This policy explains how MIHAI CIORBA, e.U. (hereinafter “C’Code”) processes your personal data in compliance with the General Data Protection Regulation (GDPR).

1. Data Controller and Contact

Information	Details
Controller	MIHAI CIORBA, e.U.
Address	Riemergasse 2 / C’code Store, 1010, Wien, Austria
Data Protection Contact/DPO	The Designated Contact Person for Data Protection is support@ccode.at.

2. Purposes and Legal Basis for Processing

We process your data for the following main purposes, based on the corresponding legal grounds:

Purpose	Legal Basis	Example Data Used
Contract Fulfillment (Order, Delivery)	Necessary for the performance of a contract (GDPR Art. 6(1) lit. b)	Name, address, payment data, order history
Customer Support	Legitimate Interest (GDPR Art. 6(1) lit. f) to answer queries efficiently	Contact data, query content
Marketing (Newsletter)	Your express Consent (GDPR Art. 6(1) lit. a)	Email address, purchase history (for customization)
Usability & Analytics	Legitimate Interest (GDPR Art. 6(1) lit. f) to improve services	Browsing data, connection data

3. Data Sharing and International Transfer

1. Affiliated Companies: We do not share your data with any affiliated parent or sister companies (corporate group).
2. Service Providers (Processors): We share data with third-party service providers who assist us in operating the business, including:
   • Analytics: Google Analytics
   • Logistics/Delivery: FedEx and Post At
   • Payment and IT services (standard requirement)
3. International Data Transfer: Your data is not transferred to countries outside the EU/EEA.

4. Your Rights (GDPR)

You have the right to request: access to your personal data, rectification of inaccurate data, erasure of your data, restriction of processing, data portability, and to object to processing. You may exercise these rights by contacting us at support@ccode.at. You also have the right to file a complaint with the Austrian Data Protection Authority (DSB).

5. Cookies

We use cookies and similar technologies to ensure the proper functioning of the website, to analyze user behavior, and for marketing purposes.

6. Marketing Practices

We do not use profiling, personalized advertising, or automated decision-making unless explicitly consented to by the user (e.g., through newsletter signup).