Privacy policy

Controller: Young Heads s. r. o., registered office at Mlynske Nivy 16, 821 09 Bratislava, Slovakia, Company ID: 52241831, VAT ID: 2120950326

Contact: info@puured.sk, tel.: +421 948 604 957

The Controller has not appointed a Data Protection Officer (DPO). We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable legislation.

1. Categories of data, purposes, legal bases and retention periods

Contract fulfilment: name, address, email, phone, billing and delivery details, order and payment data. Legal basis: Art. 6(1)(b) GDPR. Retention: duration of contract and statutory periods.

Customer accounts: login credentials, order history, addresses. Retention: while account is active, max. 18 months from last login.

Accounting and legal obligations: data on accounting documents. Legal basis: Art. 6(1)(c) GDPR. Retention: 10 years.

Complaints: identification and contact data. Retention: 3-4 years.

Communication: data from emails and forms. Retention: max. 60 days.

Marketing and newsletter: we use Mailchimp/Klaviyo. Legal basis: consent or legitimate interest (Art. 6(1)(a) or (f) GDPR). Retention: max. 3 years or until unsubscription.

Cookies and analytics: Google Analytics, Meta Pixel, TikTok Pixel. Processing is based on consent (Art. 6(1)(a) GDPR).

2. Recipients of personal data

We may share personal data with:

  • accountants and legal advisors

  • IT and marketing services (Shopify, Mailchimp, Meta, Google, TikTok)

  • courier companies and payment operators

  • public authorities as required by law

Some recipients may be located outside the EU. Transfers are secured by standard contractual clauses pursuant to Art. 46 GDPR.

3. Data subject rights

You have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21), and to lodge a complaint with the Slovak Data Protection Authority (www.dataprotection.gov.sk).

4. Cookies

Our website uses cookies. Details are available in the cookie settings on our website. Consent may be withdrawn at any time.

5. Validity

This policy is effective from 1 February 2026. The Controller reserves the right to update it.