Privacy Policy

Last updated: 25 October 2026

This Privacy Policy explains how we process your personal data when you visit okresky.com, buy from us, subscribe to our emails or contact us. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and Slovak Act No. 18/2018 Coll. on the protection of personal data.

1. Controller

The controller of your personal data is:

Miloš Fusek – OKRESKY
Námestie Matice slovenskej 1294/10, 018 41 Dubnica nad Váhom, Slovakia
IČO: 55155430
Email: okresky@okresky.sk
Phone: +421 918 922 597

We have not appointed a data protection officer. For any question about your data, contact us at the email above.

2. What data we process, why, and on what legal basis

Purpose	Data	Legal basis	How long we keep it
Processing and delivering your order, payments, refunds, withdrawals	Name, billing and delivery address, email, phone, order details, payment status (we never see or store your full card number)	Performance of the contract – Art. 6(1)(b) GDPR	For the duration of the contract and then as long as needed for accounting and claims (see below)
Accounting and tax records (invoices)	Name, address, order and invoice details	Legal obligation – Art. 6(1)(c) GDPR (Slovak Accounting Act No. 431/2002 Coll. and VAT Act No. 222/2004 Coll.)	10 years from the end of the year to which the records relate
Handling complaints about defects and legal claims	Order details, correspondence, photos you send us	Legal obligation – Art. 6(1)(c) GDPR; our legitimate interest in establishing and defending legal claims – Art. 6(1)(f) GDPR	Until the end of the liability period for defects (24 months from delivery) plus the statutory limitation period for claims
Customer account (optional)	Email, name, addresses, order history	Performance of the contract – Art. 6(1)(b) GDPR	Until you delete the account or ask us to delete it
Answering your questions	Name, email, phone, content of your message	Our legitimate interest in responding to enquiries – Art. 6(1)(f) GDPR, or steps before entering into a contract – Art. 6(1)(b) GDPR	Up to 3 years after the last communication
Email newsletter	Email address, subscription date, newsletter opens and clicks	Your consent – Art. 6(1)(a) GDPR	Until you unsubscribe (every email has an unsubscribe link)
Security of the store and fraud prevention	IP address, device and browser data, order and payment data	Our legitimate interest in a secure store – Art. 6(1)(f) GDPR	As long as necessary for this purpose, typically up to 12 months
Website statistics and marketing cookies	Cookie identifiers, pages visited, device and browser data	Your consent given in the cookie banner – Art. 6(1)(a) GDPR	According to the lifetime of each cookie; you can withdraw consent at any time in the cookie settings

Providing data for an order is necessary to conclude and perform the contract; without it we cannot deliver your order. Subscribing to the newsletter and accepting non-essential cookies is voluntary.

We do not use your data for automated decision-making, including profiling, that would have legal or similarly significant effects on you.

3. Cookies

Strictly necessary cookies (for example for the cart and checkout) are used without consent because the store cannot work without them. Analytics and marketing cookies are used only if you agree in the cookie banner. You can change your choice at any time using the cookie settings link on the website or by deleting cookies in your browser.

4. Who we share your data with

We share personal data only to the extent necessary, with:

• Shopify (Shopify International Limited, Ireland) – operator of our e-commerce platform, which hosts the store and processes order data on our behalf. For certain features Shopify acts as an independent controller; see the Shopify Consumer Privacy Policy.
• Stripe – payment processing. Stripe processes payment data as an independent controller for payment and fraud-prevention purposes; see the Stripe Privacy Policy.
• Packeta and its partner carriers in the delivery country – delivery of your order (name, delivery address, phone, email).
• [Email newsletter provider] – sending newsletters, if you subscribed.
• Our accountant – keeping accounting and tax records.
• Public authorities, courts and law enforcement where the law requires it.

We do not sell your personal data.

5. Transfers outside the EU/EEA

Some of our providers (in particular Shopify and Stripe) may process data outside the EU/EEA, for example in Canada or the United States. Such transfers take place only on the basis of a European Commission adequacy decision (including the EU–US Data Privacy Framework for certified companies) or the European Commission's Standard Contractual Clauses.

6. Your rights

You have the right to:

• access your personal data and receive a copy of it;
• have inaccurate data corrected;
• have your data erased, unless we must keep it by law;
• restrict processing;
• data portability;
• object to processing based on our legitimate interest, and at any time to processing for direct marketing;
• withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, email us at okresky@okresky.sk. We will reply within one month. We may ask you to verify your identity.

You also have the right to lodge a complaint with a supervisory authority. In Slovakia this is the Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk. You can also contact the authority in your EU country of residence.

7. Security

We protect personal data with appropriate technical and organisational measures. Payment card data is processed directly by our payment provider and never passes through our hands.

8. Children

Our store is not intended for children under 16 and we do not knowingly collect their personal data.

9. Changes

We may update this Privacy Policy. The current version is always published on this page with the date of the last update.