Personal Data Processing Policy

We are the company SP resort, s. r. o., with our registered office at Svätoplukova 1, 010 01 Žilina, ID No. (IČO): 47555840.

We operate an e-shop on the website www.saganshop.sk.

In providing our services, selling goods, and operating our website, we process certain personal data.

The processing of personal data is primarily governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).

I. Processing of Personal Data

A. Processing of personal data in case of using the contact form

If you contact us regarding our products and services, we will work with the contact details you provide us, primarily through the contact form. This includes personal data in the scope of: name, surname, e-mail address, or phone number and the text of the message.

• For what reason? Based on the submitted personal data, we will subsequently contact you regarding our offer of goods and services.
• On what legal basis? This processing is based on Article 6(1)(b) of the GDPR – performance of a contract, or taking steps prior to entering into a contract at your request.
• Consequence of non-provision: If you do not provide us with this personal data, we will not be able to communicate with you for the purpose of concluding a contract.
• How long will we process the data? Unless we establish further cooperation, we will process your personal data for no longer than 12 months from our last communication.

B. Processing of personal data in case of purchase

If you purchase from us, we will work with the personal data we need to ensure the conclusion of the contract. These are mainly billing and delivery details: name, surname, address (street, house number, zip code, city, state), e-mail address, telephone number, or ID No. (IČO) / Tax ID (DIČ) for entrepreneurs.

• For what reason? We need to process the personal data to fulfill our obligations arising from the contract – delivery of goods or provision of services. We will also use your contact details to communicate regarding the status of your order, or regarding complaints or your questions. Furthermore, we process data to fulfill our legal obligations (mainly for accounting and tax purposes).
• On what legal basis? This processing is based on Article 6(1)(b) of the GDPR – performance of a contract and Article 6(1)(c) of the GDPR – fulfillment of our legal obligation.
• How long will we process the data? During the delivery of goods or provision of services and then for 10 years from the last provision of such services or delivery of goods (due to statutory accounting requirements).

C. Newsletter (commercial communication)

If you have purchased goods or services from us and have not explicitly refused to receive marketing communications, we will use your e-mail address to send our marketing notifications.

• On what legal basis? This processing is based on Article 6(1)(f) of the GDPR – our legitimate interests, which are marketing communication targeted at our customers.
• How long will we process the data? For 5 years from your last purchase. If you no longer wish to receive our marketing notifications, you can unsubscribe at any time via e-mail or by contacting us at: info@saganshop.sk.

II. Who gets access to the data?

Your personal data stays with us. Nevertheless, certain companies or other persons work for us and have access to your personal data because they help us with the operation of our e-shop. These are:

• Shoptet a.s. (operator of the e-shop platform Shoptet)
• Delivery companies: Packeta, Slovenská pošta, PPL SK, DHL (for the delivery of goods)
• Payment providers: Shoptet Pay (for processing payments)
• Accounting office: External provider of accounting services

We process personal data only within the territory of the European Union.

III. What else you should know

• Our company does not have a designated Data Protection Officer (DPO).
• Our company does not engage in decision-making based on automated processing or profiling.
• If you have questions regarding your personal data, contact us at the e-mail address info@saganshop.sk or call +421 902 536 158.

IV. Use of Cookies

Cookies are text files containing small amounts of information which are downloaded to your device when you visit our website. Cookies are then sent back to the website on each subsequent visit or to another website that recognizes them.

We use the following cookies on our website:

• Necessary cookies: Required for the operation of the website (cannot be disabled).
• Analytical/statistical cookies: Allow us to track visitor numbers and website usage (only with your prior consent).
• Advertising cookies: Used to track preferences and display relevant ads (only with your prior consent).

You can also subsequently refuse cookies in the settings of your internet browser or set the use of only some of them.

V. Your Rights in relation to the processing of personal data

The GDPR gives you, among other things, the right to contact us and request information about what personal data of yours we process, to request access to this data and have it updated or corrected, or to request a restriction of processing. You can request a copy of the processed personal data, request the erasure of personal data in certain situations, and in certain cases, you have the right to data portability. You may object to processing based on legitimate interest.

If you believe that we are not handling the data correctly, you have the right to file a complaint with the supervisory authority, which in our jurisdiction is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), or to turn to a court.

These policies are effective from February 18, 2026.