This notice explains what personal data we collect through this website and online shop, why we process it, the legal basis for doing so, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data (Slovak Republic).

Controller: Netcraft, s. r. o., IČO 48106330, netcraft.sk. For any privacy question or request, contact us via our contact form.

What we collect and why

Orders and enquiries

When you place an order or contact us, we process the details you provide — your name, email address, phone number and, for courier delivery, your shipping address — together with your order details and any notes. We use this only to process and deliver your order, issue the required accounting and tax documents, and communicate with you about it.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with our legal obligations under accounting and tax law (Art. 6(1)(c) GDPR).

Analytics and advertising

With your consent, we use the third-party tools below to measure traffic, understand how the site is used, and measure the performance of our advertising. They set cookies or similar identifiers and may transfer data outside the EU under the providers’ own safeguards:

• Google Analytics 4 (Google Ireland Ltd.) — aggregated traffic and usage statistics.
• Microsoft Clarity (Microsoft Ireland Operations Ltd.) — anonymised usage analytics, including heatmaps and session replay.
• Meta Pixel (Meta Platforms Ireland Ltd.) — measuring and optimising the performance of our advertising on Instagram and Facebook.

Legal basis: your consent (Art. 6(1)(a) GDPR). None of these tools load until you accept cookies, and you can withdraw your consent at any time (see below).

Cookies and consent

The first time you visit, we ask whether you accept analytics and advertising cookies. Nothing in the list above loads unless you choose Accept. Essential cookies required for the site and checkout to work are always active and do not need consent.

You can change or withdraw your choice at any time by selecting "Cookie settings" in the footer of any page, or by clearing this site’s cookies in your browser. Withdrawing consent stops further analytics and advertising tracking; it does not affect processing already carried out while your consent was active.

Payments

Card and bank payments are handled by our payment gateway 24-pay (24-pay s. r. o.). To process a payment we pass only the information needed for the transaction — your name, email address, and the order amount and reference. Your card details are entered directly with the payment provider over its own secure connection; we never see or store your full card number. 24-pay processes this data under its own privacy policy.

How long we keep your data

Order, invoice, and accounting-related personal data are retained for up to 10 years where required by Slovak law; shipping and other operational data are retained only for as long as necessary for delivery and related customer service.

Analytics and advertising cookies are stored on your device for limited periods — Google Analytics up to around 2 years, Microsoft Clarity up to around 1 year, and the Meta Pixel up to around 3 months. The providers keep the data they collect under their own retention policies; withdrawing consent and clearing the cookies removes them from your device.

Hosting and delivery

The website is served through Cloudflare, which processes limited technical data such as your IP address to deliver the site securely and to detect your country for shipping options.

Your Rights as a Data Subject

In accordance with the GDPR and Act No. 18/2018 Coll. on the Protection of Personal Data (Slovak Republic)

The following rights apply to all clients and customers whose personal data we process.

Right of access

You have the right to obtain a copy of the personal data we hold about you, as well as information about the purposes for which it is processed. In most cases this will be provided in writing, unless you request another format. If your request is submitted electronically, we will respond electronically where technically feasible.

Right to rectification

We take reasonable steps to keep the personal data we hold accurate, complete, and up to date. If you believe any information we hold about you is inaccurate, incomplete, or outdated, please contact us and we will correct, update, or supplement it accordingly.

Right to erasure ("right to be forgotten")

You may request that we delete your personal data — for example, when the data is no longer necessary for the purpose for which it was originally collected. Each such request will be assessed in light of all relevant circumstances and applicable legal obligations, including the accounting and tax retention periods noted above.

Right to restriction of processing

You are entitled to ask us to stop using your personal data in certain circumstances — for instance, if you believe the data we hold may be inaccurate, or if you consider that we no longer have a legitimate need to process it.

Right to data portability

You have the right to request that we transfer the personal data you have provided to us to a third party of your choosing. This right applies to data processed on the basis of your consent or a contract to which you are a party.

Right to object

You have the right to object to the processing of your personal data where it is based on our legitimate interests. If we cannot demonstrate a compelling legitimate ground that overrides your interests, we will cease processing your data following a valid objection.

Right to withdraw consent

Where we process your personal data on the basis of your consent, you may withdraw that consent at any time. For analytics and advertising cookies, you can do this instantly using "Cookie settings" in the footer of any page. For any other consent-based processing, contact us via our contact form or in writing. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

Right to lodge a complaint

If you believe your personal data is being processed unlawfully or unfairly, you have the right to file a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Námestie 1. mája 18, 811 06 Bratislava. Secretariat & registry: +421 2 32 31 32 14, +421 2 32 31 32 49.

Questions about your rights? Contact us via available ways of contact.