1. IDENTIFICATION DETAILS

The controller of personal data is VIPLUXURY s. r. o., with its registered office at Hollého 12, 949 01 Nitra, Company ID (IČO): 52879674, registered in the Commercial Register of the District Court of Nitra, Insert No. 50292/N. Contact details of the controller: e-mail: info@vipluxury.sk, phone: +421 905 333 997.

 

2. PROCESSING OF PERSONAL DATA

Personal data are processed for the purposes of tailored communication, offering products and services, sending information about the services provided by the company, and exercising the rights and fulfilling the obligations arising between you and VIPLUXURY s. r. o. This concerns the following personal data of the customer: first name, surname, telephone number, e-mail address, customer address, delivery address and the customer’s IP address.

The legal basis for the processing of personal data is the consent hereby given to the controller pursuant to:

• performance of a contract under Article 6(1)(b) GDPR and fulfilment of the controller’s rights and obligations under Article 6(1)(c) GDPR,
• Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”) for the purposes of direct marketing, where no order for goods has been placed,
• the controller’s legitimate interest in carrying out direct marketing under Article 6(1)(f) GDPR,
• the controller’s legitimate interest under Article 6(1)(f) GDPR in monitoring communication between users pursuant to Section 2a of this Policy.

Where a contact form is submitted, the processing of personal data is necessary for the purpose of contacting you and for compliance with the legal obligations of VIPLUXURY s. r. o.

The controller does not carry out automated individual decision-making within the meaning of Article 22 GDPR.

Automated tools used in monitoring communication pursuant to Section 2a of this Policy may display a warning to the sender, mask part of a message or flag it for review; however, any restriction, suspension or termination of a user account is always decided by an authorised employee of the controller after assessing the specific case.

2a. COMMUNICATION BETWEEN USERS (CHAT) AND ITS MONITORING

The VIP LUXURY web platform and application allow registered users to send messages to each other (hereinafter the “chat”). When you use the chat, we process the following personal data: the content of messages and their attachments (in particular photographs), the date and time messages are sent, identification details of the sender and the recipient (name or username, account identifier), the listing to which the conversation relates, data on reports, on the outcome of reviews and on the measures taken, as well as records of authorised persons accessing the conversation. Messages may also contain other personal data that users include in them.

Purposes and legal bases of processing:

• transmitting and storing messages so that you can communicate with the other user – performance of a contract (Article 6(1)(b) GDPR),
• monitoring compliance with the communication rules set out in Article IX of the General Terms and Conditions (GTC), in particular detecting and preventing circumvention of the platform (sharing contact details, links to other listing portals, arranging sales outside the platform), preventing fraud, the sale of counterfeits, harassment and the dissemination of illegal content – legitimate interest (Article 6(1)(f) GDPR); our legitimate interest is the protection of our business model and of our entitlement to a commission for intermediation, the security and trustworthiness of the platform, and the protection of users against fraudulent conduct,
• handling complaints, returns of goods, authenticity checks and resolving disputes between users, as well as establishing, exercising and defending our legal claims – legitimate interest (Article 6(1)(f) GDPR),
• fulfilling obligations under Regulation (EU) 2022/2065 of the European Parliament and of the Council on a Single Market for Digital Services (Digital Services Act) (in particular providing statements of reasons for the measures taken and handling notices) and complying with requests from public authorities – compliance with a legal obligation (Article 6(1)(c) GDPR).

How monitoring works: Messages may be screened automatically by tools that look for signs of rule violations (e.g. the format of a telephone number, an e-mail address or a web link). An authorised employee of the controller accesses the content of a specific conversation only in the cases set out in Article IX(5) of the GTC – in particular where an automated tool flags a message, where a message or user has been reported, where there is a reasonable suspicion of a breach of the GTC, when handling a complaint or dispute, at your request, or where required by law. Access is limited to conversations related to the given reason, authorised persons are bound by confidentiality, and every access is logged. The controller does not read all conversations indiscriminately and does not use the content of messages for marketing purposes or for profiling.

Before processing on the basis of legitimate interest, we assessed whether our interest is overridden by your interests or fundamental rights and freedoms. In particular, we took into account that you are informed about the monitoring in advance in the GTC, in this Policy and directly in the chat, that the monitoring is targeted and limited to the necessary extent, and that measures to protect confidentiality are in place. Further information about this assessment will be provided to you on request at info@vipluxury.sk.

Please do not share special categories of personal data (e.g. health data), payment card details or login credentials in the chat.

3. RETENTION PERIOD OF PERSONAL DATA

Personal data are processed for the period necessary to exercise the rights and fulfil the obligations arising from the contractual relationship (for a maximum of 3 years from the termination of the contractual relationship) or until consent to the processing of personal data is withdrawn in writing addressed to the seller, by post, by telephone or electronically by e-mail to info@vipluxury.sk.

We retain the content of chat messages for as long as the user account exists, but no longer than 5 years from the sending of the message. If a message or conversation has been the subject of a review, report, complaint or dispute, we retain it until the matter is concluded and the limitation period for related claims has expired. We retain records of the measures taken and of access to conversations for 3 years from the date they were carried out.

4. RECIPIENTS OF PERSONAL DATA

The recipients of personal data are the following persons:

• the courier or shipping company that delivers the goods to the customer, as a further processor,
• VIPLUXURY s. r. o., with its registered office at Hollého 12, 949 01 Nitra, Company ID (IČO): 52879674, as a processor for accounting purposes,
• the provider of hosting and IT services that operates the VIP LUXURY web platform and application, including the chat, on behalf of the controller, as a processor – redsquash s. r. o., with its registered office at Pribinova 30, 811 09 Bratislava, Company ID (IČO): 50878107,
• the other participant in the chat conversation, to the extent of the messages you send to them,
• public authorities, in particular law enforcement authorities and courts, where required by law.

5. RIGHTS OF THE DATA SUBJECT

Under the conditions laid down in the GDPR, you have the right:

• of access to personal data
• to rectification of personal data
• to restriction of processing of personal data
• to erasure of personal data
• to portability of personal data
• to object to the processing of personal data

You may object at any time, on grounds relating to your particular situation, to the processing of personal data based on the controller’s legitimate interest, including the monitoring of chat communication pursuant to Section 2a of this Policy (Article 21 GDPR). In such a case, the controller will no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of legal claims.

If you believe that your right to the protection of personal data has been infringed, you have the right to lodge a complaint with the supervisory authority.

The supervisory authority is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27.

6. SECURITY OF PERSONAL DATA

The controller undertakes to adopt appropriate technical and organisational measures to secure personal data in order to prevent unauthorised access to such data or their loss. The controller declares that only authorised persons bound by confidentiality with regard to personal data will have access to personal data. The controller has adopted technical measures to secure data storage and personal data kept in paper form.

7. FINAL PROVISIONS

By submitting the form, you confirm that you have read the terms of personal data protection and agree to them without reservation. The controller reserves the right to amend these terms. The current version of the terms is published on the controller’s website.

Date of last update: 16 October 2026.