Privacy Policy
Privacy Policy
Version 2.0, effective from 1 November 2026. This version replaces Version 1.0 of 25 May 2018.
This Privacy Policy explains how we process your personal data when you visit www.mrhoreca.eu, place an order, contact us or subscribe to our newsletter. It is issued in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Slovak Act No. 18/2018 Coll. on Personal Data Protection. Information on cookies is set out in our separate Cookie Policy ([https://www.mrhoreca.eu/cookie-policy]).
1. Who We Are
The controller of your personal data is VYNIKNI, s.r.o., trading as Mr. HORECA (“we”, “us”, the “Controller”).
Registered office: Ťačevská 602/6, 085 01 Bardejov, Slovak Republic
Company ID (IČO): 50 132 890
Registered in the Commercial Register of the District Court of Prešov, Section: Sro, Insert No.: 32331/P
Operating address: Puškinova 9, 085 01 Bardejov, Slovak Republic
E-mail: info@mrhoreca.eu · Telephone: +421 948 138 598
We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR. All data protection enquiries should be sent to info@mrhoreca.eu.
2. What Personal Data We Process
Identification and contact data: name, surname, billing and delivery address, e-mail address and telephone number.
Business Customer data: company name, company ID, tax ID, VAT ID and the name of the contact person.
Order and payment data: products ordered, order history, prices, payment method, payment status and bank account details for refunds. We do not store payment card details; card payments are processed directly by the payment provider.
Customer account data: login details and account settings, if you register.
Communication data: the content of your e-mails, enquiries, complaints and product reviews.
Artwork and personalisation data: logos, texts and other materials you supply for bespoke products. These usually relate to your business, but may include personal data.
Technical data: IP address, browser type, device information and information on how you use our website, collected through cookies as described in our Cookie Policy.
Providing the data required to conclude and perform a contract is necessary; without it we cannot accept and deliver your order. All other data is provided voluntarily.
3. Why We Process Your Data and on What Legal Basis
3.1 Processing and delivering orders – accepting and confirming orders, preparing proofs for bespoke products, delivery, payment and communication about the order status by e-mail or text message. Legal basis: performance of a contract and steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
3.2 Customer account – managing your registered account and order history. Legal basis: performance of a contract (Article 6(1)(b) GDPR).
3.3 Complaints, withdrawals and returns – handling complaints, withdrawals from contract and returns. Legal basis: compliance with a legal obligation under consumer protection law and the Civil Code (Article 6(1)(c) GDPR).
3.4 Accounting and tax – issuing invoices and keeping accounting and tax records. Legal basis: compliance with a legal obligation under Act No. 431/2002 Coll. on Accounting and Act No. 222/2004 Coll. on Value Added Tax (Article 6(1)(c) GDPR).
3.5 Enquiries and quotations – answering questions sent by e-mail, telephone or contact form and preparing quotations. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR).
3.6 Newsletter to customers – sending information about our own similar products to customers who have purchased from us. Legal basis: our legitimate interest in direct marketing (Article 6(1)(f) GDPR), in accordance with Act No. 452/2021 Coll. on Electronic Communications. You may object at any time, free of charge, by clicking “unsubscribe” in any e-mail.
3.7 Newsletter to other subscribers – sending news, offers and promotions to persons who have subscribed. Legal basis: your consent (Article 6(1)(a) GDPR). We use double opt-in to confirm your e-mail address. You may withdraw your consent at any time by clicking “unsubscribe” or by writing to info@mrhoreca.eu.
3.8 Reviews – publishing product reviews you submit. Legal basis: your consent (Article 6(1)(a) GDPR).
3.9 Portfolio and references – displaying photographs of finished bespoke products bearing a Business Customer’s branding, as described in our General Terms and Conditions. Legal basis: our legitimate interest in presenting our work (Article 6(1)(f) GDPR). You may object at any time.
3.10 Website analytics and security – measuring website use, detecting errors and preventing misuse of our services. Legal basis: your consent for analytics cookies (Article 6(1)(a) GDPR) and our legitimate interest in the security of our services (Article 6(1)(f) GDPR).
3.11 Legal claims – establishing, exercising and defending legal claims, including the recovery of outstanding payments. Legal basis: our legitimate interest (Article 6(1)(f) GDPR).
We do not use your personal data for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
4. How Long We Keep Your Data
Accounting and tax documents: 10 years from the end of the calendar year to which they relate, as required by the Accounting Act and the VAT Act.
Order and contract data: for the duration of the contract and then until the end of the limitation period for legal claims, which is generally four years under the Commercial Code and three years under the Civil Code.
Complaint records: at least three years from the date the complaint was resolved.
Customer account: until you delete your account, or after [three] years of inactivity.
Newsletter: until you unsubscribe or withdraw your consent.
Enquiries without an order: [one] year from our last communication.
Cookies: for the periods stated in our Cookie Policy.
After these periods we will delete or anonymise your personal data.
5. Who We Share Your Data With
We share personal data only to the extent necessary for the purposes described above, with the following categories of recipients:
Carriers: GLS General Logistics Systems Slovakia s.r.o., Budča 1039, 962 33 Budča, Company ID 36 624 942 [, Packeta Slovakia s.r.o., Slovak Post].
Accounting services: READY Trade, s.r.o., Hertník 72, 086 42 Hertník, Company ID 46 041 974.
E-shop platform and hosting: [PROVIDER NAME, ADDRESS, COMPANY ID].
Payment services: [PAYMENT GATEWAY PROVIDER] and our banks.
E-mail and newsletter services: [PROVIDER NAME].
Analytics tools: [Google Ireland Limited (Google Analytics)], subject to your consent.
Public authorities: courts, law enforcement agencies, tax authorities and other public bodies, where required by law.
Our processors act only on our instructions under a data processing agreement in accordance with Article 28 GDPR. We never sell your personal data or share it with third parties for their own marketing purposes.
6. Transfers Outside the European Economic Area
We process your data primarily within the European Union. Some of our service providers [, such as Google,] may transfer data to countries outside the European Economic Area, including the United States. Any such transfer takes place only on the basis of an adequacy decision of the European Commission, including the EU–US Data Privacy Framework, or standard contractual clauses approved by the European Commission (Articles 45 and 46 GDPR).
7. Your Rights
Under the GDPR you have the following rights:
Right of access (Article 15 GDPR) – to obtain confirmation of whether we process your data and a copy of it. The first copy is free of charge.
Right to rectification (Article 16 GDPR) – to have inaccurate or incomplete data corrected.
Right to erasure (Article 17 GDPR) – to have your data deleted, unless we are required to keep it by law or need it to establish, exercise or defend legal claims.
Right to restriction of processing (Article 18 GDPR).
Right to data portability (Article 20 GDPR) – to receive the data you have provided to us in a structured, commonly used and machine-readable format, or to have it transmitted to another controller.
Right to object (Article 21 GDPR) – to object to processing based on our legitimate interest. You may object to direct marketing at any time, and we will then stop using your data for that purpose.
Right to withdraw consent (Article 7(3) GDPR) – at any time, without affecting the lawfulness of processing carried out before withdrawal.
Right to lodge a complaint (Article 77 GDPR) – with the supervisory authority: Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk. You may also contact the supervisory authority in your EU country of residence.
To exercise your rights, contact us by e-mail at info@mrhoreca.eu or by post at VYNIKNI, s.r.o., Puškinova 9, 085 01 Bardejov, Slovak Republic. We will respond without undue delay and in any event within one month of receiving your request. This period may be extended by two further months where necessary, in which case we will inform you. We may ask you to verify your identity before responding.
8. Security of Your Data
We protect your personal data with appropriate technical and organisational measures against unauthorised access, loss, alteration and misuse. These include an encrypted (HTTPS) connection to our website, access to data restricted to authorised persons, password-protected systems and regular data backups. In the unlikely event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you and the supervisory authority as required by Articles 33 and 34 GDPR.
9. Changes to This Policy
We may update this Privacy Policy to reflect changes in the law or in our processing activities. The current version is always available on our website, with its effective date stated at the top. We will inform registered customers of any material changes by e-mail.