Privacy Policy (Datenschutz)

This statement informs you about the nature, scope and purpose of the processing of personal data under the General Data Protection Regulation (GDPR / DSGVO).

1. Data Controller

The party responsible for data processing on this website is:

2. General Principles / Your Rights

We process personal data only insofar as this is necessary to provide a functioning website as well as our content and services. Processing generally takes place only with consent (Art. 6(1)(a) GDPR), for the performance of a contract (lit. b), to comply with legal obligations (lit. c) or on the basis of our legitimate interest (lit. f).

3. Hosting & Server Log Files

This website is hosted by Cloudflare, Inc. (content delivery network and edge computing). When the pages are accessed, information transmitted by your browser is automatically processed in server log files: IP address, date and time, page accessed, referrer URL, browser type and operating system. The legal basis is Art. 6(1)(f) GDPR (secure, stable operation of the website). A data processing agreement (Art. 28 GDPR) is in place with Cloudflare.

4. Cookies

We use strictly necessary cookies and similar storage only for operation, security, language selection, the shopping cart and sign-in/session functions. Your choice is kept in your browser’s local storage for 180 days so that we can respect it without asking again. Non-essential storage such as Google Analytics cookies is activated only after your explicit consent. The cookieless basic measurement signals sent without consent are explained below. You can change your choice at any time through ‘Cookie settings’ in the footer.

5. Contact Form & Email Contact

When you contact us via the contact form or by email, we process the data you provide (name, email address, phone number if applicable, subject and message) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or lit. f (handling of enquiries). The data is deleted once the request has been conclusively dealt with and no statutory retention obligations preclude this.

6. Orders & Payment Processing

To process your order, we process customer data (name, contact details, delivery address if applicable) and contract data. The legal basis is Art. 6(1)(b) GDPR. Payment is processed via the payment service provider Adyen N.V. (Netherlands). You enter your payment data (e.g. card details) directly with Adyen; we ourselves do not store full card data. Adyen’s privacy notice applies in addition. Tax and commercial retention periods (usually up to 10 years) remain unaffected (Art. 6(1)(c) GDPR).

7. Customer Account & Login

To access your member area, we process your email address and login data. Sessions are managed via technically necessary cookies. The legal basis is Art. 6(1)(b) GDPR.

8. Email Dispatch

For sending order, service and notification emails, we use the service provider Mailgun (Sinch/Mailgun Technologies). Your email address and the message content are processed in this context; for delivery monitoring, dispatch and open events may be recorded. The legal basis is Art. 6(1)(b) or lit. f GDPR.

9. Push Notifications

If you activate push notifications, we store the subscription data provided by your browser (endpoint URL and keys) in order to deliver notifications to you. The legal basis is Art. 6(1)(a) GDPR (consent); you can revoke this at any time in your browser settings.

10. YouTube Videos & Embedded Third-Party Content

On the highlight/summary pages, we embed videos from YouTube (Google Ireland Ltd. / Google LLC). We use the extended data protection mode (youtube-nocookie.com): data is only transmitted to YouTube once you actively start a video. When the video starts, your IP address and information about your device may be transmitted to YouTube/Google and cookies may be set; a transfer to the USA may also take place. Processing by YouTube is carried out under its own responsibility in accordance with Google’s privacy policy (https://policies.google.com/privacy). The legal basis for the integration is Art. 6(1)(f) GDPR (attractive presentation of our offering).

News articles are compiled from publicly available third-party sources; the respective sources are linked at the end of each article. When you access linked external pages, the privacy policy of the respective provider applies.

11. Your Rights as a Data Subject

You have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may revoke any consent given at any time with effect for the future (Art. 7(3)). An informal message to the contact address above is sufficient to exercise these rights.

12. Right to Lodge a Complaint with the Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority at the controller’s registered office is: Úrad na ochranu osobných údajov Slovenskej republiky (Data Protection Authority of the Slovak Republic), Hraničná 12, 820 07 Bratislava.

13. Storage Period & Data Security

We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods. Transmission is encrypted via TLS/HTTPS (recognisable by the padlock symbol in your browser).

14. Currency of This Statement

This privacy policy is updated when our offerings or the legal situation change.