1. Controller
For data-subject requests, email koval@elektropohonyslovakia.sk. No data protection officer has currently been appointed; this has not been identified as mandatory for the scope of the shop’s ordinary operations.
2. Data, purposes, grounds and retention
Price enquiries and pre-contractual communication: name, company, registration and tax numbers, address, email, phone, enquiry content, selected products and payment or collection preference. The ground is Article 6(1)(b) GDPR. If no contract follows, records are normally kept for up to 12 months after communication ends unless longer retention is justified. Contract performance: identity, contact, delivery and billing details and correspondence are kept during the contract and as needed for legal claims under Article 6(1)(b). Accounting and taxes: billing records are kept under Article 6(1)(c) for statutory periods, typically ten years. Complaints and withdrawal records are kept for handling and relevant legal limitation periods under Article 6(1)(b) and (c), and where applicable legitimate interests in legal claims. Security logs such as IP address, request time and browser details are kept only as necessary for safe operation under Article 6(1)(f). The local enquiry cart contains catalogue numbers and quantities, not names or contact details, and expires after up to 30 days or is deleted by the user.
3. Marketing
The site has no newsletter subscription. Enquiry data is not automatically used for advertising messages. Any future newsletter would require its own lawful basis and an easy unsubscribe option.
4. Recipients
Once the shop connection is activated, price enquiries are stored in a protected Cloudflare D1 database and may be downloaded into the controller's local program to prepare a quotation. FormSubmit provides email notifications. The details are used to process the enquiry and related business communication.
Depending on the case, hosting and technical providers, email and form services, accountants and tax advisers, carriers and necessary service or supply partners may process information. Public authorities receive information where required by law. If a user voluntarily looks up a company by name or Slovak registration number, ORSF is used to retrieve public billing records from Slovak registers; the customer’s email and phone are not sent to ORSF.
5. External content
Product images may be loaded from Delta Electronics or other technical sources. An external image server can technically receive an IP address and browser data. Where licensing permits, hosting product images locally is preferable for privacy and stability.
6. Transfers outside the EEA
The controller does not deliberately send customer data outside the European Economic Area. If a technical provider or external source transfers personal data to another country, an appropriate GDPR mechanism, such as an adequacy decision or standard contractual clauses, is required.
7. Your rights
You may request access, correction, erasure, restriction, portability where provided by GDPR, object to legitimate-interest processing and complain to the supervisory authority. Consent, where used, can be withdrawn without affecting prior lawful processing. Requests are handled without undue delay, normally within one month.
8. Supervisory authority
The Slovak Office for Personal Data Protection: Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava; statny.dozor@pdp.gov.sk.
9. Automated decisions
The site does not make decisions based solely on automated processing with legal or similarly significant effects and does not use automated individual pricing.
Original Slovak document: view the source text.