Privacy policy

1. Controller

The controller processing your personal data is MMLES, s.r.o., registered office Krásna Ves 82, 956 53 Krásna Ves, Slovakia, company ID (IČO): 47436255, tax ID (DIČ): 2023895797, VAT ID: SK2023895797, registered in the Commercial Register of the District Court of Trenčín, section Sro, file No. 28918/R (“we”).

For any data protection questions, contact us by email at info@mmles.com or by post at our registered office.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”) and Slovak Act No. 18/2018 Coll. on the Protection of Personal Data.

2. Purposes, legal bases and retention

Enquiries: if you send us an enquiry using the website form, by email or by telephone, we process the data you give us, i.e. your name, email, telephone number, company name, the content of your message and the products you selected. We use it to handle the enquiry and prepare a quote. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). If no contract results from the enquiry, we keep the data for no more than one year from our last communication.

Concluding and performing the contract: to deliver goods, take payment and communicate with you, we process identification, contact, billing and delivery data. The legal basis is the performance of the contract (Article 6(1)(b) GDPR). We keep the data for the duration of the contractual relationship and then until the limitation periods expire.

Accounting and tax: we keep invoices and other accounting documents for ten years as required by the Slovak Accounting Act and VAT Act. The legal basis is compliance with a legal obligation (Article 6(1)(c) GDPR).

Complaints and withdrawals: we process data from complaints and withdrawals to handle them and to meet our obligations under consumer protection law (Article 6(1)(c) GDPR) for the periods set by that law and then until the limitation periods expire.

Contact persons of business customers and suppliers: we process names, job titles and contact details on the basis of our legitimate interest in communicating with business partners (Article 6(1)(f) GDPR) for as long as we work together.

Legal claims: to the extent necessary, we process data on the basis of our legitimate interest (Article 6(1)(f) GDPR) until the limitation periods expire or until any court or other proceedings have ended.

Website security: when you submit the form, we process your IP address to protect the form against misuse and bulk submissions. For the same purpose we use Cloudflare Turnstile, which checks that the form is not being filled in by a robot based on technical data about your browser and device, including your IP address. Our hosting provider also records IP addresses in technical server logs. The legal basis is our legitimate interest in the security of the website (Article 6(1)(f) GDPR). This data is kept only for as long as necessary.

Visitor statistics: to see which pages are visited and where visitors come from, we use Vercel Web Analytics. It records the page visited, the referring page, device type, browser, operating system and country. It does not use cookies and does not store your IP address; it distinguishes visits on the same day only by an anonymised code that is discarded after 24 hours, so we cannot tell who you are from this data. The legal basis is our legitimate interest in improving the website (Article 6(1)(f) GDPR).

Providing your data is voluntary. Without contact details, however, we cannot handle your enquiry, and without the data needed for delivery and invoicing we cannot conclude or perform a contract.

We do not use your data for automated decision-making or profiling.

3. Recipients

We share personal data only to the extent necessary with the following recipients:

  • the carrier GLS General Logistics Systems Slovakia s.r.o. to deliver consignments (name, delivery address, telephone, email and, where applicable, the cash on delivery amount);
  • banks and payment service providers for bank transfers and card payments;
  • IT service providers who run our website and email: website hosting and visitor statistics by Vercel Inc. (USA), protection of the form against robots by Cloudflare, Inc. (USA), delivery of form messages by Resend (USA) and our website administrator;
  • providers of accounting, tax and legal services;
  • public authorities where required by law.

IT and accounting service providers generally process data as our processors under a contract with us. The carrier, banks and public authorities process data as independent controllers.

4. Transfers outside the European Union

Vercel Inc., Cloudflare, Inc. and Resend are based in the United States. Data is transferred to the USA on the basis of the European Commission’s adequacy decision (the EU–US Data Privacy Framework) where the recipient is certified under it, and otherwise on the basis of standard contractual clauses approved by the European Commission.

5. Cookies and the map

The website does not use cookies for visitor statistics or advertising. It only stores in your browser the list of products you add to your enquiry, so that you do not lose it when moving between pages. This list stays on your device, reaches us only when you send the enquiry, and you can delete it at any time in your browser settings. It is strictly necessary to provide the service you requested, so no consent is needed for it.

The Contact page includes a Google map. It loads only after you click; until then the website does not communicate with Google. Once the map has loaded, Google Ireland Limited processes data such as your IP address and cookies as an independent controller under its privacy policy (policies.google.com/privacy).

6. Your rights

You have the right:

  • to access the personal data we process about you;
  • to have inaccurate data corrected and incomplete data completed;
  • to have data erased if it is no longer needed or is being processed unlawfully;
  • to restrict processing;
  • to data portability for data we process by automated means on the basis of a contract;
  • to object to processing based on our legitimate interest.

You can exercise your rights by email to info@mmles.com. We will reply without undue delay and within one month at the latest.

If you believe that our processing of your data breaches the law, you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk, or with the supervisory authority in your country of residence.

7. Security

We protect data with appropriate technical and organisational measures. Communication with the website is encrypted (HTTPS), and only people who need the data for their work have access to it.

8. Effective date

This information is effective from 21 October 2026. If we change it, we will publish the current version on this page.