Company Brotoco, s.r.o., e-mail:, . We operate an e-shop on the website

We process some personal data when selling goods and operating our website.

In this document you will find all the information you need about how we protect your privacy: what data we collect, how we use it, with whom we share it, how you can control the processing, the measures we take to protect your data and the rights you have in relation to the processing.

We want to reassure you that your personal data is safe with us. In accordance with the requirements of applicable legislation, we take all necessary technical and organisational security measures to protect your personal data. Electronic data is stored in a protected database on our own secure server stored in a data centre exclusively in the European Union. We protect the database containing personal data from damage, destruction, loss and misuse.

I. Processing of personal data

We comply with all regulations concerning the protection of your personal data. In particular, the processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 concerning the processing of personal data and on the free movement of such data and repealing 95/46/EC (General Data Protection Regulation) ("GDPR").

A. Processing of personal data in case of use of the contact form

If you contact us via the contact form, we will work with your personal data in the scope of first name, last name and email address. On the basis of the personal data sent, we will then contact you in connection with our offer of goods or in response to your enquiry.

This is processing on the basis of Article 6 (1) (b) GDPR - performance of a contract or performance of pre-contractual measures at your request. If you do not provide us with this personal data, we will not be able to communicate with you for the purposes of.

The personal data obtained by filling in the contact form for pre-contractual purposes will be processed exclusively for a period of 24 months and if no contract is concluded, the data will be deleted from the system.

B. Processing of personal data in the case of purchases with compulsory registration

By submitting the registration form and thus creating a customer account, you agree to the processing of your personal data, in particular to the following extent:

name and surname,
delivery address (street, postal code, postcode, city and country),
billing address (street, postal code, postcode, city and state),
e-mail address,
telephone number and
age (Registration is only open to individuals over the age of 18.)
If you make a purchase from us, we will work with the personal information we need from you to secure a contract for the provision of our goods or services. These are mainly billing data: name, surname, address, e-mail address, telephone number, age, etc.

We need to process personal data in order to fulfil our obligations under the contract - delivery of goods. We will also use the contact data to communicate with you regarding the status of your order, or regarding returns, complaints or any questions you may have.

We will further process the personal data for the fulfilment of our obligations under generally applicable law (mainly for accounting and tax purposes, or for the handling of complaints, etc.). This processing is based on Article 6(1)(b) GDPR - performance of a contract and Article 6(1)(c) GDPR - performance of our legal obligation.

If you do not provide us with this personal data, we will not be able to enter into a contract with you for the supply of our goods.

We will retain your personal data for the duration of the contract i.e. for the duration of the delivery of the goods or provision of services and then for 24 months from the last delivery of the goods.

C. Newsletter (commercial communications)

Unless you have purchased goods from us and have also expressly opted out of receiving marketing communications, we will use your email address to send you our marketing communications.

Both when registering and when creating the Order proposal itself, you always have the option to opt-out of receiving the newsletter. If you do not explicitly express your disagreement at any time during the purchase process, we will treat this as consent to commercial communications with you.

As far as the legal basis is concerned, this is processing based on Article 6(1)(f) GDPR - our legitimate interests, which are marketing communications targeted at our customers.

We will process your personal data for 24 months from your last purchase. If you do not wish to continue to receive our marketing communications, you can unsubscribe at any time via the link located at the bottom of the incoming email or you can unsubscribe by emailing us at

II. Who gets access to the data?

We, as the controller and processor, may make the personal data we process available to our employees who provide administrative and technical support for the operation of the e-shop website. These are:

the operator of the e-shop platform,
companies involved in the dispatch of goods,
companies providing analytical and advertising services,
companies involved in the dispatch of payments.
We may also store or disclose your data to others in order to comply with legal obligations, to comply with requests from government and other authorities, to assert our claims or to defend ourselves in proceedings where others assert claims against us. The categories of third parties to whom we disclose personal data for these reasons include, for example, courts, governmental and other authorities competent to exercise control over our activities, to settle disputes or enforce decisions, or our legal and accounting advisors and auditors.

We only process personal data within the European Union. We do not actively transfer your personal data to third countries outside the EU.

III. What else you should know

We do not have an appointed data protection officer in our company.

Our company does not make decisions based on automated processing or profiling.

Please be assured that our employees and associates who will process your personal data are obliged to maintain confidentiality of personal data and security measures, the disclosure of which would jeopardize the security of your personal data. This confidentiality shall continue even after the termination of the contractual relationship with us.

If you have any questions about this document or the processing of your personal data, or if you wish to exercise your rights described in this document, you may contact us by email at or in writing at our company address.

IV. Use of cookies

Cookies are text files containing small amounts of information that are downloaded to your device when you visit our website. Cookies are then sent back to the website or another website that recognises them on each subsequent visit.

Individual pages of use cookies to help us provide a better service. By using, you consent to the use of cookies in accordance with your browser settings. If you visit our website and your browser is enabled to accept cookies, we will consider this to be acceptance of our cookie terms and conditions. Consent to the use of cookies can also be expressed by means of a check box contained in the so-called cookie bar.

You can also subsequently refuse cookies in your browser settings or set your browser to use only certain cookies. Instructions for changing cookies can be found in the help section of each browser.

Please note that third parties (including, for example, external service providers) may also use cookies and/or access data collected via cookies on the website.

We use the following cookies on the website:

Strictly necessary cookies: these are necessary for the operation of the website, for example, they allow you to log in to secure parts of the site, online payments and other basic functionality of the site. If you disable these cookies, we cannot guarantee the full functionality of our site.
Analytical/statistical cookies: for example, they allow us to recognise and track the number of visitors and track how our visitors use the website. They help us to improve the way the site works, for example by enabling users to easily find what they are looking for. We only run these files with your prior consent.
Advertising cookies: these are used to track preferences and allow you to see advertising and other content that best matches your interests and online behaviour. We only run these cookies with your prior consent.
You can find more information about cookies and an up-to-date list of them via your individual web browser, most often under Developer Tools.

For more information on the management of cookies in individual browsers, please visit the following links:

Internet Explorer -
Google Chrome -
Firefox -
Safari -
Opera -
Microsoft Edge -

V. Your rights in relation to the processing of personal data

The fact that we process your personal data gives you a number of rights. If you exercise any of the rights set out below, we will inform you of the processing of your request within 30 days of the date of receipt of your request by us. In justified cases, we may extend this period to 60 days, which we will inform you of.

You can exercise your rights by sending an email message or a written request to our contact details. In your request, please include your first name, last name, residential address, email address and telephone number. If you do not provide us with the above information, it will not be possible to comply with your request. We require this information from you in order to verify your identity and not to provide your personal data to an unauthorised person.

Summary of your rights:

The right to information, which is fulfilled by this content and the terms and conditions,
the right to request access to personal data relating to the data subject - Section 21 of the Act consists of your right to request to what extent, in what manner and for what purposes your data is processed, which can be addressed to the contact email,
the right to rectification and completion of personal data - Section 22 of the Act allows you to rectify personal data if it is outdated,
the right to withdraw your prior consent to the processing of your personal data at any time,
the right to erasure of personal data - Section 23 of the Act is to be used if you do not wish the controller to continue to process personal data (unless statutory exemptions apply),
the right to restrict the processing of personal data - § 24 of the Act you exercise if you believe that personal data have been processed in violation of the law or for any other reason,
the right to object to the processing of personal data - § 27 of the Act,
the right to be informed of a breach of security of your personal data,
the right to data portability,
the right to lodge a complaint with a supervisory authority in relation to the personal data processed, and others.
If you believe that we are not treating your data properly, you have the right to file a complaint with the supervisory authority, which in our jurisdiction is the Office for Personal Data Protection of the Slovak Republic, or to go to court.

If you have any questions about your personal data, please contact us by email at

This policy is effective from 1 October 2022.