Privacy Policy & Cookies

1. Controller (who is responsible)

VACUSLIM48 Slovensko
Madima s. r. o.
Trenčianska Turná 1444
913 21 Trenčianska Turná, Slovensko
IČO: 52 899 926  |  DIČ: 2121185616  |  IČ DPH: SK2121185616
Okresný súd Trenčín, oddiel Sro, vložka č. 39618/R
Email: vacuslim48slovakia@gmail.com
Tel.: +421 919 399 668

2. Personal data we collect

A) Data you provide to us

• Contact / enquiry form: name, e-mail and/or phone number
• Order data: delivery and billing address, cart contents
• For B2B registration: company / salon name, company ID (IČO), VAT ID
• Any additional information you voluntarily share with us

B) Data collected automatically

• IP address, browser type, device identifiers
• Approximate location (city / region), timestamps, pages visited
• Analytics and interaction data via cookies (see Section 6)

3. Why we process your data (purposes)

• To process orders, deliver products and send confirmations
• To respond to enquiries and assess partnership applications (B2B)
• To operate and secure our website and e-shop
• To measure the effectiveness of our online presence
• For advertising / remarketing (with your consent only)

4. Legal basis (GDPR)

• Performance of a contract — Art. 6(1)(b) GDPR: processing orders and providing services
• Legitimate interests — Art. 6(1)(f) GDPR: website security, fraud prevention, service improvement
• Consent — Art. 6(1)(a) GDPR: analytics cookies, marketing cookies, newsletter
• Legal obligation — Art. 6(1)(c) GDPR: accounting and tax record-keeping

5. Payments

Card payments in this e-shop are processed by the payment provider Stripe. You enter your card details directly within Stripe's secure interface — we do not store or process full payment card data on this website. Stripe acts as an independent controller for the purposes of payment processing; for more information see Stripe's privacy policy.

6. Cookies & similar technologies

Cookies are small text files stored on your device that help us operate and improve this website. They are grouped into the following categories:

Necessary cookies

Required for basic website functionality (navigation, cart, forms, security). Cannot be disabled and require no consent.

Analytics cookies

We use Google Analytics 4 (via Google Tag Manager) to understand how visitors interact with our website. All data is anonymised and aggregated; no personally identifiable information is stored. Activated only after your consent.

Marketing cookies

Used to display relevant advertisements and measure their effectiveness. Set by us or third-party advertising partners. Activated only after your consent.

Managing your preferences

You can accept or reject optional cookie categories at any time using the cookie settings panel, or via your browser settings. Blocking certain cookies may affect website functionality.

7. Who we share your data with

We share personal data only to the extent necessary with:

• Service providers — hosting, security, email delivery
• Payment partner — Stripe (payment processing)
• Analytics partners — Google (Analytics 4)
• Carriers — order delivery
• Professional advisors — only where legally required

We do not sell personal data to third parties.

8. International transfers

Some of our service providers (e.g. Google, Stripe) process data outside the European Economic Area (EEA). All such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent safeguards.

9. Retention — how long we keep your data

• Order & invoicing data: for the period required by accounting and tax law (typically 10 years)
• Contact / enquiry data: up to 24 months from the last interaction, or longer if required by applicable law
• Security / log data: up to 6 months
• Analytics / marketing data: according to the retention settings of the respective tool

10. Your rights under GDPR

You have the right to:

• Access — obtain a copy of your personal data
• Rectification — correct inaccurate or incomplete data
• Erasure— request deletion of your data ("right to be forgotten")
• Restriction — limit how we process your data
• Object — object to processing based on legitimate interests
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent — at any time, without affecting prior processing
• Lodge a complaint — with the supervisory authority (Section 14)

To exercise your rights, contact us at vacuslim48slovakia@gmail.com.

11. Children

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from minors. The digital age of consent in Slovakia is 16 years. If you believe we have inadvertently collected data from a child, please contact us so we can delete it.

12. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include access controls, the principle of least privilege, secure hosting infrastructure, and ongoing security monitoring.

13. Changes to this policy

We may update this policy from time to time to reflect changes in law, technology, or our services. Material changes will be indicated by a revised effective date at the top of this page.

14. Complaints — supervisory authority

If you believe your data protection rights have been violated, you may lodge a complaint with the Slovak Data Protection Authority:

• Úrad na ochranu osobných údajov Slovenskej republiky
• Hraničná 12, 820 07 Bratislava 27
• Email: statny.dozor@pdp.gov.sk
• Tel.: +421 2 32 31 32 11
• Web: dataprotection.gov.sk