Privacy Policy

1. Controller

The controller is UNCIMOTO s.r.o., with its registered office at Mikszáthova 35, 990 01 Veľký Krtíš, company ID: 53489900, registered in the Commercial Register of the Banská Bystrica District Court, section Sro, insert No. 40410/S. Contact for data protection matters: info@uncimoto.sk, +421 908 88 48 74. The controller has not appointed a data protection officer, as it is not required to by law.

2. Scope of processed data

• identification and contact details: name and surname, e-mail, phone;
• delivery and billing details: address, optionally company name, company ID / tax ID / VAT ID;
• data on orders and communication with the seller;
• payment data processed via the payment gateway (the seller does not store full payment card details);
• technical data: IP address, device data and cookies.

3. Purposes and legal bases of processing

• Order fulfilment and performance of the contract (delivery, complaints, communication) — legal basis: Art. 6(1)(b) GDPR.
• Compliance with legal obligations (bookkeeping, issuing and archiving tax documents) — Art. 6(1)(c) GDPR.
• Legitimate interests of the controller (e-shop security, fraud prevention, exercising legal claims, basic traffic analytics) — Art. 6(1)(f) GDPR.
• Consent (sending newsletters and marketing, analytical and marketing cookies) — Art. 6(1)(a) GDPR; consent is voluntary and can be withdrawn at any time.

4. Recipients and processors

Personal data may be disclosed to processors who process them on behalf of the controller under a contract pursuant to Art. 28 GDPR, to the extent necessary:

• carriers (e.g. Slovenská pošta, Packeta) — for delivery;
• the payment gateway provider (Stripe) — for payment processing;
• the server hosting and e-mail services provider;
• the accountant or accounting services provider.

The controller does not sell personal data to third parties. Data may be provided to public authorities where required by a specific regulation.

5. Transfer to third countries

When using certain services (e.g. the Stripe payment gateway), data may be transferred outside the European Economic Area. Any such transfer takes place solely with appropriate safeguards under Art. 44 et seq. GDPR (in particular the standard contractual clauses approved by the European Commission).

6. Retention period

• accounting and tax documents: 10 years (Act No. 431/2002 Coll. on accounting);
• data on orders and contracts: for the duration of the contract and thereafter during the limitation and warranty periods;
• data processed on the basis of consent: until consent is withdrawn;
• customer account: until it is cancelled by the data subject.

7. Rights of the data subject

Under the GDPR the data subject has in particular the following rights:

• the right of access to data (Art. 15);
• the right to rectification (Art. 16);
• the right to erasure – the “right to be forgotten” (Art. 17);
• the right to restriction of processing (Art. 18);
• the right to data portability (Art. 20);
• the right to object to processing based on legitimate interest (Art. 21);
• the right to withdraw consent at any time (Art. 7(3)), without affecting the lawfulness of prior processing.

Rights can be exercised by e-mail at info@uncimoto.sk. The controller will respond without undue delay, no later than within one month.

8. Right to lodge a complaint

If the data subject believes that the processing of their data is contrary to the law, they have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, www.uoou.sk.

9. Cookies

The e-shop uses necessary cookies required for basic functioning (e.g. cart, login), processed on the basis of legitimate interest, and analytical and, where applicable, marketing cookies (e.g. Google Analytics), processed solely on the basis of consent given via the cookie bar. Consent can be changed or withdrawn at any time; cookies can also be managed in the browser settings.

10. Automated decision-making

The controller does not carry out automated individual decision-making or profiling with legal effects for the data subject within the meaning of Art. 22 GDPR.

11. Changes to the policy

The controller reserves the right to update this policy. The current wording is always available on this page.