Legal
Privacy policy
Effective from 1 October 2026
1. Controller
The controller of your personal data is Richard Bernáth, a sole trader, company ID (IČO) 57593230, registered at Mostná 454/20, 941 31 Dvory nad Žitavou, Slovak Republic (the “controller”). Contact for data protection matters: hello@nagoriwatches.com. No data protection officer has been appointed, as this is not required by law.
2. Purposes and legal bases
- Handling your enquiry sent through the contact form, the form on a watch page or by email – Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract).
- Concluding and performing the purchase contract, including delivery, complaints and withdrawal – Art. 6(1)(b) GDPR.
- Legal obligations, in particular accounting and tax (issuing and archiving documents) – Art. 6(1)(c) GDPR.
- Secure operation of the website (server logs, protecting forms against spam and abuse) – Art. 6(1)(f) GDPR, the controller's legitimate interest.
3. Data processed
- for an enquiry: name, email address, the content of your message and, where relevant, the watch model you are interested in;
- once a purchase is agreed, also: delivery address, phone number (for the carrier) and the details needed to issue an invoice and receive payment;
- technical data: IP address and browser information in the hosting provider's server logs.
Providing your data is voluntary, but without it I cannot answer you or sell and deliver a watch. I do not process special categories of personal data and do not carry out profiling or automated decision-making.
4. Recipients
Your data is shared only to the extent necessary with:
- Vercel Inc. – web hosting and form processing;
- Resend and the email mailbox provider (SMTP) – sending and delivering messages;
- carriers – Slovenská pošta, a. s., Packeta and courier companies, only the data needed for delivery (name, address, phone, email);
- a bank or payment service provider – when the purchase price is paid;
- an external accountant and public authorities where required by law.
I do not sell your data or use it for marketing.
5. Transfers outside the EU
I sell and ship goods exclusively within the European Union and process personal data primarily within the EU/EEA. Some technical service providers (Vercel, Resend) are based in the USA, so data may be transferred to the USA. Such transfers take place only with appropriate safeguards under Chapter V GDPR, in particular the European Commission's adequacy decision (EU–U.S. Data Privacy Framework) or standard contractual clauses.
6. Retention
- enquiries that did not lead to a purchase: for the duration of our communication and at most 12 months after the last message;
- purchase contract data: for the duration of the contract and then until liability for defects and the limitation periods for contractual claims have expired;
- accounting documents: 10 years after the end of the year they relate to (Slovak Act No. 431/2002 Coll. on Accounting);
- server logs: for the period set by the hosting provider, usually a few days to weeks.
7. Cookies
This website does not use analytics, advertising or tracking cookies. It only stores your chosen language in your browser (local storage), which is necessary for the site to work. Fonts and scripts are loaded directly from this website, not from third parties.
8. Your rights
As a data subject you have the right:
- of access to your personal data (Art. 15 GDPR),
- to rectification (Art. 16 GDPR),
- to erasure (Art. 17 GDPR),
- to restriction of processing (Art. 18 GDPR),
- to data portability (Art. 20 GDPR),
- to object to processing based on legitimate interest (Art. 21 GDPR).
Send your request to hello@nagoriwatches.com. I will handle it free of charge within one month at the latest. If you believe the processing breaches the law, you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk, or with the supervisory authority in your country of residence.
9. Changes
I may update this policy from time to time. The current version is always published on this page.