Privacy Policy

The Harnesstor workshop after dark: mannequins wearing harnesses and the workbench by the window
This is an English translation of the original Slovak document, provided for your convenience. In the event of any discrepancy between the two versions, the Slovak version shall prevail. Slovenská verzia

This Privacy Statement was last updated on 28 October 2026 and applies to citizens and permanent residents of the European Economic Area and Switzerland.

In this Privacy Statement, we explain what we do with the data we obtain about you via https://www.harnesstor.sk. We recommend that you read this statement carefully. In our processing, we comply with the requirements of data protection legislation. Among other things, this means that:

  • we clearly state the purposes for which we process personal data. We do this by means of this Privacy Statement;
  • we aim to limit our collection of personal data to only the personal data that is necessary for legitimate purposes;
  • we first request your explicit consent to the processing of your personal data in cases that require your consent;
  • we take appropriate security measures to protect your personal data, and we also require this of parties that process personal data on our behalf;
  • we respect your right to access your personal data, or to have it corrected or erased, at your request.

If you have any questions, or want to know exactly what data we hold about you, please contact us.

1. Purpose, data and retention period

We may collect or receive personal data for a number of purposes connected with our business operations, which may include the following: (click to expand)

1.1 Sending newsletters

For this purpose, we use the following data:

  • E-mail address
  • Name and surname

The basis on which we may process this data is:

Upon provision of consent.

Retention period

We keep this data until the service is terminated.

1.2 Contact – by telephone, post, e-mail and/or web forms

For this purpose, we use the following data:

  • Name and surname
  • E-mail address
  • Telephone number
  • Body measurements (neck, chest and waist circumference, etc.), if you send them to us for a made-to-measure product

The basis on which we may process this data is:

Upon provision of consent.

Retention period

We keep this data until the service is terminated.

1.3 Payments

For this purpose, we use the following data:

  • Name and surname
  • Home or other address, including street name and the name of the city or municipality
  • E-mail address
  • Payment details (for example a bank account number for a refund); payment card details are processed directly by the payment gateway operator Stripe and are not visible to us

The basis on which we may process this data is:

Performance of a contract to which the data subject is party (Article 6(1)(b) GDPR).

Retention period

We keep this data until the service is terminated.

1.4 Account registration

For this purpose, we use the following data:

  • Name and surname
  • Home or other address, including street name and the name of the city or municipality
  • E-mail address
  • Account name or nickname
  • IP address

The basis on which we may process this data is:

Upon provision of consent.

Retention period

We keep this data until the service is terminated.

1.5 To support the services or products that a customer wishes to buy or has bought

For this purpose, we use the following data:

  • Name and surname
  • E-mail address
  • Telephone number
  • Body measurements (neck, chest and waist circumference, etc.), if you send them to us for a made-to-measure product

The basis on which we may process this data is:

Upon provision of consent.

Retention period

We keep this data until the service is terminated.

1.6 Compliance with legal obligations

For this purpose, we use the following data:

  • Name and surname
  • Home or other address, including street name and the name of the city or municipality
  • Invoice details (for purchases on behalf of a business, also the business name, Company ID (IČO), Tax ID (DIČ) and VAT ID (IČ DPH))

The basis on which we may process this data is:

For the purpose of complying with legal or regulatory obligations.

Retention period

We keep this data until the service is terminated.

1.7 Compiling and analysing statistics in order to improve the website.

For this purpose, we use the following data:

  • IP address (truncated)
  • Internet activity information, including, but not limited to, browsing history, search history and information regarding a consumer’s interaction with an internet website, application or advertisement

The basis on which we may process this data is:

It is necessary for the purposes of the legitimate interests pursued by the controller or a third party, and that interest outweighs the interests of the data subject.

Retention period

We keep this data until the service is terminated.

1.8 Deliveries

For this purpose, we use the following data:

  • Name and surname
  • Home or other address, including street name and the name of the city or municipality
  • E-mail address
  • Telephone number

The basis on which we may process this data is:

Performance of a contract to which the data subject is party (Article 6(1)(b) GDPR).

Retention period

We keep this data until the service is terminated.

2. Sharing with other parties

We share or disclose this data only to processors, for the following purposes:

Processors

Name: Packeta Slovakia s. r. o.
Country: Slovakia
Purpose: Deliveries (for parcels sent abroad, also Packeta’s partner carriers in the country of delivery)
Name: Stripe Payments Europe, Ltd.
Country: Ireland
Purpose: Payments
Name: Google Ireland Ltd.
Country: Ireland
Purpose: Compiling and analysing statistics
Name: WebSupport, s.r.o.
Country: Slovakia
Purpose: Hosting services and e-mail management (including sending newsletters – the MailPoet tool runs on our server)
Name: SuperFaktura, s.r.o.
Country: Slovakia
Purpose: Issuing and archiving invoices

Transfers outside the EU

Google and Stripe may also process data in the USA. Such transfers are safeguarded by the EU–US Data Privacy Framework and by the standard contractual clauses of the European Commission.

3. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.

4. Disclosure practices

We disclose personal data to public authorities (for example law enforcement authorities or courts) where we are required to do so by law or by a court decision, and only to the extent permitted by law.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your data may be disclosed to our advisers and any prospective buyers and will be passed on to the new owners.

We have entered into a data processing agreement with Google.

Google is not permitted to use the data for any other Google services.

Inclusion of full IP addresses is blocked.

5. Security

We are committed to the security of personal data. We take appropriate security measures to limit misuse of, and unauthorised access to, personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

6. Third-party websites

This Privacy Statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties will handle your personal data in a reliable or secure manner. We recommend that you read the privacy statements of those websites before using them.

7. Amendments to this Privacy Statement

We reserve the right to make amendments to this Privacy Statement. We recommend that you consult this Privacy Statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

8. Accessing and modifying your data

If you have any questions, or want to know which personal data we hold about you, please contact us. You can contact us using the information given below. You have the following rights:

  • You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained.
  • Right of access: You have the right to access your personal data that is known to us.
  • Right to rectification: You have the right to supplement, correct, delete or block your personal data at any time.
  • If you give us your consent to process your data, you have the right to withdraw that consent and to have your personal data erased.
  • Right to data portability: You have the right to request all of your personal data from the controller and to transfer it in its entirety to another controller.
  • Right to object: You may object to the processing of your data. We will comply with this unless there are justified grounds for the processing.

Please make sure that you always state clearly who you are, so that we can be certain that we do not modify or delete the data of the wrong person.

9. Lodging a complaint

If you are not satisfied with the way in which we process your personal data or have handled your complaint, you have the right to lodge a complaint with the supervisory authority – the Office for Personal Data Protection of the Slovak Republic (Hraničná 12, 820 07 Bratislava, www.dataprotection.gov.sk) or with the supervisory authority in the Member State of your habitual residence.

10. Contact details

Matej Chmelár – Harnesstor
Lesnícka 2
902 01 Pezinok
Slovakia
Website: https://www.harnesstor.sk
E-mail: info@harnesstor.sk
Telephone number: +421 949 567 096

11. Data requests

A request for access to personal data, or for its rectification, erasure or transfer, can be sent by e-mail to info@harnesstor.sk.