Effective: 1 December 2025
1. Data Controller
Sciéntio Laboratories spol. s r.o.
Tallerova 4, 811 02 Bratislava, Slovakia
IČO: 52 053 407
We process personal data in full compliance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection.
2. Data We Collect
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Name, Email, Address | Order fulfillment & delivery | Art. 6(1)(b) GDPR – Contract |
| Payment Data | Processed by Stripe/PayPal | Art. 6(1)(b) GDPR – Contract |
| IP Address, Browser | Fraud prevention & analytics | Art. 6(1)(f) GDPR – Legitimate Interest |
We do not collect health data, biometric data, or data on minors.
3. Data Processors
- Stripe / PayPal – Payment processing (PCI-DSS)
- Packeta / GLS – Delivery (EU warehouses)
- Google Analytics – Anonymized traffic (no personal data)
4. Data Retention
- Orders: 10 years (Act No. 595/2003 Coll. on Income Tax)
- Support emails: 1 year
- Deleted on request
5. Your Rights (GDPR Art. 15–22)
- Access, rectification, erasure
- Restriction, objection, portability
- Withdraw consent (if applicable)
Contact DPO: privacy@vapecheap.eu
6. Data Security
- SSL encryption
- PCI-DSS compliant payments
- No data stored on non-EU servers
7. Cookies
We use essential cookies only. No tracking.
8. Contact DPO
Email: privacy@vapecheap.eu
Response: Within 30 days (GDPR Art. 12)
9. Governing Law
Slovak law. EU residents: **Rome I Art. 6** applies.