Privacy policy

I. Basic Provisions

1. The controller of personal data pursuant to § 5 letter o) of Act No. 18/2018 Coll. on Personal Data Protection, as amended (hereinafter referred to as the “Act“), is NIAMBO s. r. o., IČO: 51892456, with its registered office at Tajovského 8539/3A, 010 01 Žilina, Slovak Republic (hereinafter referred to as the “Controller“).
2. The contact details of the Controller are:

address: Tajovského 8539/3A, 010 01 Žilina, Slovak Republic
email: info@niambo.com
phone: +421 948 414 411

3. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is a person who can be identified directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

II. Sources and Categories of Processed Personal Data

1. The Controller processes personal data that you have provided to the Controller, or personal data obtained by the Controller on the basis of fulfilling your order.
2. The Controller processes your identification and contact data and data necessary for the performance of the contract.
3. In order to improve the usability of the website and to provide targeted advertising, the Controller uses cookies. By using the website, the user agrees to the use of this technology to the extent permitted by applicable law and based on cookie settings. Cookies are small files stored in the user’s browser. Essential cookies are necessary for the operation of the website and online services, and their use does not require consent where permitted by law. Analytical and marketing cookies require the user’s consent. These cookies are used in particular to monitor website usage for the purpose of improving the website and providing targeted advertising. In addition to essential cookies, we may use: Google Analytics – to help improve website usability, Google Ads – for targeted advertising, and Facebook Audience tools – for targeted advertising. More information about cookies can be found at this link.

III. Legal Basis and Purpose of Personal Data Processing

1. The legal basis for the processing of personal data is:

• performance of a contract between you and the Controller pursuant to § 13(1)(b) of the Act,
• the legitimate interest of the Controller in direct marketing (especially for sending commercial communications and newsletters) pursuant to § 13(1)(f) of the Act,
• your consent to the processing of personal data for the purposes of analytical and marketing cookies, where such consent is required.

2. The purpose of the processing of personal data is:

• processing your order and exercising the rights and obligations arising from the contractual relationship between you and the Controller; when placing an order, personal data required for the successful processing of the order are requested (name, address, and contact details); providing personal data is a necessary requirement for concluding and performing the contract, and without providing personal data it is not possible to conclude the contract or perform it on the part of the Controller,
• sending commercial communications and carrying out other marketing activities,
• improving website functionality, analytics, and advertising performance through cookies and related technologies.

3. The Controller does not carry out automated individual decision-making within the meaning of § 28 of the Act, unless expressly stated otherwise in a specific case and unless the relevant legal requirements are fulfilled.

IV. Data Retention Period

1. The Controller retains personal data:

• for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Controller and to assert claims arising from these contractual relationships (for a period of 15 years from the termination of the contractual relationship),
• for the duration until consent to the processing of personal data for marketing purposes is withdrawn, but no longer than 5 years, if the personal data are processed on the basis of consent,
• for the period necessary to fulfil legal obligations binding on the Controller.

2. After the retention period has expired, the Controller shall erase the personal data.

V. Recipients of Personal Data (Controller’s Processors/Subcontractors)

1. The recipients of personal data are persons:

• involved in the delivery of goods / services / execution of payments under the contract,
• providing e-shop operation services and other services related to the operation of the e-shop,
• providing marketing services,
• providing hosting, cloud, analytical, advertising, and technical support services.

2. The Controller may transfer personal data to third countries (countries outside the EU/EEA) or to international organisations, in particular where mailing service providers, cloud service providers, or analytical and marketing platform providers are involved. In such cases, the Controller shall ensure that appropriate safeguards are in place in accordance with applicable legal regulations.

VI. Your Rights

1. Under the conditions set out in the Act, you have:

• the right of access to your personal data pursuant to § 21 of the Act,
• the right to rectification of personal data pursuant to § 22 of the Act, or restriction of processing pursuant to § 24 of the Act,
• the right to erasure of personal data pursuant to § 23 of the Act,
• the right to object to processing pursuant to § 27 of the Act,
• the right to data portability pursuant to § 26 of the Act,
• the right to withdraw consent to the processing of personal data in writing or electronically to the address or email of the Controller stated in these terms,
• the right to object to direct marketing at any time.

2. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic if you believe that your right to personal data protection has been violated.

VII. Conditions of Personal Data Security

1. The Controller declares that it has taken all appropriate technical and organisational measures to secure personal data.
2. The Controller declares that only persons authorised by the Controller have access to personal data.

VIII. Final Provisions

1. By submitting an order through the online order form, you confirm that you have been acquainted with the personal data protection policy and that you accept it in full.
2. Where consent is required, by checking the consent box through the online form, you confirm that you have been acquainted with the personal data protection policy and that you accept it in full.
3. The Controller is entitled to amend these terms. The new version of the personal data protection policy will be published on its website at niambo.com and, where appropriate, also sent to your email address that you have provided to the Controller.

These terms shall enter into force on 17.03.2026.