Privacy policies

Privacy Policy

The Controller, Melrose Marmara s. r. o., with its registered office at Námestie sv. Egídia 15, 058 01 Poprad, Company ID No. (IČO): 53694520, [entered in the Commercial Register ..., Section: Sro, Insert No.: ...] (hereinafter referred to as the "Controller"), ensures the protection of personal data in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation") and Act No. 18/2018 Coll. on Personal Data Protection (hereinafter referred to as the "Act").

The Controller's contact details are:

  • Address: Melrose Marmara s. r. o., Námestie sv. Egídia 15, 058 01 Poprad, Company ID No. (IČO): 53694520

  • Email: [email protected]

  • Phone: +421 949 000 006

What data we collect When providing our services and selling goods, we collect personal data from you as data subjects to the necessary extent for the purpose of concluding a contractual relationship and fulfilling the rights and obligations arising from it. The Controller processes your identification and contact data and data necessary for the performance of the contract.

The legal basis for processing personal data is:

  • Performance of a contract between you and the Controller according to Art. 6(1)(b) of the GDPR.

Rights of the Data Subject You have the right of access to personal data, the right to rectification, erasure, restriction of processing, and the right to lodge a complaint with the supervisory authority (Office for Personal Data Protection of the Slovak Republic).

  • Right of access: You have the right to obtain confirmation from us as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and information about the purpose, categories, recipients, and retention period.

  • Right to rectification: You have the right to have inaccurate or incomplete personal data rectified.

  • Right to erasure ('right to be forgotten'): You have the right to have your personal data erased if it is no longer necessary for the original purpose, you have withdrawn consent, or it has been unlawfully processed.

  • Right to restriction of processing: You have the right to restrict processing if you contest the accuracy of the data, the processing is unlawful, or you need it for the establishment, exercise or defence of legal claims.

  • Right to data portability: If the processing is based on consent or a contract, you have the right to receive your data in a structured, commonly used and machine-readable format.

  • Right to withdraw consent: If the processing is based on consent, you have the right to withdraw it at any time.

  • Right to object: You have the right to object to the processing of your data if it is based on our legitimate interest.

Data Retention Period The Controller retains personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship (for a period of 10 years from the termination of the contractual relationship). After this period, the Controller will erase the personal data.

How to exercise your rights You can exercise your rights by sending an email to [email protected]. Please include your first name, last name, and email address in your request for identity verification.

Data Protection Officer The Controller has not appointed a Data Protection Officer.

Disclosure and Transfer to Third Countries Your personal data is not disclosed or transferred to third countries.

Profiling and Automated Decision-Making Your personal data is not subject to automated decision-making or profiling.

How to file a complaint? You have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava, if you suspect that your personal data is being processed in violation of the applicable legislation.

This policy becomes valid and effective on August 5, 2025.