Privacy Policy (GDPR)

1. Data Controller

The data controller is Brap s.r.o., with registered office at Myslenická 1, 902 01 Pezinok, Company ID: 52558827.

2. What data we collect

As part of our operations, we process the following personal data:

• • Full name
• • Email address
• • Phone number
• • Vehicle data (for inquiries)
• • IP address and cookies (analytics purposes)

3. Purpose of processing

We process your personal data for the following purposes:

• • Processing your inquiries and orders
• • Communication regarding our services
• • Fulfilling contractual obligations
• • Improving our services and website

4. Legal basis for processing

We process personal data based on your consent, contract performance, legitimate interest, or legal obligation in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

5. Data retention period

We retain your personal data only for the period necessary to fulfill the purpose for which it was collected, or for the period required by law.

6. Your rights

In relation to the processing of your personal data, you have the right to:

• • Access your personal data
• • Rectification of inaccurate data
• • Erasure of data (right to be forgotten)
• • Restriction of processing
• • Data portability
• • Object to processing

7. Recipients of personal data

We may share your personal data with the following categories of recipients and processors:

• • Hosting and email service providers (transport and delivery of form messages)
• • Financing and leasing companies in case of a financing inquiry
• • Insurance companies in case of a vehicle insurance inquiry
• • Accounting, tax and legal advisors to the extent strictly necessary
• • Public authorities when required by law

8. Transfers to third countries

We generally process personal data within the European Economic Area (EEA). If we use third-party tools (e.g. Google Analytics where consent has been granted), data may be transferred to the United States under European Commission Decision 2023/1795 (EU–US Data Privacy Framework) or Standard Contractual Clauses pursuant to Art. 46 GDPR. The recipient is required to ensure an adequate level of data protection.

9. Your rights and right to lodge a complaint

In relation to the processing of your personal data, you have the right to:

• • Access your personal data (Art. 15 GDPR)
• • Rectification of inaccurate or completion of incomplete data (Art. 16)
• • Erasure — right to be forgotten (Art. 17)
• • Restriction of processing (Art. 18)
• • Data portability (Art. 20)
• • Object to processing based on legitimate interest (Art. 21)
• • Withdraw consent at any time, without affecting the lawfulness of prior processing

If you believe your rights have been violated in the processing of your data, you have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection of the Slovak Republic
Hranicna 12, 820 07 Bratislava 27
dataprotection.gov.sk

10. Automated decision-making and profiling

We do not perform automated decision-making, including profiling, within the meaning of Art. 22 GDPR that would produce legal effects concerning you or similarly significantly affect you.

11. Contact

If you have questions about personal data processing, contact us at info@brapcars.sk or by phone at +421 907 298 804. A Data Protection Officer (DPO) has not been appointed; personal data protection is ensured directly by the controller.