Privacy policy

This is a translation. The Slovak version of this document is legally binding.

1. Controller

The controller of your personal data is the company below. For any question about personal data, write to [email protected] or call (+421) 917 86 08 15.

Company

Georgian Investment Group, s. r. o.

Company ID (IČO)

56158777

Tax ID (DIČ)

2122231397

VAT ID (IČ DPH)

SK2122231397

Registered office

Krásna 433/15, 900 41 Rovinka

Registration

Obchodný register Mestského súdu Bratislava III, oddiel: Sro, vložka č.: 177588/B

Phone

(+421) 917 86 08 15

E-mail

[email protected]

2. The data we process

Orders on the site: name, phone number, e-mail address, your comment, the products and quantities chosen, the site language, and the date and time of the order.

Enquiries via WhatsApp, phone or e-mail: the data you give us yourself (name, phone number, e-mail address, the message).

Technical data: IP address and request data — to protect the order form against spam and limit how often it can be sent. For cookies, see the Cookie policy.

Language choice: when you open the site without a language in the address, we pick one from your browser's language settings and, if none of ours matches, from the country of your IP address. The country is looked up on our own server in a local database (IP Geolocation by DB-IP); the IP address is not stored or sent to anyone.

3. Purposes and legal bases

Handling your order and contacting you to confirm availability, delivery and the price — steps prior to entering into a contract and performing it (Art. 6(1)(b) GDPR).

Answering enquiries — steps prior to a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering questions (Art. 6(1)(f) GDPR).

Protecting the form against spam and abuse (reCAPTCHA, a limit on orders) — our legitimate interest in the security of the site (Art. 6(1)(f) GDPR).

If an order leads to a contract, we keep records as the law requires (Art. 6(1)(c) GDPR), for example for accounting.

The data in the order form is needed to handle the order; without it the form cannot be sent. No consent is needed for this.

Opening the site in a suitable language (the browser languages, the country of the IP address) — our legitimate interest in a usable site (Art. 6(1)(f) GDPR). Your own choice in the language switcher always takes precedence.

4. Recipients

Only those needed to handle the order receive the data: our e-mail provider (the order arrives in the company mailbox), the provider hosting the site’s server, Google Ireland Limited (reCAPTCHA) and, if you message us on WhatsApp, WhatsApp Ireland Limited. We do not sell data or share it for advertising.

5. Transfers outside the EU

Google and WhatsApp may process data in the USA. These transfers rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework, in which these companies participate.

6. Retention

The copy of an order on the site’s server is kept for 90 days and then deleted automatically.

The order e-mail and correspondence are kept in the company mailbox while needed to handle the order and perform the contract, and then for the periods set by law (for example, accounting law) and the Operator’s internal rules.

The data used to limit how often the form is sent is kept for no more than 10 minutes.

7. Automated assessment

Before the form is sent, reCAPTCHA asks you to tick “I’m not a robot” and, if needed, to solve a picture task. If the check fails, the form does not accept the order; you can then contact us via WhatsApp or by phone and we will take the order without this check.

8. Your rights

You have the right of access to your data, to rectification and erasure, to restriction of processing, to data portability, and to object to processing based on legitimate interest. Just write to [email protected].

You may also lodge a complaint with the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava, www.dataprotection.gov.sk.

9. Governing law

The processing of personal data is governed by the GDPR and the Slovak Act No. 18/2018 Coll. on the protection of personal data.

Approved by the Operator on 5 October 2026.