Privacy policy

This English version is provided for convenience only. In the event of any discrepancy, the Slovak version shall prevail. This does not affect any mandatory rights you have as a consumer.

If you are our customer or a visitor to the website www.zrubko.sk, you provide us with your personal data, for which we are responsible as the controller and which we protect in accordance with the applicable legislation. Please read this privacy policy, which governs how your personal data is processed and your rights under the legislation of the Slovak Republic and the European Union, in particular the GDPR.

Information provided under the legislation

The processing of personal data is governed in particular by:

Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
Act No. 18/2018 Coll. on the Protection of Personal Data,
and other applicable legislation of the Slovak Republic.

The controller processes personal data through its employees and associates, who are bound by a duty of confidentiality and have been duly instructed on personal data protection and on their liability for any breach of it. For certain activities we use the services of processors, who process personal data solely in accordance with the applicable legislation.

The controller declares that the personal data of data subjects is adequately secured and processed solely for the purposes for which consent was given or on another lawful basis under the GDPR.

Identification and contact details of the controller

The controller of personal data is:

Zrubko s. r. o.
Registered office: Pribinova 3030/30, 010 01 Žilina
Company ID: 55933190
Tax ID: 2122132529
VAT ID: SK2122132529
Phone: +421 911 869 777
E-mail: info@zrubko.sk

The controller operates the website www.zrubko.sk, the online shop, the ordering system and related services.

Contact details of the data protection officer

The controller has not designated a separate data protection officer under Article 37 of the GDPR.
All questions about personal data protection can be sent to the e-mail address:

info@zrubko.sk

Identification of processors and recipients of personal data

Personal data may be made available in particular to the following recipients:

providers of accounting and tax services,
providers of IT and hosting services (in particular Shoptet, a.s., the operator of the e-shop platform),
the payment service provider Comgate, a.s.,
providers of delivery and logistics services,
providers of analytics and advertising tools and of the online chat service (Google, Microsoft, tawk.to) to the extent described below,
public authorities in cases laid down by law.

Transfers of personal data to third countries

When Google Analytics 4 and Google Ads are used, personal data may be transferred to Google LLC in the USA; when Microsoft Clarity is used, to Microsoft Corporation in the USA; and when the online chat is used, to tawk.to, Inc. in the USA. All three companies are certified under the EU-U.S. Data Privacy Framework. The transfer is therefore based on the European Commission's decision on the adequate level of protection of personal data under the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795). You can check the certification status of each company at www.dataprivacyframework.gov. On request, we will provide further information on the safeguards for the transfer, or a copy of them, at info@zrubko.sk.

Purpose of processing personal data

We process personal data in particular for the following purposes:

1. Conclusion and performance of a contractual relationship

Processing personal data is necessary to handle the order, deliver the goods, communicate with the customer and exercise rights under the contract. The legal basis is the performance of the contract and steps taken before entering into it under Article 6(1)(b) of the GDPR. Providing this data is necessary to conclude the contract; without it the order cannot be processed.

2. Accounting and compliance with legal obligations

We process personal data in order to issue tax documents, keep records of accounting documents and fulfil tax obligations. The legal basis is compliance with the controller's legal obligations under Article 6(1)(c) of the GDPR (in particular under the Accounting Act and the Value Added Tax Act).

3. Marketing and commercial communication

We may process your personal data to send newsletters and information about products, special offers and news solely on the basis of your explicit consent under Article 6(1)(a) of the GDPR.

Consent can be withdrawn at any time, for example by e-mail to info@zrubko.sk. Withdrawing consent does not affect the lawfulness of processing before its withdrawal.

4. Communication via online chat

We activate the online chat only at your request, after you click the chat button. If you contact us via the chat on the website (the tawk.to service), we process the content of the communication and the data you provide to us in the chat so that we can answer your questions. The legal basis is steps taken before entering into a contract or the performance of a contract under Article 6(1)(b) of the GDPR, and in other cases our legitimate interest in answering visitors' questions under Article 6(1)(f) of the GDPR.

Advertising and analytics tools

Our website uses the following third-party tools:

Google Analytics 4 – analysis of website traffic and use,
Google Ads – measuring the effectiveness of advertising (conversions) and remarketing, i.e. showing our ads to visitors who have already visited our website,
Microsoft Clarity – analysis of visitor behaviour on the website (e.g. heatmaps and session recordings).

These tools use cookies for analytics and marketing purposes. They only store cookies and process identifiers after you give your consent through the cookie banner; Microsoft Clarity does not run at all without consent. Before consent is given, Google Analytics and Google Ads may only receive cookieless signals (Google consent mode), which contain no cookie identifiers. The legal basis is your consent under Article 6(1)(a) of the GDPR and the Electronic Communications Act. You can change or withdraw your consent at any time via the “Edit cookie settings” link in the website footer. An overview of the individual cookies and how long they last can be found on the Cookies page.

List of personal data processed

We process in particular the following personal data:

name and surname,
address,
e-mail,
telephone number,
billing details,
order details,
the content of your communication with us (e-mail, telephone, chat),
IP address, cookie identifiers and data on the use of the website.

We do not use personal data for automated decision-making that produces legal effects concerning you or similarly significantly affects you. Only if you consent to analytics and marketing cookies may data on your behaviour on the website (via Google Ads and Microsoft Clarity) be used for profiling for advertising and analytics purposes, for example to show you our ads (remarketing).

Security of personal data

The controller has adopted appropriate technical and organisational measures to protect personal data against loss, misuse or unauthorised access.

Retention period of personal data

We retain personal data:

for the duration of the contractual relationship,
for the period required by specific legislation (e.g. accounting documents for 10 years under the Accounting Act),
for marketing purposes for a maximum of 3 years from the last interaction or until consent is withdrawn,
communication via the online chat for 2 years from the last message; if an order results from the communication, for the period for which order data is retained,
data collected by analytics and advertising tools on their providers' servers: Google Analytics 4 – user-level and event-level data according to the data retention setting, for a maximum of 14 months (on a repeat visit this period may run from the last activity); Google Ads – membership of remarketing lists for a maximum of 540 days from the last visit to the website; Microsoft Clarity – session recordings 30 days, other data (e.g. heatmaps and labelled sessions) 9 months.

The lifetime of cookies on your device is stated on the Cookies page; it differs from the periods for which data is retained on servers as stated above.

Rights of the data subject

The data subject has in particular the right:

of access to personal data,
to rectification or erasure of personal data,
to restriction of processing,
to object to processing,
to data portability,
to withdraw consent to the processing of personal data at any time where processing is based on consent,
to lodge a complaint with the supervisory authority – the Office for Personal Data Protection of the Slovak Republic, Galvaniho 7/B, 821 04 Bratislava, dataprotection.gov.sk.

Final provisions

The controller reserves the right to update this privacy policy at any time.

This privacy policy is effective from 10 October 2026.