COOKIES POLICY

1. Purpose and Scope

This Cookies Policy explains how LC Waikiki Retail Kosovo Sh.P.K (hereby referred as “LCW”) uses cookies and similar technologies on its e-commerce website to ensure proper functionality, enhance user experience, analyze website performance, and support marketing activities. This Policy applies to all users who access or interact with the website through any device.

The use of cookies is carried out in accordance with applicable legislation on the protection of personal data and consumer rights in the Republic of Kosovo, as well as relevant European data protection standards.

2. What Are Cookies

Cookies are small text files that are stored on a user’s device when visiting a website. When a user accesses the website, the web server may send cookies to the user’s browser, which are then stored on the device and retrieved during subsequent visits or interactions. Cookies enable the website to recognize the user’s device, remember preferences, and ensure secure and efficient operation of the website.

Cookies do not typically contain information that directly identifies a user by name. However, depending on their nature and purpose, cookies may allow the identification of a user indirectly and may therefore constitute personal data.

3. Categories of Cookies Used

LCW uses different categories of cookies based on their function and legal basis.

4. First-Party and Third-Party Cookies

First-party cookies are placed directly by the LCW website and are used primarily for functionality, security, and analytics purposes.

Third-party cookies are placed by external service providers whose tools or services are integrated into the website, such as analytics platforms, advertising networks, social media integrations, or customer support tools. These third parties may process data in accordance with their own privacy policies and applicable legal obligations.

LCW ensures that third-party providers are contractually bound to process personal data in compliance with applicable data protection laws.

5. Legal Basis for Processing

LCW processes personal data derived from cookies in accordance with Law No. 06/L-082 on the Protection of Personal Data and general European data protection standards.

In this regard, we may rely on the following legal bases to process your personal data:

Consent. We may process your information if you have given us permission (i.e., your consent) to use your personal data for a specific purpose. You may withdraw your consent at any time. Learn more about withdrawing consent below.

Performance of a contract. We may process your personal data when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services, or at your request before entering into a contract with you.

Compliance with a legal obligation. We may process your information where we believe it is necessary to comply with our legal obligations, such as cooperating with a law enforcement authority or regulatory agency, exercising or defending our legal rights, or disclosing your information as evidence in a legal proceeding in which we are involved.

Legitimate interests. We may process your information where we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not override your fundamental rights and freedoms. For example, we may process your personal data for purposes such as:

• sending users information about special offers or discounts on our products and services;
• developing and displaying personalized and relevant advertising content for our users;
• analyzing how our Services are used so that we can improve them and retain users;
• supporting our marketing activities;
• diagnosing issues and/or preventing fraudulent activities;
• understanding how users engage with our products and services to enhance user experience;
• ensuring a safe and secure environment when using our website;
• better understanding our customers and their preferences to offer tailored services;
• providing improved and updated services to our customers.

Protection of vital interests. We may process your information where we believe it is necessary to protect your vital interests or those of a third party, such as situations involving potential threats to the safety of any person.

Public interest. We may process your information if such processing is necessary for carrying out a task in the public interest or for exercising official authority granted to us

Cookies are used on the following legal bases, depending on their category and purpose:

Necessity for the performance of a contract or provision of a service requested by the user.

Compliance with legal obligations related to security and fraud prevention.

Legitimate interest in maintaining and improving website functionality, where applicable.

User consent, particularly for analytics, marketing, and advertising cookies.

Where consent is required, cookies are not placed until the user has given a clear and affirmative indication of agreement.

6. Personal Information we Collect

The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we may collect includes, but is not limited to: First and last name; Phone numbers; Email addresses; Home addresses; Contact or verification details; Billing addresses; Date of birth; Password; Any other information relevant to the purpose and/or legal basis of processing.

Other types of personal information we may collect include, but are not limited to:

When you purchase products and/or services from us, you may be required to provide information such as your delivery address, billing address, card and/or bank account details, payment method information, and other details necessary to complete your order and process your payment.

When you use our Services, including when browsing our website, you may voluntarily provide personal information such as your age, gender, interests, education, professional background, preferences, and similar details.

We may also collect and process additional information required or authorized by applicable data protection laws for the purpose of identifying or verifying the information you provide, particularly when such actions are requested or ordered by a competent public authority.

Under no circumstances will we request or require you to disclose the personal data of children.

Sensitive Information

We do not process sensitive personal data unless it is strictly necessary and we have obtained your prior written consent.

Payment Information

We do not collect, store, or process your full card details when you make a purchase. In cases where payment processing is carried out by third-party payment service providers, we may share the necessary payment-related information you provide with these third parties. All payment data is stored and processed by the relevant third-party provider. In such cases, the terms and privacy policies of the respective third party apply. We encourage you to review their privacy policy.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes to this information

7. Cookie Management and User Choices

Users have the right to decide whether to accept or reject non-essential cookies. Upon first visit, users are presented with a cookie banner that allows them to manage cookie preferences.

Users may withdraw or modify their consent at any time through the cookie settings available on the website. In addition, users can configure their browser settings to block or delete cookies. Please note that disabling certain cookies may affect the functionality and performance of the website.

8. Data Controller and Transfer of Personal Data

For the purposes of Law No. 06/L-082 on the Protection of Personal Data of the Republic of Kosovo, the controller of personal data collected through and in connection with this e-commerce website (including account registration, order placement, payment processing, delivery, returns, customer service, and related communications) is LC Waikiki Retail Kosovo, with its registered address in the Industrial Zone, Prishtina–Fushë Kosovë Highway, Republic of Kosovo, unique identification number 810829830, contact email data.protection@lcwaikiki.com  and other contact details as indicated in the Company Information section of this website.

In order to operate the e-commerce platform and ensure its technical functionality, reliability, and security, all infrastructure services, including hosting, are provided through Microsoft Azure cloud services. Personal data is hosted and stored on virtual servers located in the Microsoft Azure West Europe (Amsterdam) Data Center within the European Union. No other external infrastructure or hosting suppliers are involved in the storage of personal data.

Such transfer is carried out exclusively for the purpose of providing the e-commerce services, ensuring platform performance, data security, and operational continuity. The Data Controller ensures that such transfers are conducted in compliance with the applicable provisions of Kosovo data protection legislation and that appropriate technical and organizational safeguards are in place.

The Data Controller implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. Customers retain all rights provided under applicable data protection legislation, including the right to request access to their personal data, rectification or erasure of inaccurate or unlawfully processed data, restriction or objection to processing where applicable, and the right to lodge a complaint with the competent supervisory authority in the Republic of Kosovo.

The Netherlands, as a Member State of the European Union, is included in the list of countries considered to provide an adequate level of personal data protection pursuant to the Decision of the Information and Privacy Agency of the Republic of Kosovo, Ref. No. 22/2025, dated 30.04.2025. Consequently, the transfer and storage of personal data in the Netherlands is regarded as taking place in a jurisdiction that ensures an adequate level of data protection in accordance with the applicable Kosovo data protection legislation.

9. Data Retention

Cookies are stored for different durations depending on their purpose. Session cookies are deleted automatically when the browser is closed. Persistent cookies remain on the user’s device for a defined period or until manually deleted.

LCW ensures that cookies are not retained longer than necessary for the purposes for which they are used.

10. Data Protection and Security

LCW applies appropriate technical and organizational measures to protect data collected through cookies against unauthorized access, alteration, loss, or misuse. Secure cookies are transmitted only over encrypted HTTPS connections where applicable.

Personal data collected via cookies is processed in accordance with the principles of lawfulness, fairness, transparency, data minimization, and security.

11. User Rights

According to Law No. 06/L-082 on the Protection of Personal Data, Users have certain rights. These may include:

• the right to request access to and obtain a copy of User’s personal data;
• the right to request rectification or erasure of User’s data (the right to be forgotten);
• the right to request restriction of the processing of User’s personal data;
• where applicable, the right to data portability; and
• the right not to be subject to automated decision-making.

In certain circumstances, Users may also have:

• the right to object to the processing of their personal data.

12. Updates to This Policy

LCW may update this Cookies Policy from time to time to reflect changes in legal requirements, technology, or business practices. Any updates will be published on the website and will take effect upon publication.

13. Contact

If you have any questions or comments regarding this Cookie Policy, you may contact us via email or through the following postal address:

LC Waikiki Retail Kosovo L.L.C.,

Industrial Zone,

Prishtina–Fushë Kosovë Highway,

Republic of Kosovo.

Phone: +38343772001

Email: data.protection@lcwaikiki.com