Privacy policy

The controller and operator of the latimport.sk online shop is I2M, s.r.o. We process personal data under Regulation (EU) 2016/679 (GDPR), Slovak Act No. 18/2018 Coll. and other applicable law.

Controller details

• I2M, s.r.o., Bajkalská 45G, 821 05 Bratislava, Slovakia
• Company registration number: 48 069 892
• Email: info@latimport.sk; telephone: +421 901 771 711

Orders and contracts: we process identity, contact, billing, delivery, order, payment and business details to conclude and perform the contract under Article 6(1)(b) GDPR. Accounting and tax data is retained to meet legal obligations under Article 6(1)(c), generally for ten years, and claim-related data for the applicable statutory limitation periods under our legitimate interests in Article 6(1)(f).

Customer account: profile data, a securely hashed password or technical Passkey credentials and order history are processed to provide the account under Article 6(1)(b) GDPR. Profile data is retained while the account exists; after deletion, only legally required records and data needed for legal claims remain.

Newsletter: we use the email address on the basis of consent under Article 6(1)(a) GDPR. Existing customers may receive offers for our own similar products where Section 116 of Slovak Act No. 452/2021 Coll. permits this, based on our legitimate interest under Article 6(1)(f). Every message provides a free opt-out. Evidence of consent or opt-out may be retained for four years to demonstrate compliance.

Customer support: contact details and correspondence are processed to take pre-contractual steps or perform the contract under Article 6(1)(b) GDPR, and for handling ordinary requests and legal claims under Article 6(1)(f). Routine correspondence is generally retained for no more than one year after closure; complaint or claim records follow the applicable legal period.

Security and abuse prevention: IP address, event time, browser information and sign-in or payment-event records may be processed to protect accounts, orders and systems, prevent fraud and investigate incidents under Article 6(1)(f) GDPR. Retention is limited according to the relevant risk, investigation and statutory limitation period, and access is restricted.

We obtain data mainly from you during an order, registration or communication. Payment and delivery status may come from the relevant payment or delivery provider. We do not sell personal data.

Typical recipients

• Carriers and pickup-point providers.
• Payment providers, particularly GoPay.
• Accounting, tax and legal advisers.
• IT, hosting, email, customer-support and cybersecurity providers.
• Public authorities where disclosure is required by law.

Card or online-banking details are entered directly in GoPay’s secure environment. I2M, s.r.o. does not receive or store full card details or online-banking credentials.

We receive only the transaction identifier, status and information required for the order, payment, refund, accounting and payment-incident handling.

We prefer processing within the European Economic Area. Some global IT, security, analytics or email providers may nevertheless involve a transfer to a third country.

Such a transfer takes place only under a European Commission adequacy decision or appropriate safeguards under Article 46 GDPR, particularly standard contractual clauses and, where needed, supplementary security measures. You may request information about the relevant mechanism or a copy from info@latimport.sk.

Necessary cookies provide cart, session, sign-in and security functions and are used within Section 109(8) of Slovak Act No. 452/2021 Coll. Analytics and marketing cookies are used only after consent under Article 6(1)(a) GDPR.

Optional-cookie consent can be changed or withdrawn at any time through Cookie settings in the footer. Withdrawal does not affect processing carried out lawfully before it.

Fields marked as required during checkout are contractually necessary. Without them, we cannot accept, process, pay for or deliver the order. Creating an account, joining the newsletter and providing optional data are voluntary.

We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. Security controls may flag unusual events for review; they are not used for marketing profiling.

Subject to the GDPR conditions, you may request access, correction, deletion, restriction and portability. You may object to processing based on legitimate interests; direct marketing stops whenever you object to it.

Where processing is based on consent, you may withdraw it at any time without affecting processing carried out lawfully before withdrawal. To exercise your rights, email info@latimport.sk. We may reasonably verify your identity.

You may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Galvaniho 7/B, 821 04 Bratislava, email statny.dozor@pdp.gov.sk, website dataprotection.gov.sk.

Principal rights

• Access and correction.
• Deletion and restriction where the statutory conditions are met.
• Data portability where applicable.
• Objection to legitimate-interest processing and direct marketing.
• A complaint to the competent supervisory authority.