Privacy Notice – Personal Data Protection

1. Controller Identification and Contact Details

We inform you, as a data subject, about how we handle your personal data in line with the General Data Protection Regulation (EU Regulation 2016/679, also known as the "GDPR") and the Slovak Personal Data Protection Act.

2. Purpose and Legal Basis for Processing Personal Data

2.1 Purpose: Contract Setup and Pre-contractual Communication

Legal basis: Article 6(1)(b) of the GDPR – processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract at your request.

This means we may process your personal data without your explicit consent during the process of entering into a contract (e.g. purchase agreements or service contracts), as it's essential for us to deliver what was agreed.

2.2 Purpose: Compliance with Legal Obligations

Legal basis: Article 6(1)(c) of the GDPR – processing is necessary to comply with legal obligations (e.g. providing data to tax authorities or regulatory bodies when required by law).

3. Who Can Access Your Data

We may share your personal data with the following categories of recipients:

• Legal advisors or law firms
• Postal and delivery services
• Public institutions and authorities (e.g. Tax Office, Slovak Trade Inspection, Personal Data Protection Office)
• Courts, law enforcement, or bailiffs if required by law

4. How Long We Keep Your Data

We store your data as long as it's necessary to meet our contractual and legal obligations. Typically, we keep your data for up to 4 years after the contract ends, in line with the general statute of limitations under Slovak commercial law.

Longer retention is only allowed if required by law (for example, for accounting or archiving purposes).

5. Your Rights

As a data subject, you have the right to:

a) Access your data

You can request a list of the personal data we hold about you.

b) Correct your data

If your data is inaccurate or outdated, we'll update it upon request.

c) Request deletion (the "right to be forgotten")

You can ask us to delete your data if:

• it's no longer needed for the purpose it was collected,
• you withdraw your consent,
• the data was processed unlawfully.

We may deny deletion only if we are legally required to retain the data (e.g. for tax purposes or official statistics).

d) Limit processing

You may ask us to temporarily stop processing your data, for example:

• while verifying its accuracy,
• if you object to our reasons for processing,
• or while we assess whether we still need the data.

e) Object to processing

You may object if you believe we don't have a legitimate reason to process your data, or if we use your data for direct marketing.

f) Data portability

You can request to receive your personal data in a machine-readable format and transfer it to another provider – this applies to data you gave us based on consent or contract.

g) Withdraw consent

If you gave consent for data processing, you can withdraw it anytime. Withdrawal doesn't affect processing done before that point.

h) Lodge a complaint

You can contact the Slovak Data Protection Authority if you believe your data has been mishandled:

You can exercise your rights at any time by contacting us via email: david.forgac@magrano.com. We'll respond within the legal timeframe.

6. Is Providing Data Mandatory?

You only need to provide personal data that is necessary to enter into and fulfill a contract or to comply with legal obligations. If you don't provide this information, we won't be able to conclude the contract you've expressed interest in.

Last updated: March 2026