Privacy Policy

PRIVACY POLICY AND DATA PROTECTION (GDPR)

We are SP resort, s. r. o., with registered office at Svätoplukova 1, 010 01 Žilina, Slovak Republic, Company ID (IČO): 47555840, registered in the Commercial Register of the District Court Žilina, Section Sro, File No. 60920/L.

We operate the online store at www.saganshop.com. While providing our services, selling merchandise, and operating our website, we process certain personal data in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – „GDPR“).

ARTICLE 1: CATEGORIES AND PURPOSES OF PERSONAL DATA PROCESSING

1.1. Contact Inquiries and Private Consultations

When you contact us via email or our inquiry forms (such as inquiries for high-value commemorative medals or custom collector editions), we process your contact details: name, surname, email address, and message text.

• Purpose: Responding to your inquiry, communicating availability, and executing pre-contractual steps.

• Legal Basis: Article 6(1)(b) GDPR – taking steps prior to entering into a contract at the data subject’s request.

• Retention Period: Data is processed for the duration of the inquiry and retained for a maximum of 12 months after the last communication if no purchase contract is formed.

1.2. E-shop Orders and Contract Fulfillment

When placing an order, we process delivery and billing data: name, surname, shipping/billing address, email, purchased items, and payment details (and Company ID/VAT ID for business entities).

• Purpose: Order fulfillment, secure parcel delivery, logistics updates, warranty claims processing, and compliance with statutory bookkeeping and tax regulations.

• Legal Basis: Article 6(1)(b) GDPR (contract performance) and Article 6(1)(c) GDPR (compliance with statutory legal obligations).

• Retention Period: For the duration of contract execution and thereafter for 10 years to meet statutory accounting and archival mandates.

1.3. Direct Marketing and Newsletter

If you are an existing customer and have not opted out, we may use your email address to inform you of limited-edition drops and store updates.

• Legal Basis: Article 6(1)(f) GDPR – our legitimate interest in direct marketing to existing clientele.

• Retention Period: 5 years from your last transaction. You may unsubscribe at any time via the one-click unsubscribe link in each email or by contacting info@saganshop.com.

ARTICLE 2: DATA RECIPIENTS AND PROCESSORS

To ensure secure store operations and parcel delivery, we collaborate with reliable partners subject to strict contractual confidentiality:

• Shoptet a.s. – e-commerce platform technology provider;

• Logistics & Courier Services: Packeta Slovakia s. r. o., DHL Express / DHL Parcel (order dispatch and door delivery);

• Payment Gateway Provider: Global Payments Europe, s.r.o. (secure processing of online card transactions);

• Accounting & Legal Advisors: external specialized providers handling statutory accounting and compliance.

All personal data is processed solely within the member states of the European Union / European Economic Area. No international data transfers to non-adequate third countries occur.

ARTICLE 3: COOKIES POLICY

Our website utilizes cookies categorized into three groups:

• Essential (Technical) Cookies: strictly necessary for web functionality, navigation, and shopping cart hold (cannot be disabled);

• Analytical Cookies (e.g., Google Analytics): used to evaluate web performance; activated solely upon your explicit consent via the cookie banner;

• Marketing Cookies (Facebook, Google Ads): utilized for customized advertisements; stored exclusively upon your voluntary consent.

You can adjust or revoke your cookie preferences at any time via your browser settings or the on-site cookie manager.

ARTICLE 4: YOUR RIGHTS UNDER GDPR

As a data subject, you have the following enforceable rights:

• Right of access: obtain confirmation and copies of your processed personal data;

• Right to rectification: have inaccurate or incomplete data updated promptly;

• Right to erasure („right to be forgotten“): request deletion of data where legal grounds no longer apply;

• Right to restriction of processing: in situations outlined in Article 18 GDPR;

• Right to data portability: obtain your provided data in a structured, machine-readable format;

• Right to object: object to data processing based on legitimate interests, including direct marketing;

• Right to lodge a complaint: file a complaint with the supervisory authority, the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava, web: dataprotection.gov.sk).

ARTICLE 5: ADDITIONAL PROVISIONS AND CONTACT

5.1. SP resort, s. r. o. has not designated a Data Protection Officer (DPO), as statutory thresholds under Article 37 GDPR are not met.

5.2. Personal data is not subject to automated individual decision-making or profiling as defined in Article 22 GDPR.

5.3. For questions, data rights requests, or inquiries, please contact us exclusively via email at: info@saganshop.com.

This Privacy Policy is effective as of September 25, 2026.