Information on the processing of personal data
Prezentia s. r. o. • effective from September 13, 2026
Prezentia s. r. o. respects the privacy of its customers, contact persons, visitors to the online store and recipients of gift shipments. This information explains what personal data we process, for what purposes, on what legal basis, to whom we may disclose it, how long we retain it, and what rights data subjects have.
We process personal data primarily in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act No. 18/2018 Coll. on the Protection of Personal Data, as amended, and other relevant legal regulations.
1. Controller
The controller of personal data is:
Business name | Prezentia s. r. o. |
Registered office | Podkerepušky 604/43, 840 08 Bratislava – Záhorská Bystrica district |
Company ID / Tax ID | 57 525 137 / 2122796324 |
Register | Commercial Register of the Bratislava III Municipal Court, Section Sro, File No. 198610/B |
info@prezentia.sk | |
Phone | +421 917 941 297 |
Hereinafter, Prezentia s.r.o. is referred to as the “Controller”.
2. Who is affected by the processing
We process personal data mainly of the following natural persons:
- natural persons – entrepreneurs,
- managing directors, employees, contact persons and other representatives of corporate customers,
- persons who contact us or request a price quote,
- visitors to the website and the online store to the extent of the technical data necessary for their safe operation,
- recipients and other recipients of gift shipments, whose data will be provided to us by the corporate customer,
- persons communicating with us in connection with an order, delivery, complaint or other business relationship.
3. Inquiries and price quotes
In connection with an order, we may process, in particular:
- first name and surname of the contact person,
- business name or company name, Company ID, Tax ID and, if applicable, the customer’s VAT ID,
- registered office, billing and delivery address,
- email address and telephone number,
- details of the order, price offer, shipping and delivery,
- approved graphic and text materials and data necessary for personalization,
- invoicing and payment details,
- history of business communication.
If the customer is a natural person – an entrepreneur, the legal basis is the performance of the contract or the implementation of measures prior to its conclusion pursuant to Art. 6 para. 1(b) of the GDPR. In the case of a contact person, employee or representative of a legal entity, the legal basis is the legitimate interest pursuant to Art. 6 para. 1 (f) of the GDPR for the conclusion, administration and proper performance of the business relationship.
4. Orders and performance of the contract
If you contact us by email, telephone or via a form, we may process, in particular, your first and last name, job title, company name, email address, telephone number, the content of the communication and the data necessary to prepare a quotation.
The purpose is to process the inquiry, prepare a quotation and engage in pre-contractual or business communication.
If the data subject is itself a party to the contract, the legal basis is the implementation of pre-contractual measures pursuant to Art. 6 para. 1 (b) of the GDPR. For employees, contact persons, and representatives of corporate customers, the legal basis is a legitimate interest pursuant to Art. 6 para. 1 (f) of the GDPR for effective business communication, preparation of an offer, and the establishment of a business relationship.
If the inquiry does not result in a business relationship, we retain the data only for a period appropriate to the purpose of communication and the protection of our legitimate interests, after which we delete or anonymize it, unless there is another legal reason for its further retention.
5. Invoicing, payments and accounting
Prezentia s. r. o. does not use a payment gateway for direct payment of orders in the e-shop. Payments are made by bank transfer based on invoices issued by the Controller.
After creating and sending the order, an advance invoice is sent to the customer in the amount of 75% of the total price of the order. The remaining 25% of the total order price is invoiced to the customer by a second invoice only after receipt of the goods. Unless the Contracting Parties agree otherwise in writing, this is the Controller’s standard payment regime.
For payments, we may process data contained in invoices and bank records, in particular the identification of the customer or payer, account number or IBAN, amount, payment date, variable symbol, receivable data, and related accounting data. We do not process complete payment card details.
The purpose of processing is the recording and matching of payments, invoicing, bookkeeping, fulfillment of tax and other legal obligations, and the protection of legal claims. The legal basis, depending on the specific operation, is the performance of the contract pursuant to Art. 6 para. 1(b) of the GDPR, compliance with a legal obligation pursuant to Art. 6 para. 1(c) of the GDPR and legitimate interest pursuant to Art. 6 para. 1 (f) of the GDPR for the registration and protection of claims.
We keep accounting records and accounting documents for the period stipulated by law, usually ten years following the year to which they relate, unless a legal regulation requires a different retention period.
6. Personal data of recipients and other consignment recipients
A corporate customer can order the delivery of a gift package directly to a third party. In such a case, we generally do not obtain the recipient’s personal data directly from the recipient, but from the customer who ordered the delivery.
In particular, we may process the recipient’s first and last name, delivery address, telephone number, email address if necessary for delivery, information necessary to identify the shipment, and appropriate delivery instructions.
The purpose is to prepare and deliver the shipment, communicate regarding the delivery, resolve delivery issues and protect legal claims related to the order. The legal basis is a legitimate interest pursuant to Art. 6 para. 1(f) of the GDPR for the proper fulfillment of the order and delivery of the consignment to the person designated by the customer.
We may provide the recipient’s data to the courier or other carrier providing the delivery to the extent necessary. If the transport is provided by Direct Parcel Distribution SK s.r.o. (DPD), the data necessary for delivery are provided to this company to the extent necessary to carry out the transport.
We retain the recipient’s data for the period necessary to fulfill the order and subsequently only to the extent and for the period necessary to resolve complaints, legal claims, or fulfill legal obligations.
7. Source of recipient's data and duty to provide information
The source of the personal data of the recipient or other consignee of the shipment is usually the corporate customer of Prezentia s.r.o. who ordered the delivery of the shipment. The customer is obliged to provide the Controller with the recipient’s personal data lawfully and only to the extent necessary to fulfill the order.
Since we do not obtain the recipient’s data directly from the recipient, we will provide the recipient with the information pursuant to Art. 14 of the GDPR will be provided to them within a reasonable period after obtaining the data, and no later than one month. If we use personal data to communicate with the recipient, we will provide the information to them at the latest during the first communication. If the data is previously provided to another recipient, such as a carrier, the information will be provided no later than when it is first provided, unless one of the legal exceptions under Art. 14 para. 5 GDPR applies.
To fulfill this information obligation, we may use a short SMS or email with a link to the full text of this information. A template of such a message is provided at the end of the document.
8. Complaints, receivables and legal claims
We may process personal data to handle complaints and notifications of defects, resolve disputes, record and enforce claims, and assert or defend legal claims.
The legal basis is, depending on the circumstances, the performance of the contract pursuant to Art. 6 para. 1(b) of the GDPR, compliance with a legal obligation pursuant to Art. 6 para. 1 (c) of the GDPR or a legitimate interest pursuant to Art. 6 para. 1(f) of the GDPR to protect the rights of the Controller.
We retain the data for the duration of the relevant relationship and subsequently for the relevant limitation or other statutory period; if a dispute, audit or other proceeding is ongoing, the data may be retained until its final conclusion and the settlement of related claims.
9. Operation and security of the website
When you visit the website, our systems may record technical data, such as the IP address, the date and time of the request, the type of device and browser, technical logs and security events, to the extent necessary.
The purpose is to ensure the functionality and security of the website, diagnose technical problems, prevent misuse and protect information systems. The legal basis is the legitimate interest pursuant to Art. 6 para. 1(f) of the GDPR for the safe and reliable operation of the website.
We retain this data only for the period reasonably necessary for that purpose, or longer if necessary to investigate a specific security incident or to protect legal claims.
10. Recipients of personal data
We may make personal data available or provide it to the extent necessary, in particular to:
- courier and logistics companies, including DPD,
- banks in connection with cashless payments,
- providers of web hosting, IT services and technical administration of the website,
- providers of e-shop, invoicing or accounting infrastructure,
- accountants, tax, legal and other professional advisers,
- suppliers and subcontractors, if the disclosure of data is necessary for the execution of a specific order,
- public authorities, courts, or other entities, if such an obligation is imposed on us by law or is necessary to protect legal claims.
We only provide personal data to each recipient to the extent necessary for a specific purpose. Depending on the nature of the relationship, the recipient may act as an independent controller or as a processor processing data on behalf of the Controller.
11. Transfers of personal data outside the European Economic Area
If, when using a particular service provider, personal data are transferred to a country outside the European Economic Area, we only carry out such a transfer if the conditions of the GDPR are met, in particular on the basis of an adequacy decision of the European Commission, standard contractual clauses or another permissible mechanism, and with the application of appropriate safeguards.
We will provide information about the specific transfer mechanism and available safeguards to the data subject upon request if such a transfer concerns their personal data.
12. Retention period
13. Obligation to provide personal data
The data necessary to identify the customer or their contact person, prepare an offer, conclude and perform the contract, invoice, manufacture and deliver the order are, depending on the specific situation, a contractual or legal requirement. Without their provision, we may not be able to prepare a price offer, accept an order, produce or personalize goods, issue an invoice, or arrange for delivery.
14. Automated decision-making and profiling
15. Rights of data subjects
Under the conditions set out in the GDPR, the data subject has, in particular:
- the right to obtain confirmation as to whether we are processing their personal data and the right to access it,
- the right to rectify inaccurate personal data or to supplement incomplete personal data,
- the right to erasure of personal data if the legal conditions are met,
- the right to restriction of processing,
- the right to data portability in cases where this right applies under the GDPR,
- the right to object to processing based on a legitimate interest for reasons relating to her particular situation,
- the right to withdraw consent at any time if the specific processing was based on consent; withdrawal does not affect the lawfulness of the processing carried out before its withdrawal,
- the right to file a petition to initiate personal data protection proceedings with the Office for Personal Data Protection of the Slovak Republic and the right to judicial protection under the conditions stipulated by law.
16. How to exercise your rights
A request concerning personal data may be sent to the e-mail address info@prezentia.sk or to the address of the Controller’s registered office specified in Article 1.
We will respond to the request without undue delay, usually no later than one month after its receipt. If necessary due to the complexity or number of requests, the period may be extended by a further two months; we will inform the data subject of the extension and its reasons within one month of receiving the request.
If we have reasonable doubts about the identity of the applicant, we may request additional information necessary to verify their identity. We will perform the verification only to the extent necessary to protect personal data.
17. Supervisory Authority
18. Security of Personal Data
We take appropriate technical and organizational measures to protect personal data from unauthorized or unlawful processing, accidental loss, destruction, damage, unauthorized access, or disclosure. Only persons who need access to personal data to perform work or contractual tasks have access to it.
19. Changes to this information
We may update this information as appropriate, in particular in the event of changes in legislation, processing methods, services used or suppliers. We will publish the current version with its effective date on the website. If the change fundamentally affects the way personal data is processed, we will provide the data subjects with information in a manner appropriate to the circumstances.
SUMMARY INFORMATION FOR THE RECIPIENT OF A GIFT SHIPMENT
This text can be used, for example, in an SMS or email sent to the recipient before their data is handed over to the carrier or, at the latest, during the first communication with the recipient:
“Prezentia s. r. o., Podkerepušky 604/43, Bratislava – Záhorská Bystrica, processes your name and contact details provided to us by our corporate customer for the purpose of preparing and delivering a gift shipment and related communication. The legal basis is a legitimate interest in the proper delivery of the order. We may provide the data to the courier responsible for delivery to the extent necessary. For more information about the source of the data, the retention period and your rights, please visit www.prezentia.sk under the section Privacy Policy. Contact: info@prezentia.sk.”