1. Data controller
The controller of personal data is GSM Europe s.r.o., Mierové námestie 8, 911 01 Trenčín, Slovak Republic, Company ID: 50545141. For privacy-related questions, you can contact us at info@crystaliq-shop.com.
For B2B inquiries, we may also communicate via miro@gsm-eu.com, especially in relation to company orders, larger quantities, or custom production.
2. What data we process
We process only the data necessary to handle inquiries, orders, complaints, B2B cooperation, communication, or legal obligations.
- identification and contact data: name, surname, email, phone, company
- billing and delivery data where needed for order processing or invoicing
- inquiry content, quote basket product list, communication, and attachments
- data needed for complaints, withdrawal requests, or customer support
- technical website data such as cookies, IP address, and device information to the extent needed for website operation and security
3. Purposes and legal bases
We process data to handle pre-contract communication and orders, perform contracts, issue invoices, deliver goods, handle complaints, provide customer support, and protect our legal claims.
The legal basis may be performance of a contract or pre-contractual steps, legal obligation, legitimate interest, or consent, especially for optional cookies and marketing communication.
4. Who receives the data
We do not sell personal data. We share it only where necessary for service operation, delivery, accounting, technical website administration, legal protection, or compliance with legal obligations.
- carriers and pickup networks, especially Packeta, where they provide delivery
- IT, hosting, email, and form service providers
- accounting, tax, legal, and administrative partners
- public authorities where required by law
- analytics or marketing tools only according to cookie settings and consent
5. Transfers outside the EU/EEA
If certain technology or analytics providers process data outside the European Union or European Economic Area, we rely on available GDPR mechanisms such as adequacy decisions or standard contractual clauses.
6. Retention period
We keep personal data only for as long as necessary for the purpose for which it was collected or as required by law.
- inquiries and routine communication during handling and for a reasonable period afterwards
- orders, invoices, and accounting documents for statutory retention periods
- complaint documents for the duration of the complaint process and a reasonable period for legal protection
- cookies according to their type, consent settings, and technical lifespan
7. Your rights
As a data subject, you have the right of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent where processing is based on consent.
You can exercise your rights by emailing info@crystaliq-shop.com. If you believe your data is processed unlawfully, you may lodge a complaint with the Slovak Office for Personal Data Protection.
8. Cookies
The website uses necessary cookies for basic site functionality, language settings, security, and the quote basket. These cookies do not require consent.
Analytics or marketing cookies are used only if they are enabled on the website and you have given consent. Cookie settings can be changed in your browser or through available website settings where active.
9. Security and updates
We use appropriate technical and organisational measures to protect data against loss, misuse, or unauthorised access.
We may update this policy, especially when website functionality, service providers, or legal requirements change.
