Privacy Policy (GDPR)

How Cimbaľák processes personal data for registration, ordering, and delivery

Last updated: 26 April 2026

1. Data controller

The controller of the application and e-shop is CIMBAĽÁK s.r.o., Duklianska 17A/3579, 085 01 Bardejov, Slovakia. ID: 36473219, Tax ID: 2020028296, VAT ID: SK2020028296. Customer support: objednavky@cimbalak.sk, phone: 054/370 00 01 or +421 908 981 605.

2. Data we process

We process data required for account creation and order fulfillment: name, email, phone, delivery address, billing details (including company data for B2B), order history, payment details, loyalty points balance, and technical usage logs.

3. Legal bases

Data is processed based on contract performance (order fulfillment), legal obligations (accounting), legitimate interest (security and fraud prevention), and consent (marketing communication).

4. Marketing consent

Marketing consent is voluntary. You can manage it anytime in your profile settings on both the web and mobile app. Withdrawal does not affect the lawfulness of processing before withdrawal.

5. Data recipients

We share data only with necessary partners: carriers, payment providers, IT hosting, and email service providers under data processing agreements.

6. Retention period

Account data is kept for the duration of the customer relationship. If a user requests account deletion, the account is blocked and personal data is scheduled for deletion after 30 days. Order data and accounting records are kept for the period required by law.

7. How to delete your account

You can request account deletion directly in the mobile app under Profile > Settings > Delete Account. After confirmation, the account is deactivated immediately, starting a 30-day period for permanent deletion.

8. Your rights

You have the right to access, rectification, erasure, restriction, portability, objection, and to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.