data processing.
General principles for the processing of personal data
The rules on the processing of personal data provide a framework that ensures appropriate use of personal data. We are committed to ensuring that your personal data is:
processed in accordance with the law and in a transparent manner;
correct, relevant and not excessive in quantity;
accurate and up-to-date—inaccurate or incomplete personal data will be corrected or deleted or its further processing will be stopped;
kept for no longer than necessary;
processed only for a specified, explicit and legitimate purpose and in accordance with the intended purpose for which it is collected;
Types of personal data
We will collect and process personal data provided to us through various communication channels, including our Shop, in a variety of ways. Some personal data is necessary for the sale of our products, while other data is voluntary.
We always inform you which personal data is required (e.g. by marking them with an asterisk (*)) and what consequences it will have if you do not provide us with such data – such a situation may, for example, result in the inability to (fully) fulfil your requests. The personal data we collect, and process can be broadly divided into the following categories:
identification, such as name and surname, etc.
contact details: e-mail address, telephone number, address of residence / shipping address;
user information, such as technical data on the usage and browsing, including IP addresses from which users visit our website.
Purposes for the processing of personal data
We process personal data for legal purposes and fundamentally we do so only if:
a person has given their consent to the processing of data;
the data processing is necessary for the execution of the order;
the data processing is necessary for the fulfilment of our legal obligation;
the data processing is necessary for the purposes of our legitimate interests or the legitimate interests of third parties and is not considered harmful to the person whose data we process, including our interests in the context of developing, evaluating, and offering our services.
We process your personal data in order to:
facilitate the use of our Shop and services and to interact with them as part of the standard service;
provide broadly understood customer service;
Disclosure, transfer, and sharing of personal data to third parties
Our disclosure and transfer of personal data to third parties is limited to the minimum and is subject to an adequate level of data protection.
We reserve the right to disclose or share personal data with third parties in the following circumstances:
when third parties provide services on our behalf, for example, IT support and hosting services, payment processing, etc. such third parties may process the personal data that is disclosed, transmitted or made available to them only in accordance with the terms and conditions specified by us and on the basis of a written agreement to process the data;
legal advisers – to establish, exercise or defend our rights;
when the user has given their prior consent to the disclosure of their personal data to third parties.
If the recipient of the personal data is located in a country outside the EU/EEA which does not ensure an adequate level of data protection, the personal data of the users will only be sent to such recipient after a written agreement on the transfer of data has been concluded with them on the basis of standard contractual clauses adopted by the European Commission.
Some of our information processing activities will be based on your consent. In this case, you have the right to withdraw your consent at any time. If you withdraw your consent, we will stop processing your personal data, unless its further processing or storage is permitted or required by applicable law. It should be noted that the withdrawal of consent will not affect the lawfulness of the data processing process before it is withdrawn. Furthermore, the withdrawal of consent may result in us being unable to fulfil your requests or provide services.
You can also request that your data be updated or corrected.
You have the right to delete your personal data that we process at any time. The only exception is when:
we process your data for accounting (reporting) purposes or for the execution of binding orders;
we suspect that your actions may give rise to claims against you.
You also have the right to object to the processing of your data to the extent that we do so on the basis of a so-called legitimate interest. This will prevent us from processing your personal data. We will not do so if your interest or rights are legally void or there are legal claims against you. In such a case, we will inform you about it.
If you believe that we process your personal data in an inappropriate way, you have the right to lodge a complaint with the supervisory authority, i.e. Information Commissioner’s Office (ICO).
You have a right to make a written complaint to this address:
Information Commissioner’s Office (ICO)
Wycliffe House Water Lane
SK9 5AF Or send it via e-mail to: firstname.lastname@example.org
You can also submit a complaint via the ICO website at:
We store data relating to your product orders until the expiry of any potential claims you or we may have relating to your order.
We retain the data needed for accounting or tax purposes for as long as required by accounting or tax regulations.
We will retain your data for direct marketing purposes until you withdraw your consent.