Privacy Policy
Last updated: September 2025
GDPR Compliance: Max Vitales is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Data Controller
Max Vitales is the data controller responsible for your personal data. You can contact us at:
- Address: Námestie SNP 4, 963 01 Krupina, Slovakia
- Email: [email protected]
- Phone: +421 904 613 952
2. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you provide explicit consent for specific processing activities
- Contract: When processing is necessary to fulfill our contractual obligations
- Legal Obligation: When we must comply with legal requirements
- Legitimate Interest: When processing is necessary for our legitimate business interests
3. Information We Collect
When you contact us through our website, we collect the following information:
- Name and contact information (email address, phone number)
- Messages and inquiries you send to us
- Technical data (IP address, browser type, device information)
- Cookie data (see our Cookie Policy for details)
- Any other information you voluntarily provide
4. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and provide customer support
- Provide information about our products and services
- Improve our website and services
- Comply with legal obligations
- Protect against fraud and security threats
- Send marketing communications (only with your consent)
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Specifically:
- Contact form submissions: 2 years from last contact
- Marketing consent records: Until consent is withdrawn
- Legal compliance data: As required by applicable laws
6. Information Sharing
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share information:
- With service providers who assist us in operating our website (under strict data processing agreements)
- When required by law or to protect our rights
- In connection with a business transfer or merger (with prior notice)
7. International Data Transfers
If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by the European Commission
- Other legally approved transfer mechanisms
8. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication procedures
- Employee training on data protection
9. Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restriction: Request limitation of processing in certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)
- Right to Lodge a Complaint: File a complaint with your local data protection authority
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
10. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
11. Children's Privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
12. Cookies
Our website uses cookies to enhance your browsing experience. For detailed information about our cookie usage, please see our Cookie Policy. You can manage your cookie preferences through our cookie consent banner.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may provide additional notice (such as email notification).
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: [email protected]
- Phone: +421 904 613 952
- Address: Námestie SNP 4, 963 01 Krupina, Slovakia