The controller is ALEKA, s. r. o., Björnsonova 3040/7, 811 05 Bratislava, Slovakia,

Company ID: 55 034 098,

VAT ID: SK2121849796,

IČ DPH: SK2121849796,

e-mail: info@mentevent.sk,

telephone: +421 910 144 160

(“Controller”).

This Notice covers www.mentevent.sk, its online store, e-book and service orders, contact forms, Coach registrations and displayed reviews.

For enquiries, we process a name, email, telephone number, message and related correspondence to respond, prepare an offer and take pre-contractual steps. The legal basis is Article 6(1)(b) GDPR or our legitimate interest in handling communications under Article 6(1)(f).

For orders, we process the customer’s name, contact and billing address, optional company, Company ID, Tax ID and VAT ID, ordered Product and language, price, payment method and status, order and invoice records, records of supply or download and order correspondence. We use these data to conclude and perform the contract, supply a PDF or service, process payment and invoices, provide support, address defects and establish legal claims. The basis is Article 6(1)(b); tax and accounting records are also processed under Article 6(1)(c).

For immediate digital supply, we retain the consent status, date and time and text version as evidence of legal compliance and for legal claims under Article 6(1)(c) and (f).

For Coach meeting registration, we process full name, email, telephone, optional note, selected meeting and registration time to register, organise and confirm participation under Article 6(1)(b).

For Stripe payments, we receive a transaction identifier, amount, currency, date, status and payment method. Full card details and CVV are submitted directly to Stripe and are not received by us. The bases are contract performance and the legitimate interest in secure payments.

For the online withdrawal form, we process order number, email, optional reason, submission time and notice content to handle a statutory consumer right under Article 6(1)(c) and establish legal claims under Article 6(1)(f).

The website processes technical data such as IP address, access time, URL, browser and device information and server-security logs for operation, security and diagnostics based on legitimate interests.

Google Analytics connected through Site Kit may, after the relevant consent, process online identifiers, device data, approximate location and website usage. The basis is consent under Article 6(1)(a). Consent can be changed through “Manage consent”.

The Reviews plugin retrieves publicly available author name, profile image, rating, review, date and our reply from Google Business Profile. We display these references based on legitimate interest. Loading a remote profile image may connect the visitor’s browser to Google and transmit technical data.

Data may be processed as necessary by:

- WebSupport for hosting and related server or email services;

- WordPress, WooCommerce and their technical providers;

- Stripe Payments Europe, Limited and affiliates for payments and fraud prevention;

- Google Ireland Limited and related companies for Site Kit, Google Analytics and Google Business Profile;

- Complianz for cookie-consent choices;

- email, IT, accounting and tax-service providers,

- public authorities where required by law.

Coach and invoice modules store data in the WordPress database or storage. Invoices are sent by email and provided through a protected link.

Google or Stripe services may involve processing outside the EU/EEA. The providers rely on an applicable GDPR transfer mechanism, such as an adequacy decision including the EU–US Data Privacy Framework where applicable, or Standard Contractual Clauses. Their privacy notices provide details.

We retain data only as necessary:

- enquiries without a contract generally for no more than 2 years after the communication ends;

- Coach registrations generally for 2 years after the meeting is held or cancelled;

- orders, contract correspondence and complaints for the contract term and applicable limitation periods;

- accounting and tax records for the statutory period, generally 10 years following the relevant year;

- digital-supply consent and withdrawal notices as needed to demonstrate compliance and defend claims;

- server and security logs generally for 30–180 days unless an incident or legal duty requires longer;

- Google Analytics data according to the retention setting in the Analytics account, while current cookie durations are listed in the Complianz cookie notice; and

- public reviews while displayed or until removed or updated at source.

After the period ends, data are erased or anonymised unless continued retention is legally required.

Fields marked as required for an order or registration are needed to conclude and perform the contract. Without them, we cannot process the order, supply the e-book or complete registration. Analytics consent is voluntary and refusal does not prevent a purchase.

Subject to the GDPR, you may request access, rectification, erasure, restriction, portability and object to processing based on legitimate interests. You may withdraw consent at any time. You may also complain to the Office for Personal Data Protection of the Slovak Republic, Námestie 1. mája 18, 811 06 Bratislava, www.dataprotection.gov.sk.

Send requests to info@mentevent.sk. We may reasonably verify identity before responding.

We do not make decisions producing legal or similarly significant effects based solely on automated processing described here. We do not use contact or order details for email marketing without a separate legal basis. Before launching a newsletter or Meta advertising measurement, we will update this Notice and Complianz settings.

Necessary cookies operate the website, cart, checkout, payment and security. Analytics or marketing technologies operate according to the visitor’s choice. Complianz maintains the current cookie list, purposes and durations in the Cookie Policy. Choices can be changed through “Manage consent”.

We use appropriate access controls, updates, backups and protected delivery of invoices and digital files. No transmission or storage method is completely secure.

We may update this Notice when services, providers or legal duties change; the current version and date will remain available on this page.