Privacy Policy

GDPR Regulation (EU) 2016/679 | Act No. 18/2018 Coll.

I. Controller of personal data

The controller of personal data (the controller within the meaning of the GDPR) is:

TONWOOD s.r.o.
Dubovecká 742/37, 914 01 Trenčianska Teplá
Reg. No.: 55 553 435 | Tax ID: 2122021308 | VAT ID: SK2122021308
E-mail: info@vytycovacie-koliky.sk
Tel.: +421 914 155 666 or +421 910 338 708

The company has not appointed a Data Protection Officer (DPO), as its processing activities do not meet the conditions under Article 37 of the GDPR.

II. Scope of personal data processed

We process the following categories of personal data that you provide to us when sending an inquiry or order:

  • Full name
  • E-mail address
  • Phone number
  • Company name, Reg. No., Tax ID and billing address (if you are an entrepreneur and provide the data)
  • Delivery address (for orders with delivery)
  • The content of the message / inquiry

III. Purpose and legal basis of processing

  1. Handling the inquiry and concluding the contract – legal basis: Art. 6(1)(b) GDPR (pre-contractual relations and performance of the contract).
  2. Communication and customer support – legal basis: Art. 6(1)(b) GDPR.
  3. Fulfilment of legal obligations (accounting, tax documents, archiving of invoices) – legal basis: Art. 6(1)(c) GDPR in conjunction with Act No. 431/2002 Coll. on accounting and Act No. 222/2004 Coll. on VAT.
  4. The controller's legitimate interest (recovery of receivables, protection of legal claims) – legal basis: Art. 6(1)(f) GDPR.

IV. Data retention period

  1. We keep personal data only for the period necessary to fulfil the purpose of processing.
  2. For the purpose of handling an inquiry (without concluding a contract) – a maximum of 1 year from the last contact.
  3. For concluded contractual relationships – for the duration of the contract and subsequently for 5 years after its termination (due to possible complaints and the defence of legal claims).
  4. Tax and accounting documents are kept for 10 years in accordance with the Accounting Act.

V. Recipients and processors

  1. We do not provide personal data to third parties for their marketing or other own purposes.
  2. For the purpose of delivering ordered goods, we pass the necessary contact details to the courier or transport company that handles delivery for us.
  3. For accounting purposes, the data may be made available to an external accountant bound by a processing agreement and confidentiality.
  4. Web hosting and e-mail services are provided by technical providers bound by a personal data processing agreement under Art. 28 GDPR.
  5. Personal data is not transferred to third countries outside the European Economic Area.

VI. Your rights

In accordance with the GDPR, as a data subject you have the following rights:

  • Right of access – you have the right to obtain confirmation as to whether we process your personal data and a copy of that data.
  • Right to rectification – you have the right to request the correction of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten") – you have the right to request the deletion of your data if the legal conditions are met.
  • Right to restriction of processing – you may request the restriction of processing of your data in the cases provided by law.
  • Right to data portability – you have the right to obtain your data in a structured, commonly used and machine-readable format.
  • Right to object – you have the right to object to the processing of your data based on legitimate interest.
  • Right to withdraw consent – if processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to its withdrawal.
  • Right not to be subject to automated decision-making including profiling – we do not use automated decision-making or profiling.

Send requests to exercise your rights in writing to the company's registered office or by e-mail to info@vytycovacie-koliky.sk. We will respond within 30 days of receiving the request; in more complex cases the period may be extended by a further 2 months, of which we will inform you.

VII. Right to lodge a complaint

If you believe that the processing of your personal data violates applicable legal regulations, you have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27
Web: www.uoou.sk
E-mail: statny.dozor@pdp.gov.sk

VIII. Security of processing

  1. Personal data is stored in a secure electronic system protected against unauthorised access, loss or destruction.
  2. Communication between your browser and our website is encrypted using the HTTPS/TLS protocol.
  3. Access to personal data is restricted exclusively to persons who necessarily need it to perform their work and who are bound by confidentiality.
  4. We regularly evaluate security measures and update them in line with current standards.

IX. Cookies

Our website uses only essential technical cookies necessary for the proper functioning of the website (e.g. a session cookie to secure forms against abuse). We do not use tracking, advertising or third-party analytics cookies, and we do not track your behaviour on the website.

X. Final provisions

  1. This privacy policy takes effect on 1 January 2026.
  2. The controller reserves the right to update this policy. Data subjects will be informed of significant changes via the website or by e-mail (if we have current contact details).
  3. The current version is always published at vytycovacie-koliky.sk/ochrana-osobnych-udajov/.

The Privacy Policy is effective from 1 January 2026.
TONWOOD s.r.o., Dubovecká 742/37, 914 01 Trenčianska Teplá, Reg. No.: 55 553 435, Tax ID: 2122021308.