Privacy policy
Last updated: 13 September 2026
KVIMATOV is committed to protecting your privacy and handling your personal data transparently and responsibly.
This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit or use the KVIMATOV website, place an order, create an account, subscribe to our communications, or otherwise interact with us.
KVIMATOV is a brand and trading name and does not constitute a separate legal entity. The controller responsible for the processing of your personal data is:
Robert Vilchynskyi
Mindener Straße 35
49084 Osnabrück
Germany
E-mail: info@kvimatov.com
Phone: +49 1622391175
1. Personal Data We Collect
Depending on how you interact with our website, we may collect the following categories of personal data:
Contact information
- First and last name
- Billing and delivery address
- E-mail address
- Telephone number
Order and transaction information
- Products purchased
- Order number
- Order date
- Order value
- Delivery information
- Billing information
- Payment status and selected payment method
We do not generally receive or store complete payment card details. Payment information is processed by the relevant payment service provider.
Account information
If you create a customer account, we may process information associated with your account, such as your name, e-mail address, saved addresses and order history.
Communications
If you contact us, we may process the information you provide, including the contents of your message and any information necessary to respond to your request.
Marketing information
If you subscribe to our newsletter or otherwise provide valid consent to receive marketing communications, we may process your e-mail address and information concerning your marketing preferences.
Technical information
When you visit our website, certain technical information may be processed, including:
- IP address
- Browser type and version
- Device type
- Operating system
- Language settings
- Date and time of access
- Referring website
- Pages visited
- General information about your interaction with our website
Some of this information may be collected automatically through cookies or similar technologies.
2. How We Use Personal Data
We use personal data only where there is a lawful basis for doing so.
Depending on the circumstances, we may use personal data to:
- process and fulfil orders;
- process payments;
- arrange delivery;
- provide customer support;
- communicate with you about your order;
- manage customer accounts;
- process returns, refunds and complaints;
- respond to enquiries;
- maintain and improve our website;
- protect the security and integrity of our website and services;
- comply with legal and regulatory obligations;
- prevent fraud and misuse;
- send marketing communications where we have a valid legal basis to do so;
- analyse website usage where the applicable legal requirements for such analysis have been satisfied.
3. Legal Bases for Processing
Where the General Data Protection Regulation (GDPR) applies, we rely on the following legal bases under Article 6 GDPR:
Contract — Article 6(1)(b) GDPR
We process personal data where this is necessary to enter into or perform a contract with you, including processing and fulfilling your order, arranging delivery and handling returns or refunds.
Legal obligation — Article 6(1)(c) GDPR
We may process personal data where this is necessary to comply with a legal obligation, including accounting, tax, consumer protection and other statutory requirements.
Legitimate interests — Article 6(1)(f) GDPR
Where appropriate, we may process personal data based on our legitimate interests, for example to maintain website security, prevent fraud, defend legal claims, improve our services and communicate with existing customers where permitted by law.
Consent — Article 6(1)(a) GDPR
Where consent is required, we process personal data only after obtaining your consent.
You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
4. Shopify
Our online store is hosted and operated using Shopify.
Shopify may process personal data on our behalf in connection with the operation of the online store, including website hosting, checkout, order processing, customer accounts, analytics and related services.
Shopify may also use service providers and subprocessors in order to provide its services.
For more information about Shopify’s processing of personal data, please refer to Shopify’s own privacy documentation.
5. Payments
Payments may be processed through third-party payment service providers made available through our online store.
Depending on the payment method selected at checkout, the relevant payment provider may process information necessary to complete the transaction, such as your name, billing information, payment details and transaction information.
Payment providers process personal data in accordance with their own privacy policies.
We do not generally store complete payment card information on our own systems.
6. Shipping and Fulfilment
To fulfil and deliver your order, we may share the personal data necessary for delivery with relevant shipping, logistics and fulfilment providers.
This may include:
- name;
- delivery address;
- e-mail address;
- telephone number, where required;
- order and shipment information.
Only information necessary to fulfil the relevant service is shared.
7. Customer Service and Communications
If you contact us by e-mail, telephone or another available communication channel, we process the information you provide in order to respond to your request and provide customer support.
Depending on the nature of the request, we may retain relevant correspondence for as long as necessary to handle the matter and comply with applicable legal obligations.
8. Newsletter and Marketing
If you subscribe to the KVIMATOV newsletter, we may use your e-mail address to send you information about KVIMATOV, including product launches, brand news and other marketing communications.
Where consent is required, marketing communications are sent only after obtaining your consent.
You can unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in our communications or by contacting us directly.
Where permitted by applicable law, we may also send marketing communications to existing customers regarding similar products or services, subject to applicable legal requirements.
We do not sell your personal data to third parties.
9. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some cookies are necessary for the operation, security and functionality of the website and cannot be disabled where they are technically necessary.
Other cookies or similar technologies, including analytics, advertising or marketing technologies, are used only where the applicable legal requirements for consent have been satisfied.
Where consent is required, non-essential cookies and technologies will not be activated before the required consent has been obtained.
You can manage your cookie preferences through the cookie-consent mechanism available on our website.
You may also control certain cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.
10. Analytics and Advertising
We may use analytics and advertising technologies to understand how visitors use our website, measure the effectiveness of marketing campaigns and improve our services.
Where these technologies process personal data or require consent under applicable law, they will only be activated where the necessary legal requirements have been satisfied.
Depending on the services actually enabled on our website, such technologies may include services provided by third-party analytics or advertising providers.
Where applicable, information may include technical identifiers, device information, website interactions and information concerning your use of our website.
We do not use such technologies to process sensitive personal data unless a lawful basis specifically permits such processing.
11. Social Media
Our website may contain links or integrations to social media platforms.
If you interact with such platforms, the relevant social media provider may process personal data in accordance with its own privacy policy.
We are not responsible for the privacy practices of third-party social media platforms.
Where embedded social media or other third-party technologies require consent, they will only be activated where the applicable legal requirements for consent have been satisfied.
12. Disclosure of Personal Data
We may disclose personal data to third parties where this is necessary for the purposes described in this Privacy Policy.
Depending on the services used by KVIMATOV, recipients may include:
- Shopify and relevant Shopify service providers;
- payment service providers;
- shipping and delivery companies;
- fulfilment and logistics providers;
- IT and hosting service providers;
- e-mail and communication service providers;
- analytics providers;
- advertising and marketing service providers;
- professional advisers;
- tax and accounting service providers;
- public authorities where disclosure is required by law.
Third parties receive only the information necessary to provide the relevant service or fulfil the applicable legal purpose.
We do not sell personal data.
13. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection law.
Depending on the circumstances, this may include an adequacy decision, Standard Contractual Clauses approved by the European Commission, or another legally recognised transfer mechanism.
14. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.
Different retention periods may apply depending on the type of data and the purpose of processing.
For example, information relating to purchases and financial transactions may need to be retained for statutory accounting and tax periods.
When personal data is no longer required and no legal obligation requires its retention, it will be deleted or anonymised where appropriate.
15. Data Security
We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.
16. Your Rights Under the GDPR
Subject to the applicable legal requirements, you may have the following rights:
Right of access
You may request confirmation as to whether we process your personal data and, where applicable, request access to that data.
Right to rectification
You may request correction of inaccurate or incomplete personal data.
Right to erasure
You may request deletion of your personal data where the legal requirements for erasure are met.
Right to restriction
You may request restriction of processing in certain circumstances.
Right to data portability
Where applicable, you may request to receive personal data you have provided to us in a structured, commonly used and machine-readable format.
Right to object
You may object to certain processing based on legitimate interests.
You have an absolute right to object to the processing of your personal data for direct marketing purposes.
Right to withdraw consent
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
17. How to Exercise Your Rights
To exercise your rights or ask questions about the processing of your personal data, please contact:
Robert Vilchynskyi
Mindener Straße 35
49084 Osnabrück
Germany
E-mail: info@kvimatov.com
We may need to verify your identity before fulfilling certain requests.
We will respond to requests within the period required by applicable data protection law.
18. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that your personal data has been processed unlawfully.
As the controller is established in Lower Saxony, Germany, you may contact:
The State Commissioner for Data Protection of Lower Saxony (LfD Niedersachsen)
You may also contact another competent supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement, where applicable.
19. Children’s Privacy
Our website is not directed at children.
We do not knowingly collect personal data from children where such collection is prohibited by applicable law.
If you believe that a child has provided us with personal data without the appropriate legal basis, please contact us so that we can take appropriate action.
20. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices, content or security of third-party websites.
We recommend reviewing the privacy policy of each third-party website you visit.
21. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website, services, legal requirements or data processing practices.
The updated version will be published on this page together with the date of the latest update.
We recommend reviewing this Privacy Policy periodically.
22. Contact
If you have any questions about this Privacy Policy or how KVIMATOV processes personal data, please contact:
Robert Vilchynskyi
Mindener Straße 35
49084 Osnabrück
Germany
E-mail: info@kvimatov.com
Phone: +49 1622391175