Privacy Policy

of the online store www.originalskroute66.sk

Effective from: 4 August 2026

1. Data Controller

The controller of personal data is ROAD 66, s. r. o., with its registered seat at ul. Družby 322, 976 98 Lopej, Company ID (IČO): 50390422, registered in the Commercial Register of the District Court Banská Bystrica, Section: Sro, Insert No. 30108/S (hereinafter the "Controller").

Contact: email eshop@originalskroute66.sk, phone +421 911 84 84 50.

2. Scope of Personal Data Processed

The Controller processes in particular the following personal data of data subjects (e-shop customers and website visitors):

first name, surname,
billing and delivery address,
email address and phone number,
data on ordered goods and payment,
for business customers: company name, Company ID (IČO), and, where applicable, Tax ID (DIČ) / VAT ID (IČ DPH),
data obtained through cookies during a visit to the website (e.g. IP address).

3. Purposes and Legal Bases of Processing

a) Order fulfilment and performance of the purchase contract – the legal basis is performance of a contract under Art. 6(1)(b) GDPR. Data is processed for the duration of the contractual relationship and the running of the warranty/complaint period.

b) Fulfilment of legal obligations (in particular the issuing and archiving of accounting and tax documents) – the legal basis is Art. 6(1)(c) GDPR in conjunction with Act No. 431/2002 Coll. on Accounting. Data is retained for a period of 10 years.

c) Marketing communication (e.g. sending newsletters) – exclusively on the basis of the data subject's consent, legal basis Art. 6(1)(a) GDPR. Data is processed until consent is withdrawn.

d) Cookies and similar technologies on the website – according to the cookie category and the consent given in the cookie banner on the Controller's website.

e) The provision of personal data for the purpose of processing an order is a contractual requirement. If the data subject does not provide this data, the Controller will not be able to process the order or conclude the purchase contract.

4. Recipients of Personal Data and Cross-Border Transfer

Personal data may be disclosed to the following categories of recipients, solely to the extent necessary to fulfil the purpose of processing:

delivery and courier companies ensuring delivery of goods,
the Controller's accountant / tax advisor,
the provider of web hosting and the online store platform.

The Controller's website uses embedded third-party elements (in particular a YouTube video and Google Maps) provided by Google LLC, based in the USA. When these elements are displayed, certain data (e.g. IP address) may be transferred to the USA. These elements are displayed and loaded only after consent to marketing cookies has been given in the cookie banner on the website. The data transfer is carried out on the basis of appropriate safeguards provided by the respective recipient (e.g. the EU–U.S. Data Privacy Framework) or other safeguards within the meaning of Art. 46 GDPR.

5. Rights of the Data Subject

The data subject has, in particular, the right to:

request confirmation from the Controller as to whether their personal data is being processed, and if so, to access such data and information about the processing (Art. 15 GDPR),
rectification of inaccurate or incomplete personal data (Art. 16 GDPR),
erasure of personal data, where the conditions under Art. 17 GDPR are met,
restriction of processing of personal data in cases under Art. 18 GDPR,
be informed of any rectification, erasure or restriction of processing carried out by the Controller (Art. 19 GDPR),
data portability to another controller, where the conditions under Art. 20 GDPR are met,
object to the processing of personal data on grounds relating to their particular situation (Art. 21 GDPR),
not be subject to a decision based solely on automated processing, including profiling (Art. 22 GDPR),
withdraw consent to the processing of personal data at any time, without affecting the lawfulness of processing based on consent given before its withdrawal,
be informed of a personal data breach where it is likely to result in a high risk to their rights (Art. 34 GDPR).

The Controller does not carry out automated individual decision-making, including profiling, within the meaning of Art. 22 GDPR.

The data subject may exercise the above rights in writing at the Controller's registered address or by email to eshop@originalskroute66.sk.

6. Right to Lodge a Complaint with the Supervisory Authority

The data subject has the right to lodge a complaint with the supervisory authority, which is:

Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky)

Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, Slovak Republic

email: statny.dozor@pdp.gov.sk, www.dataprotection.gov.sk

7. Cookies

Detailed information on the use of cookies, their categories, and the ability to set consent preferences is provided in the cookie banner on the website www.originalskroute66.sk.

8. Final Provisions

The Controller may unilaterally amend this Privacy Policy. The current version is always available on the website www.originalskroute66.sk.