Privacy
policy.

Last updated: 2. 11. 2026

I. Who processes your data

The operator of the retro-service.eu portal and the controller of personal data is Jaromír Kapitán, a natural person (the “operator”). For all matters of personal data protection, contact us at info@retro-service.eu. The law does not require us to appoint a data protection officer (DPO), so we have not appointed one.

II. What data we process, why and for how long

Partner profile

• Data: name, description, logo, photos, address (street, postal code, city, country), e-mail, phone, website and social media links, services and makes offered, availability, and billing and tax details (company ID, tax ID, VAT ID) if you fill them in.
• What is public: everything except billing and tax details, depending on whom you show the profile to (everyone or signed-in users only). While you are not available for enquiries, your contacts are not shown.
• Purpose: publishing the profile in the workshop directory and putting enquirers in touch with you.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Facebook: we may also publish the partner's name, focus and logo on our Facebook page to introduce the partner. The legal basis is our legitimate interest in promoting the portal and its partners (Art. 6(1)(f) GDPR); you may object to this at any time.
• Period: until you remove the profile. Removing it deletes the contact and billing details, logo and photos, and the profile cannot be restored.

If you are a private individual and enter your name and contact details, you are publishing your personal data.

Contact form

• Data: name, e-mail, phone (optional), topic and message text.
• Purpose: replying to your message.
• Legal basis: steps taken at your request and our legitimate interest in answering questions (Art. 6(1)(b) and (f) GDPR).
• Period: we deliver the message by e-mail. It is stored in the portal's database only if it cannot be sent straight away, and we delete it no later than 12 months after delivery.

Newsletter

• Data: e-mail, chosen topics and language.
• Legal basis: your consent (Art. 6(1)(a) GDPR), which you confirm by clicking the link in the e-mail.
• Period: until you unsubscribe. You can unsubscribe with one click in every e-mail; your address is then deleted. An unconfirmed sign-up is deleted within 30 days.

Traffic statistics

We measure traffic with our own tool. We do not use third-party analytics services (such as Google Analytics). We store the pages visited, the domain you came from and clicks on links outside the portal.

• With your consent to statistics cookies, your browser receives a random ID (the stats_visitor cookie) that lets us recognise a repeat visit.
• Without consent, we recognise a visitor within a single day by a one-way fingerprint (hash) of the IP address, browser type and date. We do not store the IP address itself.
• Legal basis: consent for the cookie and our legitimate interest in measuring traffic for the fingerprint (Art. 6(1)(a) and (f) GDPR).
• Period: daily fingerprints 30 days; aggregate figures with no link to a visitor are kept permanently.

Visits by bots and administrators are not counted. Partners see only aggregate statistics of visits to their profile.

Security and operation

• Data: IP address and browser type when you sign in (session) and when content is changed (change log with the old and new value), technical error logs.
• Purpose: protecting the portal against misuse and tracing who changed content and when.
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Period: a session expires after 120 minutes of inactivity; the change log is kept for 12 months and error logs for 90 days.

Events in the calendar

We take event details (name, dates, place, organiser, poster) from organisers and public sources. If an event is organised by a private individual, these may be their personal data. Legal basis: legitimate interest in informing the community about events (Art. 6(1)(f) GDPR).

III. Who we share data with

We do not sell data. We share it only with these recipients:

CSWEB is our processor: it stores the data on its servers in the European Union and delivers e-mails solely on our behalf, under a contract pursuant to Art. 28 GDPR, and does not use the data for any other purpose.

Google and Meta may also process data in the USA. The transfer is covered by the European Commission's adequacy decision (EU-US Data Privacy Framework).

Links to maps, partner websites, Facebook or Google forms lead to third-party sites; once you click, their rules apply. We may also disclose data to public authorities where the law requires us to.

IV. Cookies and browser storage

You can change or withdraw your consent to statistics cookies at any time with the Cookie settings button in the portal footer.

V. Your rights

You have the right:

• of access to your data and to a copy of it,
• to rectification of inaccurate data,
• to erasure of data,
• to restriction of processing,
• to portability of the data you have provided to us,
• to object to processing based on legitimate interest (for example statistics or Facebook posts),
• to withdraw your consent at any time (newsletter, statistics cookies), without affecting the lawfulness of processing before the withdrawal.

Send your request to info@retro-service.eu. We will handle it free of charge within one month at the latest.

If you believe we handle your data unlawfully, you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava, www.dataprotection.gov.sk, or with the supervisory authority of the country where you live.

VI. Further information

• We do not use automated decision-making or profiling with legal effects.
• Providing data is voluntary; without contact details, however, we cannot reply to your message.
• We may update this document. The date of the last update is shown at the top.