Privacy policy
This policy explains how the PREBENA e-shop processes personal data under Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on the Protection of Personal Data.
1. Controller
STROJE Slovensko s.r.o., Zvolenská cesta 14437/191, 974 05 Banská Bystrica, Company ID: 48051705, Zapísaná v OR Okresného súdu Banská Bystrica, oddiel Sro, vložka č. 27720/S.
Contact for data protection matters: prebena@prebena.sk, +421 48 413 31 84.
2. What data, for what purpose and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Processing and delivering orders, communication about orders | name, e-mail, phone, billing and delivery address; for companies the company name, company ID, tax ID and VAT ID; order contents | performance of a contract (Art. 6(1)(b) GDPR) | while the order is processed and contractual periods run |
| Accounting and tax obligations | data on invoices and accounting documents | legal obligation (Art. 6(1)(c) GDPR; Slovak Accounting Act and VAT Act) | 10 years from the end of the year to which the documents relate |
| Complaints and withdrawals | identification and contact data, product and order data, bank account for refunds | legal obligation and performance of a contract | 4 years after the liability period for defects expires |
| Price quotes and contact form messages | name, company, company ID, e-mail, phone, message | steps taken at your request before entering into a contract; legitimate interest in answering questions | 3 years from the last communication |
| Establishing and defending legal claims, fraud prevention | order and communication data, IP address and browser data when a form is submitted | legitimate interest (Art. 6(1)(f) GDPR) | 4 years after the liability period for defects expires; in case of a dispute until it ends |
| Business outreach to companies (offers by e-mail) | name, job title, business e-mail and phone, company name and ID, industry, source of the contact; records of sent e-mails, opens and link clicks (with shortened IP address), replies and meeting notes | legitimate interest in direct marketing to businesses (Art. 6(1)(f) GDPR) in line with Slovak Act No. 452/2021 Coll. on Electronic Communications | while we are in contact, at most 2 years from the last activity; after you unsubscribe we keep only your e-mail address on a suppression list so that we do not contact you again |
| Audience measurement and marketing (cookies) | cookie identifiers, website usage data | consent (Art. 6(1)(a) GDPR) | depending on the cookie, at most 2 years; consent can be withdrawn at any time |
Business outreach. We obtain business contact details of company employees (for example buyers, technologists and production managers) from publicly available sources – company websites, the commercial and trade registers and company databases (e.g. FinStat). The specific source is stated in every e-mail. You can object to processing for direct marketing at any time free of charge – just click the unsubscribe link in the e-mail or write to us. We will then not send you any further offers.
Providing the data needed to process an order is a contractual requirement – without it we cannot accept or deliver the order. No customer account registration is required. We do not carry out automated decision-making or profiling with legal effects.
3. Recipients
- carriers (courier company, pallet carrier) – to the extent needed for delivery,
- our web hosting and e-mail provider (servers in the European Union),
- external accountants, tax advisers and auditors, if used,
- the bank and, in future, a payment gateway provider – when processing payments,
- with your consent to analytics and marketing cookies, Google Ireland Ltd. (Google Analytics, Google Ads) and Meta Platforms Ireland Ltd. (Meta pixel),
- public authorities where required by law.
We do not sell personal data. Data may be transferred to the USA by Google and Meta; these companies are certified under the EU-US Data Privacy Framework or use standard contractual clauses.
4. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interest. You can withdraw your consent (cookies) at any time – Cookie settings; withdrawal does not affect the lawfulness of processing before it.
Send your request to prebena@prebena.sk or by letter to the controller's address. We will reply without undue delay and within one month at the latest.
If you believe that the processing of your data infringes the law, you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
5. Security
We protect data with appropriate technical and organisational measures: the e-shop uses encrypted connections (HTTPS) and only authorised employees with their own login have access to the administration.
For details on cookies see Cookies.