Privacy Policy
Last updated: 2026
This policy explains how VIPKART processes personal data. We are GDPR-native and host data within the EU.
Data controller
VIPKART SYSTEMS EUROPE S.R.L., 5-7 Bulevardul Dimitrie Pompeiu, Hermes Business Campus, Building B, Floor 2, Office 223 (Regus), District 2, București 020335, Romania. Contact: privacy@vipkart.eu.
Where your data is hosted
All data is hosted within the EU (Hetzner, Germany/Finland). We do not transfer personal data outside the EU.
Data we process
Account: email, name, password (hashed). Profile content: whatever you choose to publish. Visitor statistics: 2-letter country and referrer host only — we never store raw IP addresses and use no cookies or fingerprinting for analytics.
Purposes and legal bases
Account and service: performance of contract (Art. 6(1)(b)). Anonymous page views: legitimate interest (Art. 6(1)(f)). Interaction statistics from your device: consent (Art. 6(1)(a)). Email verification: contract.
Retention
Account data: until you delete it. Anonymous statistics: up to 14 months. Verification tokens: 24h / 1h.
Your rights
You can access, export, rectify and erase your data, and object to or restrict processing. Use the self-service tools in your account, or contact us.
International transfers
None — your data stays within the EU.
Supervisory authority
You may lodge a complaint with the Romanian DPA (ANSPDCP).
Contact
privacy@vipkart.eu