GDPR – Personal Data Protection

1. Data Controller:
GAMATEX SR, s.r.o.
Registered office: Horná 10, 974 01 Banská Bystrica
Company ID: 36057606 | Tax ID: 2021715377 | VAT ID: SK 2021715377
Registered in the Commercial Register of the District Court Banská Bystrica, Section: Sro, Insert No. 8074/S
E-mail: gamatexsr@gmail.com
Telephone: +421 918 473 538
Contact point for GDPR inquiries: info@ekofakt.com

2. Principles of Personal Data Processing

  • we process personal data in a fair, lawful and transparent manner
  • we collect personal data solely for specific, explicit and legitimate purposes and do not process them in a way that is incompatible with these purposes
  • the scope of processed personal data is adequate, relevant and limited to what is necessary in relation to the stated purposes
  • we have taken all reasonable measures to ensure that we process accurate and up-to-date personal data
  • we store personal data only for the period necessary for the purposes for which they are processed
  • we process personal data in a manner that ensures their appropriate security, including protection by suitable technical and organisational measures against unauthorised or unlawful processing and against accidental loss, destruction or damage

3. What Personal Data We Process

  • First name and surname
  • Address
  • Telephone number
  • E-mail address
  • Company ID, Tax ID, VAT ID (for invoicing and delivery of goods)
  • Bank details (IBAN) for refunds or payments
  • IP address and browser data (via cookies – for details, see Cookie Policy)
  • Order history and communication

4. Purposes of Personal Data Processing

  • Performance of a contract – sale of goods and services, invoicing, mutual communication, delivery of goods
  • Compliance with legal obligations – keeping accounts, VAT records, archiving tax documents pursuant to Act No. 431/2002 Coll. on Accounting and Act No. 222/2004 Coll. on Value Added Tax
  • Legitimate interest – protection of legal claims, internal statistics, ensuring the security of the website
  • Consent – sending marketing information and newsletters (consent can be withdrawn at any time)

5. Legal Basis for Processing Your Personal Data

  • Performance of a contract (Article 6(1)(b) GDPR) – sale of goods and services, invoicing, mutual communication
  • Legal obligation (Article 6(1)(c) GDPR) – retention of accounting and tax documents
  • Legitimate interest (Article 6(1)(f) GDPR) – protection of legal claims, operation of the website
  • Consent (Article 6(1)(a) GDPR) – marketing purposes, cookies (details in the Cookie Policy)

6. Recipients of Your Personal Data

  • our suppliers of goods and carriers for the purpose of delivering goods
  • public authorities on the basis of legal requirements (e.g. tax authorities, law enforcement authorities)
  • accounting firm and law firm (to the extent necessary for the performance of a contract)
  • providers of IT services and web hosting (processing within the EU)
  • third parties in connection with cookies and analytics tools – details in the Cookie Policy

7. Retention Periods for Personal Data

  • For the duration of the contractual relationship
  • After the termination of the contract for a period of 10 years in accordance with statutory obligations in the field of accounting and taxes
  • For marketing purposes for 3 years from the last contact, unless you withdraw your consent
  • For the purposes of protecting legal claims for the limitation period (4 years under the Commercial Code)

8. International Transfer of Personal Data

Your personal data may be transferred to third countries (in particular the USA) in connection with the use of third-party services such as Google Analytics, Google reCAPTCHA, LinkedIn, Instagram and other tools listed in our Cookie Policy. The transfer of data is ensured through Standard Contractual Clauses approved by the European Commission or on the basis of an Adequacy Decision.

9. Source of Personal Data

We obtain personal data directly from you via:

  • the order form on the website
  • e-mail or telephone communication
  • registration of a user account
  • public registers (Commercial Register, Trade Register) – solely for the purpose of verifying the data of business partners

10. Rights of Data Subjects

Under the GDPR, you have the following rights:

  • Right of access (Article 15 GDPR) – the right to obtain from us confirmation as to whether or not your personal data are being processed and, where that is the case, the right of access to such data and information about their processing
  • Right to rectification (Article 16 GDPR) – the right to request the rectification of inaccurate personal data and the completion of incomplete personal data
  • Right to erasure (“right to be forgotten”) (Article 17 GDPR) – the right to request the erasure of your personal data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent
  • Right to restriction of processing (Article 18 GDPR) – the right to request restriction of the processing of your personal data in certain cases
  • Right to data portability (Article 20 GDPR) – the right to receive your personal data in a structured, commonly used and machine-readable format and the right to transmit those data to another controller
  • Right to object (Article 21 GDPR) – the right to object at any time to the processing of personal data based on legitimate interests or to processing for direct marketing purposes
  • Right to human intervention in automated decision-making (Article 22 GDPR) – The processing of personal data is not subject to automated decision-making, including profiling.

11. Right to Lodge a Complaint

If you believe that your personal data are being processed unlawfully, you have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27
Tel.: +421 2 323 132 14
E-mail: statny.dozor@pdp.gov.sk
Web: www.pdp.gov.sk

12. How to Exercise Your Rights

You can exercise your rights in writing by e-mail sent to gamatexsr@gmail.com or by post to the registered office address of the company. We will handle your request without undue delay, at the latest within one month of its receipt. In justified cases, this period may be extended by a further two months, of which we will inform you.

13. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Detailed information on the use of cookies, their purpose, categories and options for managing consent can be found in a separate document Cookie Policy.

14. Final Provisions

This information on the processing of personal data is valid and effective as of 26 April 2026. We reserve the right to update this information at any time. You will be informed of any material changes by e-mail or by a notice on the website.

Contact details of the Controller:
GAMATEX SR, s.r.o.
Horná 10, 974 01 Banská Bystrica
E-mail: gamatexsr@gmail.com
Telephone: +421 918 473 538