Privacy policy

Processing of personal data under the GDPR and Act No. 18/2018 Coll.

I. Who we are (the controller)

  1. The controller, which determines the purposes and means of processing your personal data, is the company PONOKADO s. r. o., with its registered office at Starohorská 6157/7, 974 11 Banská Bystrica, Slovak Republic, Company ID (IČO): 53 438 698, registered in the Commercial Register of the District Court Banská Bystrica, Section: Sro, File No. 40082/S (hereinafter the "controller" or "we").
  2. When operating the online store at www.tilume.sk, the controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter the "GDPR") and Act No. 18/2018 Coll. on the Protection of Personal Data.
  3. You can contact us at any time regarding the processing of your personal data at the e-mail address: ahoj@tilume.sk.

II. What data we process, for what purpose and for how long

We always process your personal data only for a specific purpose, on the basis of a corresponding legal basis and for the necessary period stated below.

1. Processing your order and performing the purchase contract

Purpose: creating and processing your order, concluding and performing the purchase contract, delivering the goods and communicating about the order.

Legal basis: performance of a contract.

Data: name and surname, delivery and billing address, e-mail, phone number, order and payment details.

Retention period: for the duration of the contractual relationship and the warranty period (as a rule 24 months from delivery of the goods).

2. Accounting and tax obligations

Purpose: issuing and archiving accounting and tax documents.

Legal basis: compliance with a legal obligation.

Data: billing and identification details stated on accounting documents.

Retention period: 10 years following the year to which the documents relate.

3. Handling claims and exercising legal rights

Purpose: handling claims and returns and defending or exercising legal claims.

Legal basis: compliance with a legal obligation and our legitimate interest in protecting and exercising legal claims.

Data: identification and contact details, order details, claim details (description of the defect, resolution).

Retention period: for the duration of the applicable limitation periods for asserting claims; in the event of court proceedings, for the entire duration of the proceedings.

4. Sending newsletters

Purpose: sending news and offers by e-mail.

Legal basis: your consent.

Data: e-mail address and, where applicable, name.

Retention period: until you withdraw your consent (you can unsubscribe at any time in every e-mail or at ahoj@tilume.sk).

5. Product ratings and reviews

Purpose: obtaining and publishing product ratings (reviews) and, where applicable, photos provided by the customer.

Legal basis: your consent; the post-purchase review invitation is sent on the basis of our legitimate interest in obtaining customer feedback and improving the quality of the products and services we offer.

Data: name, e-mail, content of the review and, where applicable, a photo. Published reviews (including the name and any photo) are publicly available to visitors of the online store.

Retention period: until you withdraw your consent, or for as long as the review remains published.

6. Handling questions and enquiries

Purpose: responding to questions and enquiries sent by e-mail or via a form.

Legal basis: our legitimate interest in handling your request.

Data: name, e-mail, phone number where applicable, and the content of the message.

Retention period: until the request is resolved, and no longer than a reasonable period after its resolution.

Providing personal data for the purposes under points 1 to 3 is a contractual and legal requirement; without it, we cannot process your order and conclude the contract. Data for the purposes under points 4 and 5 is provided voluntarily on the basis of your consent.

III. Where we obtain your data

  1. We obtain personal data directly from you, namely when you place an order, sign up for the newsletter, submit a review or communicate with us.

IV. Who we share your data with (recipients and processors)

We share your data only to the extent necessary and only with trusted service providers who process it on the basis of a contract and in accordance with our instructions. These are in particular:

  1. Shopify International Limited (Ireland) and Shopify Inc. (Canada) as the provider of the e-commerce platform on which our online store runs, including data hosting.
  2. Packeta Slovakia s. r. o. (Zásielkovňa), with its registered office at Kopčianska 3338/82A, 851 01 Bratislava, Company ID (IČO): 48 136 999, as the carrier ensuring delivery of the goods, including its contractual delivery partners who provide delivery in individual countries.
  3. Loox (Loox Reviews) as the provider of the tool for collecting and displaying product ratings (reviews).
  4. Stripe (Stripe Payments Europe, Ltd.) as the provider of the payment gateway through which card payments are processed.
  5. Google (Google Ireland Limited) as the provider of Google Analytics, which helps us measure traffic and improve the website; these cookies are used only on the basis of your consent.
  6. the provider of accounting services and persons responsible for bookkeeping.
  7. the competent public authorities, where required by law.

V. Data transfers outside the European Union

  1. Within the European Union and the European Economic Area, personal data moves freely.
  2. Some of our service providers (e.g. Shopify, Google, Loox) may also process data outside the EU, particularly in the USA. In such cases, the transfer is safeguarded in accordance with the GDPR, namely on the basis of a European Commission adequacy decision or standard contractual clauses adopted by the European Commission.

VI. Cookies

  1. Our online store uses cookies that are necessary for the website to function and, with your consent, also analytics and marketing cookies. Detailed information and settings options can be found on the Cookie settings page.

VII. Automated decision-making and profiling

  1. We do not carry out decision-making based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

VIII. Children's personal data

  1. Our online store is not intended for persons under 16 years of age. If a person is under 16 years of age, the processing of their personal data on the basis of consent is lawful only if the consent was given or approved by their legal guardian.

IX. Your rights

  1. In connection with the processing of personal data, you have the right of access to your data, the right to rectification and completion, the right to erasure, the right to restriction of processing, the right to data portability and the right to object to processing, under the conditions and to the extent set out in the GDPR and the law.
  2. Where processing is based on your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.
  3. You have the right to object at any time to processing of personal data based on our legitimate interest (for example, handling questions and enquiries or sending a post-purchase review invitation). You can send your objection to ahoj@tilume.sk; once received, we will no longer process the data for that purpose unless we demonstrate compelling legitimate grounds for its further processing.
  4. You can exercise your rights at: ahoj@tilume.sk.
  5. If you believe that we process your data in breach of the law, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, e-mail: statny.dozor@pdp.gov.sk, or with the supervisory authority in the EU member state of your habitual residence or place of work.

This policy takes effect on 1 June 2026