Privacy policy
This document contains three language versions: Slovak, Czech and English. GDPR is a single regulation across the EU, so the substance is the same across markets. Only the language and the relevant supervisory authority differ. If versions conflict, the Slovak version prevails.
Here we explain what personal data we process about you, why, for how long, and what rights you have. We keep it clear. If you have a question, write to us at [email protected].
Contents
1. Who is the controller
The controller that determines how your data is processed is:
coach potato, s. r. o. Registered office: Staničná 194, 022 01 Čadca, Slovak Republic Company ID: 52 009 343 E-mail: [email protected] For data protection matters, contact us at: ___ (for example [email protected], to be completed before publication)
We have not appointed a Data Protection Officer (DPO), as we are not required to. If this changes, we will add the DPO details.
2. What data we process
•Identification and contact data: name, surname, address, e-mail, phone.
•Order and payment data: order contents, amount, purchase history, data needed for payment (the card number itself is processed by the payment gateway, not by us).
•Account data: login details, settings, any subscription.
•Communication: the content of messages you exchange with us (e-mail, complaints).
•Website behaviour data: cookies, IP address, device, interactions, where you give us your consent (see section 4).
3. Purposes and legal bases
•Handling and delivering your order, performing the contract (including pre-order and subscription). Legal basis: performance of a contract, Article 6(1)(b) GDPR.
•Accounting and tax obligations (invoices, OSS VAT). Legal basis: compliance with a legal obligation, Article 6(1)(c) GDPR.
•Handling complaints and asserting legal claims. Legal basis: legal obligation and legitimate interest, Article 6(1)(c) and (f) GDPR.
•Marketing (newsletter, offers), analytics and advertising tools. Legal basis: your consent, Article 6(1)(a) GDPR. You can withdraw consent at any time.
4. Cookies and analytics
We use cookies on the website. We need essential cookies for the e-shop to work. We use analytics and marketing cookies only with your consent through the cookie banner. Consent is not pre-ticked and you can change it at any time.
To measure traffic we use Google Analytics 4 (Google Ireland Limited). To measure advertising and for remarketing we use the Meta Pixel (Meta Platforms Ireland Limited). These tools work with cookies and device identifiers. We do not activate them without your consent.
5. Who we share data with
We share your data only with processors who help us deliver the service, and only to the extent necessary:
•Pack4you (fulfillment, storage and packing)
•Packeta and Zásilkovna (delivery)
•24-pay (payment processing)
•Neoship (logistics)
•Google Ireland Limited (analytics, Google Analytics 4)
•Meta Platforms Ireland Limited (advertising tools, Meta Pixel)
•E-shop platform and hosting provider ___ (to be completed, for example Venalio)
We do not pass your data to anyone for purposes you would not expect, and we do not sell it.
6. Transfers outside the EU
Some processors (in particular Google and Meta) may process data outside the EU, including in the USA. Such transfers are safeguarded by an adequacy decision under the EU-US Data Privacy Framework, or by Standard Contractual Clauses (SCC) under the GDPR.
7. How long we keep data
•Orders and accounting documents: 10 years, as required by tax and accounting rules.
•Customer account: for as long as it exists, until closed.
•Marketing data: until you withdraw consent.
•Analytics and marketing cookies: according to the cookie lifetime, at most ___ (to be completed, for example 14 months for GA4).
•Communication and complaints: for the statutory periods and for as long as necessary to protect legal claims.
8. Your rights
You have the right to access your data, to rectify it, to erase it, to restrict processing, to data portability, to object to processing, and to withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal. Send your request to [email protected] and we will handle it without undue delay, no later than one month.
9. Supervisory authority
If you believe we process your data in breach of the rules, you can lodge a complaint with a supervisory authority. For Slovakia this is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk. As a consumer from another EU country, you can also contact the supervisory authority in your own country.
10. Automated decision-making
We do not carry out automated decision-making that has a legal effect on you. Advertising tools may personalise ads based on cookies, only where you give us your consent.
11. Changes to this policy
We may update this policy. The current version is always at yourcoachpotato.com. We will inform you of any material change.
12. Effectiveness
This policy takes effect on ___ (to be completed before publication).