Privacy policy

PRIVACY POLICY (GDPR)
Effective from: 2026-07-24
Operator: Carpathian West Products, s.r.o., Poľná 4, 903 01 Senec, Slovak Republic
Email: info@pristools.com | Phone: +421 945 461 917
Company ID: 56 789 149 | Tax ID: 2122427758 | VAT ID: SK2122427758
Registered in the Commercial Register of the City Court Bratislava III, section: Sro, file no.: 185242/B
Article I – Introductory Provisions
1. This Privacy Policy is prepared in accordance with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on Personal Data Protection.
2. It explains which personal data we process, for what purposes, on which legal bases and how the data is protected.
3. The controller follows the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.
Article II – Purposes of Data Processing
• performance and delivery of orders,
• management of a customer account where voluntarily created,
• compliance with legal obligations, including accounting and tax records,
• customer communication, inquiries, withdrawals and complaints,
• marketing and newsletters on the relevant legal basis,
• website analytics and behaviour through cookies and similar technologies.
Article III – Legal Basis for Processing
1. Performance of a contract under Article 6(1)(b) GDPR.
2. Consent under Article 6(1)(a) GDPR.
3. Compliance with legal obligations under Article 6(1)(c) GDPR.
4. Legitimate interests under Article 6(1)(f) GDPR, including protection of property and defence of legal claims.
Article IV – Categories of Processed Data
• identification data, including name, business name and company ID for business customers,
• contact details, including email, phone number and address,
• order, payment, delivery, withdrawal and complaint information,
• technical data, including IP address, cookies, logs and device information.
Article V – Data Recipients
• courier and delivery companies,
• payment service providers and payment gateways,
• e-commerce platform, IT, hosting, analytics and marketing providers,
• accountants, tax advisers and legal advisers,
• public authorities where required by law.
Article VI – Transfers to Third Countries
Personal data is not transferred outside the EU/EEA unless otherwise stated. When global e-commerce, payment, analytics or marketing providers are used, transfers may take place on the basis of an adequacy decision, standard contractual clauses or another mechanism permitted by GDPR.
Article VII – Data Retention Period
• order data and accounting records: for the statutory period, generally 10 years; longer where necessary for an ongoing dispute or claim,
• customer accounts: until deletion or the purpose ends,
• marketing data: until consent is withdrawn or an objection is made,
• technical data and cookies: according to type and settings, generally no longer than 13 months unless a shorter period is required.
Article VIII – Rights of the Data Subject
Providing data is voluntary, but certain data is required to conclude and perform a contract or comply with law. No automated decision-making, including profiling, producing legal or similarly significant effects is carried out.
• access to personal data,
• rectification of inaccurate data,
• erasure where the conditions are met,
• restriction of processing,
• data portability,
• objection to processing based on legitimate interests and to direct marketing,
• withdrawal of consent at any time without affecting prior lawful processing,
• a complaint to the Slovak Data Protection Authority (www.dataprotection.gov.sk).
Article IX – Data Security
The controller implements appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.
Article X – Cookies
1. The website uses cookies and similar technologies for essential functions, analytics and marketing.
2. Strictly necessary cookies may be used without consent where required to provide the service. Analytics
and marketing cookies are used only after consent unless permitted otherwise by law.
3. Users may set preferences on their first visit and change them at any time through the “Cookie Settings” link in the footer.
4. Further details are provided in the Cookie Policy below.
Article XI – Changes to the Privacy Policy
The controller may update this Privacy Policy. The current version will be published on the website with its effective date.

COOKIE POLICY
Article I – Purpose of Cookies
Cookies are small text files stored on a user’s device that enable website functionality, remember settings, provide analytics and – after consent – support personalised marketing.
Article II – Types of Cookies Used
• necessary cookies – enable core website functions,
• analytics cookies – help evaluate traffic and website use,
• marketing cookies – support personalisation and measurement of advertising.
Article III – Consent
Consent for non-essential cookies may be given through the cookie banner and withdrawn or changed at any time through Cookie Settings.
Article IV – Cookie Duration
Session cookies are deleted when the browser closes. Persistent cookies remain for the period shown in Cookie Settings, generally no longer than 13 months unless otherwise stated.
Article V – Cookie Settings Management
Cookie preferences may be managed through the cookie banner or browser settings. Blocking some cookies may affect website functionality.
Article VI – Contact
Questions about privacy or cookies may be sent to info@pristools.com.