Processing of personal data
Privacy Notice (GDPR)
1) Who we are & how to contact us
Controller: ANGEL GROUP, s.r.o., Company ID (IČO): 43996957
Registered office / premises: Sobôtka 5116/3, 979 01 Rimavská Sobota, Slovakia
Business register: District Court Banská Bystrica, Section: Sro, File No.: 14439/S
Tax ID: 2022549573 | VAT ID: SK202254957
Phone: +421 903 790 805 | E-mail: info@redant.sk
Data Protection Officer (DPO): not appointed.
General contact person: Zuzana Janová.
2) Purposes, legal bases & retention
| Purpose | Legal basis (GDPR) | Data categories | Retention |
|---|---|---|---|
| Purchase & delivery of goods; handling claims | Performance of a contract (Art. 6(1)(b)); legal obligation – accounting (Art. 6(1)(c)) | Identification data, contact details, address, orders, payments | Contract data: 5 years from delivery; accounting records: at least 10 years |
| Customer support (chat, e-mail, phone) | Legitimate interest – quality support (Art. 6(1)(f)) | Name, contact details, communication content | 2 years from last interaction |
| Customer account / loyalty programme | Performance of a contract (Art. 6(1)(b)) | Identification data, contact details, purchase history, preferences | For the duration of the account + 2 years |
| Newsletter & marketing communications | Consent (Art. 6(1)(a)) or legitimate interest where permitted | E-mail, name, segmentation | Until consent is withdrawn/objection; max. 3 years after last activity |
| Product reviews | Consent or performance of a contract | Name/nickname, rating, photos | 5 years or until consent is withdrawn |
| Marketing, analytics, personalisation & remarketing (cookies) | Consent for marketing/analytics cookies; strictly necessary cookies – legitimate interest (Art. 6(1)(f)) | IP, cookie identifiers, technical data, on-site events | According to cookie lifespan (see Cookie Policy) or until consent is withdrawn |
| Fraud prevention & IT security | Legitimate interest (Art. 6(1)(f)) | Technical logs, IP, login data | 1 year, longer where an incident requires it |
| Contests / campaigns | Consent or performance of a contract (contest rules) | Identification data, contact details, prize documentation | For the duration + 1 year; prize lists per Slovak law |
3) Where we obtain data from
- directly from you during registration, purchase, communication or when you give consent to receive news,
- from cookies and similar technologies on our website (see Cookie Policy),
- from partners if you register a product purchased from a reseller (only with your knowledge).
4) Categories of recipients
We may share your data only to the extent necessary with:
- Carriers and couriers (delivery),
- Payment gateways and banks (payment processing),
- External warehouses / fulfilment providers (if used),
- E-shop maintenance, web hosting, e-mailing, analytics and marketing tools,
- Accounting and legal services, and public authorities where required by law.
Current list of processors: to be added.
5) Transfers to third countries
We generally do not transfer personal data outside the EU/EEA. If a transfer occurs (e.g., tool based in the USA), we will do so only under GDPR conditions (Standard Contractual Clauses, risk assessments and supplementary measures). Details will be provided in the list of processors.
6) Automated decision-making & profiling
We do not use decision-making producing legal effects solely based on automated processing. We may carry out basic segmentation for more relevant newsletters (e.g., based on purchase history), always with the option to object or unsubscribe.
7) Your rights
- Access to your data,
- Rectification of inaccurate data,
- Erasure (“right to be forgotten”) in cases provided by law,
- Restriction of processing,
- Data portability for data provided under consent or contract,
- Object to processing based on legitimate interests or direct marketing,
- Withdraw consent at any time.
Exercise your rights by contacting us at info@redant.sk or by phone at +421 903 790 805. We will respond within 1 month.
8) Supervisory authority
If you believe your rights have been violated, you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk). You may also contact us first—we will address your request without delay.
10) Security
We apply appropriate technical and organisational measures (encryption, pseudonymisation where feasible, access controls, regular updates, staff training). We select processors that meet GDPR requirements and conclude data processing agreements with them.
11) Necessity to provide data
Some data are necessary for purchases—we cannot conclude a contract or deliver goods without them (name, address, contact, payment method). Marketing data are optional and processed based on consent, which you may withdraw at any time.
12) Changes to this notice
We may update this notice, e.g., due to changes in legislation or processes. The current version is always available on our website. Material changes will be communicated appropriately (e.g., by e-mail or banner).

