Privacy policy.

This Privacy Policy explains how KINGSMAN GARAGE, s. r. o. (referred to as "we", "us" or "the Controller") collects, uses, and protects personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on Personal Data Protection.

1. Data Controller

The controller of your personal data is:

2. What personal data we process

Depending on how you interact with us, we may process the following categories of personal data:

• Identification data: name, surname, title
• Contact data: email address, phone number, postal address
• Vehicle data: make, model, registration number, VIN, service and tuning history
• Communication data: content of emails, messages and call records related to your enquiry or service
• Transaction data: invoices, payment details, contract data (for clients)
• Technical data: IP address, browser type, device information, cookie identifiers (when you visit the website)

3. Processing activities

We process personal data only for clearly defined purposes. The principal processing activities are described below.

Enquiries and pre-contractual communication

Data processed: identification and contact data, content of your message. Legal basis: GDPR Art. 6(1)(b) (pre-contractual measures) or Art. 6(1)(f) (legitimate interest in responding to enquiries). Retention: up to 1 year from last contact.

Service, sales and tuning contracts

Data processed: identification, contact, vehicle, transaction and communication data necessary to perform the contract and provide the requested service. Legal basis: GDPR Art. 6(1)(b) (contract performance). Retention: for the duration of the contract and 10 years afterwards, in line with the Slovak Accounting Act.

Accounting and tax compliance

Data processed: identification, contact and transaction data appearing on invoices and accounting documents. Legal basis: GDPR Art. 6(1)(c) (legal obligation under the Slovak Accounting Act and tax legislation). Retention: 10 years from the end of the relevant accounting period.

Marketing communications

Data processed: name and email address. Legal basis: GDPR Art. 6(1)(a) (consent), where applicable. Retention: until consent is withdrawn, but no longer than 2 years from the last interaction. Each marketing email contains an unsubscribe link.

Postal and electronic correspondence

Data processed: sender and recipient details and content of the correspondence. Legal basis: GDPR Art. 6(1)(c) (legal obligation in connection with archiving and document-handling rules). Retention: 5 years.

Handling of data subject requests

Data processed: identification and contact data of the requester, content of the request and our response. Legal basis: GDPR Art. 6(1)(c) (legal obligation under GDPR Articles 15 to 22). Retention: 5 years from the end of the request handling.

4. Recipients of personal data

We do not sell personal data. Personal data may be shared with the following categories of recipients only to the extent strictly necessary:

• Accounting and tax advisors
• Legal counsel
• IT and hosting providers (including our website hosting on Netlify and email service providers)
• Parts suppliers and authorised service partners, only when needed to fulfil your service request
• Public authorities, courts and law enforcement, where required by law

5. Your rights as a data subject

Under GDPR you have the following rights regarding your personal data:

• Right of access (Art. 15): to obtain confirmation whether we process your data and to receive a copy
• Right to rectification (Art. 16): to have inaccurate or incomplete data corrected
• Right to erasure (Art. 17): "right to be forgotten", where the legal conditions are met
• Right to restriction of processing (Art. 18): under the specific conditions set out in GDPR
• Right to data portability (Art. 20): to receive your data in a structured, machine-readable format
• Right to object (Art. 21): to processing based on legitimate interest, including profiling
• Right to withdraw consent (Art. 7): at any time, without affecting the lawfulness of prior processing
• Right not to be subject to automated decision-making (Art. 22): we do not make decisions based solely on automated processing

6. How to exercise your rights

You can exercise any of your rights by contacting us in writing at sales@kingsman-garage.sk or by post at our registered office. We will respond without undue delay and at the latest within one month of receiving your request, in accordance with Art. 12 GDPR.

7. Security measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage, in line with Art. 32 GDPR. These include access control, encryption of data in transit, secure storage, regular backups, and training of staff who handle personal data.

8. Personal data breach notification

In the event of a personal data breach likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, in line with Art. 34 GDPR. Where required, we will also notify the Slovak supervisory authority within 72 hours of becoming aware of the breach (Art. 33 GDPR).

9. Right to lodge a complaint

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Slovak supervisory authority:

10. Cookies and website analytics

Our website uses only essential technical cookies necessary for the website to function. We do not currently use third-party analytics or advertising cookies. If this changes in the future, we will update this policy and request your consent where required.

11. International transfers

Personal data is processed within the European Economic Area. If we ever need to transfer data outside the EEA, we will do so only with appropriate safeguards in line with Chapter V of the GDPR.

12. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available at this page, marked with the "Last updated" date above.

13. Contact

For any questions regarding the processing of your personal data, please contact us at sales@kingsman-garage.sk or +421 903 385 353.