Privacy policy

1. Controller

2. What data we process

• Identification and contact - name and surname, email, phone, delivery and billing address.
• Order data - order contents, purchase history, communication with us.
• Payment - payment method and its status. Card details are processed directly by the payment gateway; we do not store them.
• Accounting - data on the tax document (invoice), or company ID / tax ID for business purchases.
• Technical - IP address, device type and cookies when visiting the shop (see the Cookies section).

3. Purposes and legal bases of processing

• Fulfilling the order and delivering goods - legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Keeping accounts and tax obligations - legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Handling complaints and withdrawals - performance of a contract and legal obligation.
• Customer account - performance of a contract, or legitimate interest in managing the account.
• Sending news (newsletter) - only on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. Recipients and processors

We do not provide data to third parties for their own purposes. We share it only with partners who run the shop for us (processors under the GDPR):

• Shipping - Packeta s.r.o. (Zásielkovňa) to deliver the shipment.
• Payments - the payment gateway provider to process the online payment.
• Email communication - the email infrastructure provider to send order confirmations and notifications.
• Hosting and storage - the provider of the server and storage infrastructure the shop runs on.
• Accounting - processing of tax documents.

We may also provide data to public authorities where required by law.

5. Retention period

• Accounting and tax documents - 10 years (Act No. 431/2002 Coll. on accounting).
• Order and warranty data - for the duration of the contract and the statutory warranty and complaint periods.
• Customer account - until it is closed.
• Complaints and withdrawals - 5 years from settlement.
• Newsletter - until consent is withdrawn, at most 3 years from the last activity.

6. Transfers to third countries

We process personal data within the European Union. If any of our processors were to process data outside the EU, this happens only with appropriate safeguards under the GDPR (e.g. the European Commission’s standard contractual clauses).

7. Your rights

As a data subject, under the GDPR you have the right:

• to access your data and a copy of it,
• to rectification of inaccurate or incomplete data,
• to erasure („the right to be forgotten“) if the data is no longer needed and no legal obligation to keep it applies,
• to restriction of processing,
• to portability of the data to another controller,
• to object to processing based on legitimate interest,
• to withdraw consent at any time (e.g. to the newsletter), without affecting processing carried out before withdrawal,
• to lodge a complaint with the supervisory authority (see below).

You can exercise your rights by email at shop@teamates.sk. We will handle the request without undue delay, within one month at the latest.

8. Cookies

The shop uses necessary cookies required for it to function (e.g. cart contents) and - only with your consent - analytics and marketing cookies. You manage consent via the cookie bar, which you can bring up at any time and change your decision.

• Analytics - anonymous traffic measurement (Google Analytics, Google Ireland Ltd.).
• Marketing - conversion measurement and remarketing (Meta Pixel, Meta Platforms Ireland Ltd.).

These tools run only after consent is given and may transfer data outside the EU (to the USA) on the basis of appropriate safeguards under the GDPR (see the Transfers to third countries section).

9. Supervisory authority

If you believe we process your data contrary to the regulations, you have the right to lodge a complaint with the supervisory authority:

Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on personal data protection.