Privacy policy

Terms & Conditions

PRIVACY POLICY

This Privacy Policy describes how Adam Demčák, Company ID (IČO): 29715199, with registered office at Školská 660/3, 110 00 Prague 1 – Nové Město, Czechia, registered in the Czech Trade Register kept by the Municipal District Office Prague 1 (Úřad městské části Praha 1) pursuant to Section 71(2) of the Trade Licensing Act (hereinafter the „Controller“, „we“ or „us“) processes your personal data in connection with the sale of competition bikinis, sportswear and related accessories through the online store at www.aryabikini.com (hereinafter the „Website“).

We act as the controller of your personal data under Regulation (EU) 2016/679 (the „GDPR“) and Act No. 110/2019 Coll., on the processing of personal data. We have adopted appropriate technical and organisational measures to protect your personal data.

Contact for all privacy matters:
E-mail: shop@aryabikini.com
Phone: +420 606 339 961
Postal address: Draháňské údolí, Zdiby – Brnky, 250 66 Prague-east, Czechia

We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 of the GDPR.

WHAT DATA DO WE PROCESS, WHY, AND ON WHAT LEGAL BASIS?

1. Account registration
Data: name, surname, e-mail, password (stored in encrypted form).
Purpose: creating and operating your user account.
Legal basis: performance of a contract – Article 6(1)(b) GDPR.

2. Processing and delivery of your order
Data: name, surname, delivery and billing address, e-mail, telephone number, order details, and where you order a made-to-measure product, the body measurements and product specifications you provide.
Purpose: concluding and performing the purchase contract, delivering the goods, and communicating with you about the order.
Legal basis: performance of a contract – Article 6(1)(b) GDPR.

We do not receive, store or have access to your full payment card number, expiry date or CVV code. Card details are entered directly into the environment of our payment service provider and are processed solely by that provider. We only receive confirmation of whether the payment succeeded and limited identification data about the transaction.

3. Invoicing and statutory record-keeping
Data: name, surname, address, order and payment details, and Company ID and VAT number where you order as a business.
Purpose: issuing invoices and keeping accounting and tax records.
Legal basis: compliance with a legal obligation – Article 6(1)(c) GDPR, in particular under Act No. 563/1991 Coll., on Accounting, and Act No. 235/2004 Coll., on Value Added Tax.

4. Returns, withdrawals and warranty claims
Data: name, surname, e-mail, telephone number, address, IBAN, description of the defect and related correspondence.
Purpose: handling your withdrawal from the contract or your claim from defective performance and refunding payments.
Legal basis: compliance with a legal obligation – Article 6(1)(c) GDPR, under Act No. 89/2012 Coll., the Civil Code, and Act No. 634/1992 Coll., on Consumer Protection.

5. Customer communication and support
Data: name, surname, e-mail, telephone number, content of the communication and associated metadata.
Purpose: answering your enquiries and providing support.
Legal basis: performance of a contract – Article 6(1)(b) GDPR where the communication concerns your order; otherwise our legitimate interest in responding to enquiries addressed to us – Article 6(1)(f) GDPR.

6. Newsletter and marketing communications
Data: name, surname, e-mail, and where you provide them, telephone number and address.
Purpose: sending news, offers, discounts and information about new products.
Legal basis: your consent – Article 6(1)(a) GDPR. Where you are our existing customer, we may send you information about our own similar goods on the basis of our legitimate interest in direct marketing – Article 6(1)(f) GDPR, in accordance with Section 7(3) of Act No. 480/2004 Coll.

You may withdraw your consent or object to direct marketing at any time, free of charge, by clicking the unsubscribe link in any marketing e-mail or by writing to support@aryabikini.com. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. You will continue to receive transactional messages relating to your orders.

7. Product reviews and comments
Data: the name or nickname you choose, and the content you submit.
Purpose: publishing your review on the Website.
Legal basis: your consent – Article 6(1)(a) GDPR.

8. Website analytics and marketing cookies
Data: IP address, approximate location derived from it, device, browser and operating system type, referring pages, pages viewed, time and duration of the visit, and online identifiers stored in cookies.
Purpose: measuring and improving the performance of the Website and displaying relevant advertising.
Legal basis: your consent – Article 6(1)(a) GDPR, given through the cookie banner. Strictly necessary cookies required for the Website to function are processed on the basis of our legitimate interest – Article 6(1)(f) GDPR.

9. Protection of our rights and fraud prevention
Data: order data, IP address, payment data and related records.
Purpose: preventing fraud and misuse of payment cards, securing our network and information systems, and establishing, exercising or defending legal claims.
Legal basis: our legitimate interest – Article 6(1)(f) GDPR.

Providing personal data for purposes 1 to 4 is a contractual requirement; without it we are unable to conclude or perform the contract with you. Providing data for the remaining purposes is voluntary.

WHO DO WE SHARE YOUR DATA WITH?

We disclose your personal data only to the extent necessary, to the following categories of recipients acting as our processors or as independent controllers:

  • payment service providers, who process card and payment data in their own environment,
  • carriers and delivery companies used to deliver your order,
  • providers of hosting, e-shop and IT support services,
  • providers of e-mail and marketing tools,
  • providers of analytics and advertising services,
  • our accountant, tax adviser and, where necessary, our legal adviser.

The specific providers we currently use are: Mollie B.V., Amsterdam, the Netherlands (payment gateway); ComGate Payments, a.s., Jankovcova 1596/14a, 170 00 Prague 7, Czechia (payment gateway); Stripe Payments Europe Ltd., Dublin, Ireland; PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg; DHL Express (Czech Republic) s.r.o., Czechia (delivery); Packeta Česká republika s.r.o. (Zásilkovna), Czechia (delivery); UAB MailerLite, Vilnius, Lithuania (e-mail marketing); Google Ireland Limited, Dublin, Ireland (Google Analytics, Google Tag Manager, Google Ads); Websupport s. r. o. Karadžičova 7608/12 821 08 Bratislava - mestská časť Ružinovosting / e-shop provider.

We may also disclose your personal data where required by applicable law, in connection with ongoing or prospective legal proceedings, or in order to establish, exercise or defend our legal rights.

We do not sell your personal data and we do not share data allowing your identification with third parties for their own direct marketing purposes.

DO WE TRANSFER YOUR DATA OUTSIDE THE EU?

Your personal data is primarily processed within the European Union and the European Economic Area. Some of our analytics and advertising providers may transfer data to the United States. Such transfers take place on the basis of the European Commission's adequacy decision for the EU–US Data Privacy Framework, or on the basis of the European Commission's standard contractual clauses together with appropriate supplementary safeguards. You may request a copy of the applicable safeguards by writing to support@aryabikini.com.

HOW LONG DO WE KEEP YOUR DATA?

  • Account data: for the duration of your registration and for 30 days after you delete your account.
  • Order and delivery data: for the duration of the contract and then for 4 years from the end of the contract, corresponding to the general limitation period, extended where necessary to defend a claim already raised.
  • Invoices and accounting records: 10 years from the end of the accounting period in which the transaction took place, as required by tax and accounting legislation.
  • Returns and warranty claim records: 4 years from the settlement of the claim.
  • Customer correspondence: 2 years from the end of the communication.
  • Marketing data processed on consent: until you withdraw your consent, and in any case no longer than 3 years from the last interaction with us.
  • Reviews and comments: until you withdraw your consent or request removal.
  • Cookie data: for the lifetime of the individual cookie, as stated in the cookie settings.

YOUR RIGHTS

Under the GDPR you have the right to:

  • access your personal data and obtain a copy of it, together with information about the purposes, categories, recipients and retention period,
  • have inaccurate data corrected and incomplete data completed,
  • have your data erased where it is no longer needed for the purpose, where you withdraw consent and there is no other legal basis, where you successfully object to the processing, or where the processing is unlawful,
  • have the processing restricted in the cases set out in Article 18 of the GDPR,
  • receive the data you provided to us in a structured, commonly used and machine-readable format and have it transmitted to another controller, where the processing is based on consent or contract and is carried out by automated means,
  • object at any time to processing based on our legitimate interest, and to object at any time and without any justification to processing for direct marketing purposes, after which we will stop processing your data for that purpose,
  • withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

We will respond to your request without undue delay and no later than one month from receipt. This period may be extended by a further two months where the request is complex; we will inform you if that happens. Requests are handled free of charge; where a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act.

You also have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czechia, www.uoou.cz. If you reside in another EU member state, you may also lodge a complaint with the supervisory authority of that state.

AUTOMATED DECISION-MAKING

We do not carry out automated individual decision-making producing legal effects concerning you or similarly significantly affecting you within the meaning of Article 22 of the GDPR.

CHILDREN'S DATA

We do not knowingly collect personal data from children under 15 years of age in connection with the direct offer of information society services. If you are under 15, please do not provide us with your personal data. If we become aware that we hold such data without the consent of a legal guardian, we will delete it without undue delay. If you believe we may be processing data of a person under 15, contact us at support@aryabikini.com.

THIRD PARTY WEBSITES

The Website contains links to third party websites. We have no control over, and accept no responsibility for, the privacy practices of those websites.

COOKIES

A cookie is a small file containing an identifier that is sent by a web server to your browser and stored on your device. The identifier is sent back to the server on subsequent visits, which allows the Website to recognise your device.

We use the following categories of cookies:

  • Strictly necessary cookies – required for the Website to function, for example to keep items in your basket, to log you in and to complete an order. These cannot be switched off.
  • Functional cookies – remember your preferences, such as language or currency, so that you do not have to set them repeatedly.
  • Analytical cookies – help us understand how visitors use the Website so that we can improve it.
  • Marketing cookies – used to display advertising relevant to you, including on third party websites, and to measure its effectiveness.

Cookies may be first-party (set by us) or third-party (set by another provider, for example an analytics or advertising provider or an embedded social media element). They may be session cookies, which expire when you close your browser, or persistent cookies, which remain until their expiry date or until you delete them.

Analytical and marketing cookies are only placed on your device after you give your consent through the cookie banner. You may change or withdraw your consent at any time through the cookie settings on the Website, and you may delete or block cookies in your browser settings. Blocking strictly necessary cookies may prevent the Website from working properly.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The current version is always published on the Website with the date of the last update.

Last update: 10 July 2026

Arya was born from pure passion for fitness and from a drive to make every girl and woman become a stage diva. Our personal experience made us do what we love - create the best products possible. A few years ago we were also fitness competitions attendants. We also needed to find perfect competition bikinis, but over years we could not find ones that are truly perfect. Thus we made one ourselves. That moment was life changing - since that we are creating competition bikinis and other things for all the girls and women who are preparing for the big stage day.
Menu
close
Cookies
crossmenuchevron-down