Privacy Policy (GDPR)

Last updated: 22 November 2025

1. Controller

The controller according to Art. 4(7) GDPR is:
Troshina U Project Studio
Email: info@u-projectstudio.com

2. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy if required due to legal changes, technical developments, or adjustments to our services. The current version is always available on this page.

3. Categories of Personal Data

We process the following categories of personal data:

  • Basic customer data (name, address, email address, phone number)
  • Order data (products, payment status, transaction details)
  • Payment information (processed via payment providers)
  • Communication data (emails, messages)
  • Technical data (IP address, browser type, device information, access logs, cookies)

4. Data Processing When Visiting Our Website (Server Log Files)

When accessing our website, your browser automatically transmits data. This includes:

  • IP address
  • Date and time of access
  • URL of the accessed page
  • HTTP status code
  • Browser type and version
  • Referrer URL

Processing is carried out on the basis of Art. 6(1)(f) GDPR in our legitimate interest to ensure the technical availability and security of the website.

5. Cookies & Consent Management

We use cookies and similar technologies to operate our website, analyze user behavior, and enable marketing features.

Legal bases:

  • Art. 6(1)(a) GDPR – for cookies requiring consent
  • Art. 6(1)(f) GDPR – for technically necessary cookies

You may adjust your cookie settings at any time via the consent banner.

6. Purposes of Processing & Legal Bases

We process personal data for the following purposes:

  • Processing and fulfilling orders
  • Providing services and sending tester sets
  • Customer communication and support
  • Website analysis and optimization
  • Marketing communications (only with consent)
  • Compliance with legal obligations

Legal bases under GDPR:

  • Art. 6(1)(b) – performance of a contract
  • Art. 6(1)(f) – legitimate interests
  • Art. 6(1)(a) – consent

7. Payment Providers & Data Processing Agreements

Payments are processed by external service providers (e.g., Shopify Payments, PayPal). These receive only the data required to process the transaction.

Data processed on our behalf is handled under Data Processing Agreements according to Art. 28 GDPR.

8. Disclosure of Data to Third Parties

We may transfer personal data to:

  • shipping providers (e.g., DHL)
  • payment providers
  • technical service providers (hosting, analytics)
  • public authorities where legally required

9. International Data Transfers

If personal data is transferred outside the EU/EEA (e.g., to the USA), such transfer is based on:

  • EU Standard Contractual Clauses (Art. 46 GDPR)
  • appropriate safeguards

10. Storage Period

We store personal data only for as long as required for the respective purpose or as required by law.

11. Rights of Data Subjects

According to the GDPR, you have the following rights:

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21)
  • Right to withdraw consent (Art. 7(3))

To exercise these rights, please contact: info@u-projectstudio.com

12. Minors

Our services are not intended for individuals under 16 years of age.