Privacy Policy

This English version is a translation for convenience. The Slovak version is legally binding; an English legal review is pending.

Personal data processing policy of the www.tuningovesvetla.sk online store under Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data.

I. Controller

The controller who determines the purposes and means of processing personal data is:

eStores, s. r. o.
Registered office: Oravická 617/20, 028 01 Trstená
Company ID: 48056561, Tax ID: 2120047545, VAT ID: SK2120047545
E-mail: info@tuningovesvetla.sk
Phone: +421 43 230 4890

On matters concerning the protection of personal data, you can contact us at the e-mail address info@tuningovesvetla.sk.

II. What personal data we process

In connection with a purchase and order fulfilment, we mainly process:

identification and contact details: first name and surname, e-mail, phone number,
delivery and billing address,
business billing details if you purchase for a company (company name, Company ID, Tax ID, VAT ID),
order and payment data (ordered goods, price, shipping and payment method),
the content of your communication with us (e.g. e-mails, order note).

We do not process any special categories of personal data and we do not carry out automated decision-making or profiling.

III. Purposes and legal bases of processing

Order fulfilment and performance of the purchase contract (including delivery and handling of complaints) — legal basis: performance of a contract under Art. 6 (1) (b) GDPR.
Accounting and compliance with tax obligations (issuing and retaining invoices) — legal basis: compliance with a legal obligation under Art. 6 (1) (c) GDPR (in particular Act No. 431/2002 Coll. on Accounting).
Communication with the customer and protection of the controller's rights (e.g. answering questions, preventing misuse) — legal basis: legitimate interest under Art. 6 (1) (f) GDPR.
Back-in-stock notification („watchdog“) — if you enter your e-mail address for a sold-out product, we will use it solely to send a single notification the moment the product is back in stock. Legal basis: consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the unsubscribe link in that e-mail, after which we no longer keep your address.
Abandoned order reminder — if you enter your e-mail address at checkout with goods in your basket and do not complete the order, we may send you up to two reminders about your unfinished purchase. Legal basis: legitimate interest under Art. 6 (1) (f) GDPR (the unfinished purchase). You can switch off the reminders with a single click via the unsubscribe link directly in the e-mail; we do not use your address for any other purpose and after 7 days we no longer use it for reminders at all.
Heureka „Verified by Customers“ satisfaction survey — after a purchase we pass your e-mail address and the identification of the purchased goods to Heureka so that it can send you a one-off satisfaction survey about your purchase. Legal basis: legitimate interest under Art. 6 (1) (f) GDPR (measuring customer satisfaction). You can object to receiving the surveys at any time — most easily by clicking the unsubscribe link directly in the survey e-mail.
Traffic measurement and marketing — if you grant consent to cookies („Accept all“), we use analytics and advertising tools (Google Analytics, Google Ads, Meta) to measure traffic, evaluate advertising effectiveness and display relevant ads. Legal basis: consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time (see Section VI. Cookies) without affecting the lawfulness of processing based on consent before its withdrawal.

Providing the data needed to fulfil an order is a contractual requirement; without it we cannot process and deliver your order.

IV. Retention period

We retain data related to an order for the duration of the contractual relationship and subsequently for the warranty period and the limitation periods for asserting any claims.
We retain accounting documents (invoices) for 10 years in accordance with the Accounting Act.

V. Whom we share the data with

We do not sell personal data. To the extent necessary, we disclose it only to the following recipients and processors who help us fulfil orders or operate the store:

The courier company GLS (General Logistics Systems Slovakia s.r.o.) — for the purpose of delivering the shipment.
The transport company TopTrans (TOPTRANS EU, a. s.) — for the purpose of delivering bulky goods (e.g. bumpers, bonnets).
The provider of billing and accounting software (Superfaktúra) — for the purpose of issuing and recording invoices.
The server hosting provider — operation of the online store; the server is located within the European Union.
Heureka (Heureka Group a.s.) — the „Verified by Customers“ service: e-mail address and identification of the purchased goods for the purpose of sending a purchase satisfaction survey (see Section III). If you have granted consent to cookies, order data is also passed to Heureka for conversion measurement (see Section VI).
Google (Google Ireland Limited) — the Google Analytics and Google Ads tools for measuring traffic and advertising effectiveness; only if you have granted consent to cookies. As part of conversion measurement (so-called enhanced conversions), your e-mail address and phone number are passed to Google in encrypted (hashed) form so that it can more accurately attribute a purchase to an ad.
Meta (Meta Platforms Ireland Limited) — the Meta Pixel tool for measuring and targeting advertising on the Facebook and Instagram platforms; only if you have granted consent to cookies.

Data may also be provided to public authorities where a special legal regulation requires us to do so. When using Google and Meta tools, data may be transferred to the USA — Google and Meta are certified under the EU–US Data Privacy Framework, or the transfer takes place on the basis of standard contractual clauses approved by the European Commission. We do not transfer data to any other third countries.

VI. Cookies

For the basic operation of the online store we use essential cookies, without which the site would not function correctly — in particular the cookie identifying the contents of the shopping basket. These cookies do not require consent.

We use third-party analytics and advertising tools only with your consent. On your visit we display a banner where you choose „Accept all“ or „Only essential“. Until you grant consent, these tools are disabled by default (Google Consent Mode v2 — „denied“ by default) and do not set any tracking cookies. Once consent is granted, we use:

Google Analytics 4 — measuring traffic and behaviour on the website.
Google Ads — measuring conversions and advertising effectiveness, including enhanced conversions, in which your e-mail address and phone number are passed to Google in encrypted (hashed) form for more accurate attribution of a purchase to an ad.
Meta Pixel — measuring and targeting advertising on Facebook and Instagram.
Heureka — conversion measurement — the hg_ocm_id cookie to attribute a purchase to a click-through from the Heureka.sk comparison site (the basis for store rating and statistics).

You can withdraw or change your consent at any time: delete the cookies in your browser settings, which will make the banner appear again on your next visit so that you can choose a different option. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

VII. Your rights

As a data subject, in connection with the processing of personal data you have the right:

to access your personal data and to information about its processing,
to rectification of inaccurate data and completion of incomplete data,
to erasure of data (the right „to be forgotten“) where there is no legal ground for its further retention,
to restriction of processing,
to data portability,
to object to processing based on a legitimate interest,
to withdraw a granted consent at any time (if processing is based on consent),
to lodge a complaint with the supervisory authority.

You can exercise your rights by e-mail at info@tuningovesvetla.sk. We will handle your request without undue delay, no later than within one month.

VIII. Supervisory authority

If you believe that the processing of your personal data has infringed your rights, you can lodge a complaint with the supervisory authority:

Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27
web: dataprotection.gov.sk

IX. Final provisions

We may update this policy from time to time, in particular when the way we process data or the legal regulations change. The current version is always available on this page.

This policy takes effect on 13 July 2026.

See also our terms and conditions or contact us.