PRIVACY POLICY
The security of your personal data is a priority for us. This document contains information on how we process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection.
1. PERSONAL DATA CONTROLLER
The operator of the e-shop and the party processing your personal data is:
Business Name: MIBAX TRADE S.R.O.
Registered Office / Place of Business: M.R. Štefánika 1050/74, 036 01 Martin
Company ID (IČO): 473 649 74
Tax ID / VAT ID: 202 382 64 55
Registered in: The Commercial Register maintained by the District Court of Žilina, Section Sro, Entry No. 59754/L
E-mail for GDPR inquiries: admin@caj-kava-cokolada.sk
Phone number: +421 911 442 664
2. PURPOSE, LEGAL BASIS, AND RETENTION PERIOD
We process your personal data exclusively for the following purposes:
Order processing and contract fulfillment
Scope of data: Name, surname, billing and delivery address, e-mail, phone number, product details.
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR). Provision is mandatory; the order cannot be processed without it.
Retention period: For the duration necessary to perform the contract (order processing and warranty period).
Compliance with legal (accounting and tax) obligations
Scope of data: Billing details, invoice numbers, payment details.
Legal basis: Compliance with a legal obligation (Art. 6(1)(c) GDPR) under the Accounting Act and the VAT Act.
Retention period: 10 years following the year to which the data relates.
Direct marketing (sending newsletters to customers)
Scope of data: E-mail address, name.
Legal basis: Legitimate interest of the controller (Art. 6(1)(f) GDPR) to offer similar goods and services to existing customers. You may unsubscribe at any time by clicking the link in the e-mail.
Retention period: 3 years from the last order or until you object (unsubscribe).
Marketing based on consent (for non-customers)
Scope of data: E-mail address.
Legal basis: Your voluntary consent (Art. 6(1)(a) GDPR), expressed by clicking when subscribing.
Retention period: 3 years or until consent is withdrawn.
Handling of complaints and inquiries
Scope of data: Name, contact details, details regarding the goods subject to the complaint, account number (for refunds).
Legal basis: Compliance with a legal obligation (Art. 6(1)(c) GDPR) arising from the Consumer Protection Act.
Retention period: For the duration of the complaint resolution process and subsequently for record-keeping purposes as required by law.
3. RECIPIENTS OF PERSONAL DATA (PROCESSORS)
We do not sell your data. However, for the proper functioning of the e-shop, we must share it to the necessary extent with our verified partners:
Courier and transport companies: Packeta, DPD, DHL – for the delivery of your goods.
Accounting service provider: Tracc s.r.o. / Róbert Barbierik – for invoice processing purposes.
E-shop platform and hosting provider: Websupport s.r.o. – to ensure website operation.
Email marketing service provider: Websupport s.r.o., Facebook, Google – for sending newsletters.
Payment gateways: Global Payments – for secure online payment processing.
We will not transfer your data to third countries outside the European Economic Area (EEA) that do not guarantee an adequate level of protection, unless such transfer is covered by EU Standard Contractual Clauses.
4. YOUR RIGHTS AS A DATA SUBJECT
Regarding the protection of personal data, you have extensive rights that you may exercise at any time by sending an email to admin@caj-kava-cokolada.sk:
Right of access to data: You have the right to know what data concerning you we process and to obtain a copy thereof.
Right to rectification: If your data is incorrect or incomplete, we will correct it at any time upon your request.
Right to erasure (right to be forgotten): You may request the deletion of data if the purpose of processing has ended or if you withdraw your consent. However, data that we are legally required to retain (e.g., invoices) cannot be deleted.
Right to restriction of processing: You may request that we stop actively processing your data (e.g., while we verify its accuracy).
Right to data portability: You have the right to obtain your data in a structured, commonly used format and to transfer it to another controller.
Right to object: If we process data based on legitimate interest (e.g., direct marketing), you may object to this processing, and we will cease processing the data for that purpose.
Right to lodge a complaint: If you believe that we are processing your data unlawfully, you have the right to file a complaint with the Office for Personal Data Protection of the Slovak Republic (Hraničná 12, 820 07 Bratislava).
5. FINAL PROVISIONS
By submitting an order via the online store, you confirm that you have familiarized yourself with this Privacy Policy. We reserve the right to amend these terms in the event of legislative changes.
The current version will always be published on our website 22.09.2026