Privacy Policy

Introduction

This Privacy Policy (“Policy”) is issued by CITY CONSILIUM LTD (“we”, ‘us’, “our”) and explains how we collect, use, and protect your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable laws of the Europe. By using our website and services, you confirm that you have read and understood this Policy.

Identity and contact details of the controller

The transfer of personal data to the United Kingdom is based on Standard Contractual Clauses approved by the European Commission, as the United Kingdom is considered a third country outside the EU/EEA.

Definition

• Contract:
Agreement between the company and the customer.
• Customer: Any natural person using the Platform.
• Order: Any request to purchase products through our e-shop.

Purposes of processing

• Fulfillment of contractual obligations (order processing, delivery of goods, customer support).
• Compliance with legal obligations (accounting, tax, and archiving obligations).
• Communication and improvement of the user environment (website operation, performance measurement).
• Consent-based marketing (newsletters, remarketing).
• Ensuring service security and fraud prevention.

Legal basis for processing

• Consent (Article 6(1)(a) of the GDPR) – marketing and analytical cookies, commercial communications.
• Performance of a contract (Article 6(1)(b) of the GDPR) – order processing and delivery.
• Legal obligation (Article 6(1)(c) of the GDPR) – accounting and tax regulations.
• Legitimate interest (Article 6(1)(f) of the GDPR) – website security, prevention of misuse.

Categories of personal data

• Identification details (first name, last name).
• Contact details (email, telephone, delivery address).
• Order and payment details (transaction IDs, payment status; we do not store full credit card numbers).
• Technical data (IP address, device identifiers, cookies).

We do not collect or process health data.

Recipients of personal data

Your data may be disclosed to the following categories of recipients (always only to the extent necessary):

• Klarna: If you choose to pay via Klarna, your personal data will be shared with Klarna AB. For more information, please visit: https://www.klarna.com/international/privacy-policy
• Logistics partners (transport companies) – delivery of goods.
• IT and hosting/security (infrastructure providers, CDN) – website operation.
• Analytics/marketing (e.g. Google Ireland Limited, Meta Platforms Ireland Limited), only if these services are active on the website and based on your consent.
• Public authorities, if required by law.

Transfer outside the EU/EEA

In connection with payments, analytics, and security, transfers to third countries (in particular the United Kingdom and the United States) may occur. We only carry out these transfers when appropriate safeguards are in place in accordance with the GDPR, in particular on the basis of Standard Contractual Clauses and, where applicable, decisions on adequate protection. Specific information on safeguards is provided by individual recipients in their policies.

Retention period

• Billing and accounting data: 10 years from the end of the accounting period.
• Order and communication data: 5 years from the conclusion of the contract.
• Marketing data (consent): until consent is revoked or unsubscribed.
• Cookies: depending on type, up to 13 months

Cookies and tracking technologies

The website uses essential cookies for basic website functions and – only with your consent – analytical and marketing cookies (e.g. for measuring traffic and personalized advertising).

• Essential cookies: Always active; ensure website functionality and security.
• Analytical cookies: performance measurement and website usage (active only with consent).
• Marketing cookies: remarketing and personalization (active only with consent).

You may manage cookie preferences through your browser settings.

Klarna cookies

If you use Klarna payment methods, cookies may be set by Klarna AB as part of your shopping process. These cookies are used to enable Klarna to offer you appropriate payment options (e.g., Pay Now, Later, or in Installments) and to ensure a secure and smooth payment process.

Klarna may use these cookies to analyze user behavior and link it to technical data (e.g., browser type, device, IP address) for the purpose of fraud prevention and assessing your payment eligibility. For more information, please visit Klarna's privacy policy .

Processing of children's data

Our services are not intended for persons under the age of 16. We do not knowingly collect data from children; if this occurs, we will delete it without undue delay.

Rights of data subjects

You have the right to request:

• access to personal data,
• correction or deletion,
• processing restrictions,
• object to processing,
• data portability,
• withdrawal of consent (this does not affect the lawfulness of processing prior to withdrawal).

To exercise your rights, please contact us at support@aurelyco.com. We will process your request without undue delay, within 30 days at the latest.

If you believe that the processing violates the GDPR, you have the right to lodge a complaint with Office for Personal Data Protection.

Automated decision-making

We do not perform automated decision-making or profiling within the meaning of Article 22 of the GDPR.

Changes to this Policy

We may update this Policy from time to time. The new version will be published on this page with the effective date. We recommend that you review it regularly.

Contact

Please send any questions, requests, or complaints regarding personal data protection to support@aurelyco.com.