Privacy policy (GDPR)
How personal data is processed when you shop at or use Denuino.sk.
1. Data controller
The controller is Juraj Polák – Denuino.sk, an individual sole trader, Váhovce 206, 925 62 Váhovce, Slovakia, company identification number (IČO) 56873646, tax identification number (DIČ) 1127345912. Contact: [email protected]; +421 944 663 455. This is not a limited company.
2. Data we process
For orders: name, delivery and billing address, email, telephone, products, payment status and order history. For accounts: login and profile information. For enquiries: messages, complaints and attachments. For website use: technical logs, IP addresses, security data and, where consented, analytics and marketing identifiers.
3. Purposes and legal bases
Orders, delivery, payment and support: contract performance (GDPR Article 6(1)(b)). Accounting, taxes and mandatory records: legal obligations (6(1)(c)). Claims handling and security: legitimate interests where appropriately balanced (6(1)(f)). Optional analytics and advertising: consent where required (6(1)(a)). Commercial messages are sent only as legally permitted, with an opt-out.
4. Recipients and processors
Where necessary we share data with hosting and IT providers, technical support, email services, banks and payment processors, carriers (including Packeta, DPD, Slovenská pošta and Foxpost), accounting services, and public authorities where legally required. Payment gateways handle payment information under their own terms; we do not normally store full card details. Actual vendor records must reflect the services in use.
5. Retention periods
Order information is retained for performance, legal claims, complaints and statutory duties. Accounting records are generally retained for ten years after the relevant year where Slovak accounting law applies. Enquiries are kept only as needed; consent records may be retained to demonstrate compliance. Marketing stops after unsubscribing, aside from necessary suppression records.
6. Cookies and analytics
Essential technologies operate the store and protect it. Optional analytics and advertising cookies, if deployed (for example Google or Meta), require relevant disclosure and prior consent where mandated. Declining optional cookies must not prevent ordinary shopping. Consent can be withdrawn in cookie settings. The actual cookie list, vendors and expiry times must match the deployed consent platform.
7. International transfers
Some technology providers may process data outside the European Economic Area. Transfers must rely on appropriate safeguards such as an adequacy decision or standard contractual clauses with necessary measures. It is not possible to guarantee that all data stays within the EU without checking each provider.
8. Your rights
You may request access, correction, erasure where applicable, restriction, portability, and object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing. Contact [email protected]. You can complain to the Slovak Data Protection Office or the relevant supervisory authority.
9. Required data and automation
Contact and delivery information is necessary for fulfilling an order. Optional marketing consent is not required to shop. If automated decisions with legal or similarly significant effects are introduced, specific statutory information will be provided.
10. Updates
Changes to service providers, cookies or data processing require updates to this notice. Prepared for publication 22 October 2026.