PRIVACY POLICY
of brubi s.r.o.
This Privacy Policy explains how brubi s.r.o. collects, uses, stores and protects personal data when you use the online store www.brubi.eu, place an order, contact us, use the Order Tracking Page, submit a complaint or withdrawal request, subscribe to marketing communication or otherwise communicate with us.
This Privacy Policy is prepared in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR"), Act No. 18/2018 Coll. on Personal Data Protection and other applicable data protection legislation.
1 Data controller
The controller of your personal data is:
brubi s.r.o.
Company registration number: 52579221
Registered office: M. M. Hodžu 4, 974 01 Banská Bystrica, Slovak Republic
E-mail: mail@brubi.eu
The controller is responsible for deciding why and how your personal data is processed.
We have not appointed a Data Protection Officer. You may contact us regarding personal data protection at mail@brubi.eu.
2 What personal data we process
Depending on how you use our E-shop and services, we may process the following categories of personal data:
2.1 Identification and contact data
This includes, in particular, name, surname, e-mail address, telephone number if provided, billing address, delivery address, country, city, postal code and company identification data if you purchase as a business customer.
2.2 Order and contract data
This includes order number, ordered products, product configuration, selected size, material or version, price, payment method, shipping method, delivery status, invoices, credit notes, communication related to the order, order history and data displayed on the Order Tracking Page.
2.3 Payment data
This includes information necessary to match and process payments, such as payment status, transaction reference, payment method and payment provider. We do not store or process full payment card numbers or card security codes. Card payments and other online payments are processed by third-party payment providers.
2.4 Delivery and customs data
This includes data necessary for delivery, customs clearance, export documents and communication with carriers or customs authorities, especially for deliveries outside the European Union.
2.5 Complaint, warranty and withdrawal data
This includes data provided when you submit a complaint, warranty claim, transport damage report, withdrawal from the contract or other request. It may include photographs, videos or documents provided by you for the purpose of assessing the issue.
2.6 Communication data
This includes the content of e-mails, messages, contact forms, customer support communication and other communication with us.
2.7 Website and technical data
This includes IP address, device and browser data, operating system, approximate location derived from technical data, date and time of access, pages visited, session data, cookie identifiers and other diagnostic or security information.
2.8 Marketing and consent data
This includes your marketing preferences, newsletter subscription, consent records, unsubscribe records, campaign interaction data and cookie consent settings.
3 How we collect personal data
We collect personal data mainly when:
a) you place an order in the E-shop,
b) you use the Order Tracking Page,
c) you pay for an order,
d) you contact us by e-mail, contact form or other communication channel,
e) you submit a complaint, warranty claim, transport damage report or withdrawal request,
f) you subscribe to marketing communication,
g) you use our website and cookies or similar technologies are stored on your device,
h) delivery, payment, customs, accounting or IT providers provide us with information necessary for order fulfilment.
Most personal data is provided directly by you. Some technical data is collected automatically when you use our website.
4 Purposes and legal bases of processing
We process personal data only where we have a valid legal basis under GDPR.
4.1 Processing and delivery of orders
Purpose: to process your order, confirm the contract, prepare and deliver the goods, provide the Order Tracking Page, issue order confirmations, communicate about the order and handle payment.
Legal basis: performance of a contract or steps prior to entering into a contract under Article 6(1)(b) GDPR.
4.2 Payment processing
Purpose: to process payments, match payments with orders, prevent payment errors and handle refunds.
Legal basis: performance of a contract under Article 6(1)(b) GDPR and our legitimate interest in secure payment processing under Article 6(1)(f) GDPR.
4.3 Accounting, tax and legal obligations
Purpose: to issue and store invoices, accounting documents, tax records and other legally required documentation.
Legal basis: compliance with legal obligations under Article 6(1)(c) GDPR.
4.4 Delivery outside the European Union and customs documents
Purpose: to prepare export documentation, customs declarations and delivery documentation for orders delivered outside the European Union.
Legal basis: performance of a contract under Article 6(1)(b) GDPR and compliance with legal obligations under Article 6(1)(c) GDPR.
4.5 Complaints, warranty claims, transport damage and withdrawal from the contract
Purpose: to handle complaints, warranty claims, transport damage reports, withdrawal requests, returns, refunds and related communication.
Legal basis: performance of a contract under Article 6(1)(b) GDPR, compliance with legal obligations under Article 6(1)(c) GDPR and our legitimate interest in protecting and defending legal claims under Article 6(1)(f) GDPR.
4.6 Customer support and communication
Purpose: to respond to your questions, requests, messages and feedback.
Legal basis: performance of a contract or steps prior to entering into a contract under Article 6(1)(b) GDPR, or our legitimate interest in communicating with customers and website users under Article 6(1)(f) GDPR.
4.7 Website security and operation
Purpose: to operate the E-shop, ensure technical functionality, prevent misuse, detect errors, protect the website and maintain security.
Legal basis: our legitimate interest in operating and securing the E-shop under Article 6(1)(f) GDPR.
4.8 Analytics cookies and website statistics
Purpose: to understand how users use our website and improve the E-shop.
Legal basis: your consent under Article 6(1)(a) GDPR, unless a particular processing operation is strictly necessary and permitted without consent.
4.9 Advertising cookies and remarketing
Purpose: to display relevant advertising, measure advertising performance and create advertising audiences, for example through advertising platforms.
Legal basis: your consent under Article 6(1)(a) GDPR.
4.10 Direct marketing
Purpose: to send newsletters, product news, offers, discount campaigns and information about our own similar products.
Legal basis: your consent under Article 6(1)(a) GDPR, or our legitimate interest in sending marketing communication about our own similar products and services to existing customers where permitted by applicable law under Article 6(1)(f) GDPR.
You may unsubscribe from marketing communication at any time.
4.11 Protection of legal claims
Purpose: to establish, exercise or defend legal claims, prevent fraud, resolve disputes and prove compliance with our obligations.
Legal basis: our legitimate interest under Article 6(1)(f) GDPR.
5 Is providing personal data mandatory?
Providing personal data required for placing, processing and delivering an order is necessary for concluding and performing the contract. If you do not provide this data, we may not be able to process or deliver your order.
Providing personal data for marketing purposes is voluntary. You may refuse or withdraw marketing consent at any time without affecting your order or other contractual relationship with us.
Providing cookies that are not strictly necessary is voluntary and depends on your consent.
6 Who we share personal data with
We do not sell your personal data.
We may share personal data only where necessary and only to the appropriate extent with the following categories of recipients:
a) payment service providers, such as Stripe, PayPal, CardPay, banks and other payment providers,
b) carriers and logistics providers, such as parcel delivery companies and postal operators,
c) customs authorities, tax authorities and customs service providers where necessary for export or import documentation,
d) accounting, tax and legal service providers,
e) IT, hosting, security and website administration providers,
f) e-mail, newsletter and customer communication service providers,
g) analytics and advertising providers, if you consent to the relevant cookies or technologies,
h) public authorities, courts, supervisory authorities or law enforcement bodies, where required by law or necessary to protect our rights.
All processors are required to process personal data only in accordance with our instructions and applicable data protection law.
7 Payment providers
If you make a purchase, we may use third-party payment providers such as Stripe, PayPal, CardPay, banks or other providers displayed in the checkout process.
We do not store full payment card details. Payment data is processed securely by the relevant payment provider according to its own security standards and privacy policy.
8 International transfers of personal data
We primarily process personal data within the European Union or the European Economic Area.
Some service providers, especially payment, analytics, advertising, IT or communication providers, may process personal data in countries outside the European Union or European Economic Area.
If personal data is transferred outside the European Union or European Economic Area, we rely on appropriate safeguards under GDPR, such as an adequacy decision, standard contractual clauses approved by the European Commission, or other lawful transfer mechanisms.
9 How long we keep personal data
We keep personal data only for as long as necessary for the purpose for which it was collected, unless a longer period is required or permitted by law.
9.1 Orders, invoices and accounting documents
We retain order, invoice, accounting and tax-related data for the period required by applicable accounting and tax legislation, generally 10 years.
9.2 Contract and delivery data
We retain contract and delivery data for the period necessary to perform the contract and, where relevant, to prove fulfilment of the contract and defend legal claims.
9.3 Complaint, warranty and withdrawal data
We retain data related to complaints, warranty claims, transport damage reports, withdrawals, returns and refunds for the period necessary to handle the matter and for the period during which legal claims may be raised or defended. If a commercial warranty is provided, we may retain relevant data for the duration of the warranty and a reasonable period thereafter.
9.4 Customer communication
We retain customer support and communication data for as long as necessary to handle the request and for a reasonable period thereafter, especially where the communication relates to an order, complaint, warranty, withdrawal or legal claim.
9.5 Marketing data
We retain marketing consent and newsletter subscription data until you withdraw consent or unsubscribe. We may retain a record of your unsubscribe request to ensure that we do not contact you again.
9.6 Cookie and technical data
Cookie retention periods depend on the type of cookie and the relevant provider. Details should be provided in the Cookie Policy or cookie settings available on the E-shop.
9.7 Legal claims
Where necessary, we may retain relevant data until the expiry of applicable limitation periods or until the final resolution of a dispute, claim, inspection or legal proceeding.
10 Cookies and similar technologies
Our E-shop uses cookies and similar technologies.
Cookies are small text files stored on your device. Some cookies are necessary for the website to work. Others are used only with your consent.
We may use the following categories of cookies:
a) essential cookies necessary for the operation of the E-shop, shopping cart, checkout, order tracking, security and cookie consent management,
b) functionality cookies that remember preferences such as language or region,
c) analytics cookies that help us understand how visitors use the website,
d) advertising and remarketing cookies used to display relevant advertising and measure advertising performance,
e) consent cookies used to store your cookie preferences.
Non-essential cookies, especially analytics and advertising cookies, are used only on the basis of your consent.
You can manage cookies through the cookie banner or cookie settings on the E-shop and through your browser settings. Disabling some cookies may affect the functionality of the website.
If we use third-party tools such as Google Analytics, Google Tag Manager, Meta Pixel, Pinterest Tag or similar technologies, these tools may process data according to their own privacy policies and may involve transfers outside the European Union or European Economic Area. Such tools should be activated only according to your cookie consent preferences.
11 Marketing communication
If you subscribe to our newsletter or give consent to marketing communication, we may send you information about Brubi products, news, discounts, product launches and related content.
If you are an existing customer, we may send you marketing communication about our own similar products or services where permitted by applicable law. You will always have the possibility to unsubscribe easily and free of charge.
We do not send marketing communication on behalf of unrelated third parties unless you have expressly consented to this.
You can unsubscribe at any time by clicking the unsubscribe link in the e-mail or by contacting us at mail@brubi.eu.
12 Order Tracking Page
After placing an order, we may send you a unique link to the Order Tracking Page.
The Order Tracking Page may contain personal data related to your order, such as order number, order status, payment status, production or dispatch status, delivery tracking and order-related communication.
You should keep the link to the Order Tracking Page confidential and not share it with unauthorized persons.
13 Children’s personal data
Our products may be intended for children, but the E-shop is intended for purchases made by adults.
We do not knowingly collect personal data directly from children. If we become aware that we have collected personal data from a child without appropriate legal basis, we will take reasonable steps to delete such data.
14 Automated decision-making and profiling
We do not use personal data for automated decision-making that produces legal effects concerning you or similarly significantly affects you.
If you consent to advertising cookies, some advertising tools may use limited profiling for the purpose of showing relevant advertising or measuring advertising performance. You can manage or withdraw such consent through cookie settings.
15 Your data protection rights
Under GDPR, you have the following rights:
a) right of access to your personal data,
b) right to rectification of inaccurate or incomplete data,
c) right to erasure of personal data, where legal conditions are met,
d) right to restriction of processing,
e) right to object to processing based on legitimate interest,
f) right to data portability, where applicable,
g) right to withdraw consent at any time, where processing is based on consent,
h) right to lodge a complaint with a supervisory authority.
If you withdraw consent, this does not affect the lawfulness of processing based on consent before its withdrawal.
You can exercise your rights by contacting us at mail@brubi.eu.
We will respond to your request without undue delay and generally within one month. This period may be extended by two additional months where necessary, taking into account the complexity and number of requests.
16 Security of personal data
We take appropriate technical and organisational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.
These measures include access control, secure communication where available, limited access to personal data, use of trusted service providers and internal procedures for handling personal data.
No method of transmission or storage is completely secure. However, we take reasonable steps to protect your personal data.
17 Links to other websites
Our website may contain links to other websites. This Privacy Policy applies only to www.brubi.eu and our processing activities.
If you visit another website, you should read the privacy policy of that website.
18 Changes to this Privacy Policy
We may update this Privacy Policy from time to time, especially due to changes in legislation, our services, technical tools, cookies or data processing practices.
The current version is always available on the E-shop.
Last updated: 18 June 2026
19 How to contact us
If you have any questions about this Privacy Policy or the processing of your personal data, please contact us at:
brubi s.r.o.
M. M. Hodžu 4
974 01 Banská Bystrica
Slovak Republic
E-mail: mail@brubi.eu
20 Supervisory authority
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates GDPR or other applicable data protection law.
In Slovakia, the supervisory authority is:
Office for Personal Data Protection of the Slovak Republic
Galvaniho Business Centrum II
Galvaniho 7/B
821 04 Bratislava
Slovak Republic
E-mail: statny.dozor@pdp.gov.sk
Website: https://dataprotection.gov.sk
Â