Privacy Policy

Effective from 19 June 2026

The protection of personal data is very important to us. For this reason, we continuously analyse all personal data processing activities and ensure their compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”), as well as with applicable national legislation in the field of personal data protection.

Your personal data is processed as controller by AVE SALUS s. r. o., with its registered office at Na Štyridsiatku 7731/4, 811 06 Bratislava – mestská časť Staré Mesto, Slovak Republic, Company ID (IČO): 57 477 167, registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sro, Insert No.: 196705/B.

You may contact us at any time at:

E-mail: ave@avesalus.com
Telephone: +421 948 563 781

This Privacy Policy explains how and under what conditions we process your personal data and describes your related rights. We process personal data for the purposes set out below. Where a retention period is specified in years, it shall expire on the last day of the calendar year in which the relevant retention period would otherwise expire.

1. Purpose, Legal Basis and Retention Period of Personal Data

a) Ordering and Purchasing Goods via the Online Store

PURPOSE

If you wish to purchase goods offered through our online store, we need to process your personal data in order to advise you when selecting goods, accept and properly process your order, deliver the ordered goods, handle complaints and claims, and carry out other related activities.

LEGAL BASIS

We may process your personal data without your consent where such processing is necessary for the performance of a contract concluded with you or in order to take steps at your request prior to entering into a contract.

RETENTION PERIOD

For the duration of the contract and for 4 years after its termination.

b) Customer Account

PURPOSE

You may create your own customer account in our online store and use it to place future orders. Information relating to your orders may also be stored in your customer account.

LEGAL BASIS

We may process the personal data you provide when registering and using your customer account, as well as data subsequently processed within the account, such as your order history, where such processing is necessary in connection with our pre-contractual and contractual relationship with you.

RETENTION PERIOD

For the duration of your registration and existence of the customer account.

c) Direct Marketing

PURPOSE

If you have previously purchased goods from us, we may wish to offer you other similar goods from our portfolio that may be of interest to you. This constitutes direct marketing.

LEGAL BASIS

We may process your personal data for this purpose without your consent on the basis of our legitimate interest in promoting and increasing demand for our goods in relation to existing customers who may reasonably expect to receive information about similar goods from us, subject to applicable rules governing electronic marketing communications.

You have the right to object to the processing of your personal data for direct marketing purposes at any time, as described in Section 4 below.

RETENTION PERIOD

For the duration of the contractual relationship with us and for 2 years after its termination.

d) Advertising and Newsletter

PURPOSE

Where the communication does not fall within direct marketing to existing customers, for example where you are not yet our customer or we wish to offer you goods that are not similar to those you have previously purchased, we may wish to inform you about news, special promotions and advertising offers.

LEGAL BASIS

We process your personal data for this purpose only where you have given us your consent, where consent is required by applicable law.

RETENTION PERIOD

For the duration of your consent, which you may withdraw at any time as described in Section 4 below, but no longer than 2 years from the date on which consent was given. After this period, we may ask you to provide your consent again, and you are free to decide whether or not to do so.

e) Suppliers and Contractual Partners

PURPOSE

If you are our supplier or contractual partner, we need to process personal data necessary for the performance of our contractual relationship with you, in particular to communicate with you regarding the terms of the contract, conclude the contract, perform it properly and, where necessary, enforce its performance.

LEGAL BASIS

We may process your personal data without your consent where such processing is necessary for the performance of a contract concluded with you.

RETENTION PERIOD

For the duration of the contract and for 4 years after its termination.

f) Contact Persons

PURPOSE

If you are a contact person of one of our contractual partners, for example its statutory representative, employee or external contractor, we process personal data necessary for the performance of the relevant contractual relationship.

LEGAL BASIS

Your consent is not required because our legitimate interest, as well as the legitimate interest of our contractual partner, is to ensure the proper and timely performance of the relevant contract.

RETENTION PERIOD

For the duration of the contract and for 4 years after its termination.

g) Accounting

PURPOSE

As an accounting entity, we are required to maintain accounting records in accordance with applicable legislation. For this purpose, we may need to process certain personal data contained in accounting records, such as incoming and outgoing invoices and cash records.

LEGAL BASIS

We process your personal data for this purpose without your consent because such processing is necessary for compliance with our legal obligations relating to accounting and associated requirements.

RETENTION PERIOD

For 10 years from the date of creation of the relevant accounting document or record.

h) Taxes

PURPOSE

We are also subject to obligations arising from tax legislation, in particular in relation to income tax and value added tax. We therefore process your personal data where required by applicable tax legislation.

LEGAL BASIS

We process your personal data for this purpose without your consent because such processing is necessary for compliance with our legal obligations under applicable tax legislation.

RETENTION PERIOD

In accordance with applicable tax legislation, generally for 10 years from the date of creation of the relevant tax document or record.

i) Legal Claims

PURPOSE

As part of our activities, we monitor compliance with applicable legislation, handle legal matters and, where necessary, establish, exercise and enforce our rights and claims or defend ourselves against claims made by third parties.

LEGAL BASIS

We may process your personal data without your consent where such processing is necessary for the establishment, exercise or defence of our rights and legal claims. This constitutes our legitimate interest.

RETENTION PERIOD

For as long as the relevant rights and claims exist and remain enforceable, in particular until the applicable limitation period has expired.

j) Records Management

PURPOSE

We maintain records of incoming and outgoing correspondence and other records as required by applicable legislation. Such records may contain your personal data, for example where you are the sender or recipient of correspondence.

LEGAL BASIS

We process your personal data for this purpose without your consent where such processing is necessary for compliance with our legal obligations.

RETENTION PERIOD

For the periods determined by us on the basis of applicable legislation and the principle of storage limitation. Ordinary correspondence is generally retained for 3 years. If you would like information about the specific retention period applicable to your personal data, you may contact us at any time.

k) Essential Cookies

PURPOSE

In order to ensure the functionality and security of our website and its proper loading in your internet browser, we use essential cookies that enable the basic functions of the website. Further information is provided in our “Cookies” section.

LEGAL BASIS

These cookies and related data are used where necessary to provide the website and its basic functions requested by the user and to ensure the proper and secure operation of the website. Where permitted by applicable law, related personal data may also be processed on the basis of our legitimate interest in ensuring the security and proper functioning of our website.

RETENTION PERIOD

For 7 days from your visit to the website, or for the period specified for the relevant cookie, where applicable.

l) Optional (Non-Essential) Cookies

PURPOSE

To make the use of our website more convenient and effective, we also use cookies that are not strictly necessary for the proper functioning of the website. These may be used, for example, to tailor advertising to your interests, create statistics and help us improve the website.

We may also use third-party cookies, including Google Analytics. Further information is provided in our “Cookies” section.

LEGAL BASIS

We process data through these cookies only on the basis of your consent where required by applicable law. You may choose which optional cookies you allow and may withdraw your consent at any time.

RETENTION PERIOD

For the duration of your consent, but no longer than 1 year from your visit to the website, unless a different period is specified for an individual cookie.

m) Google Ads Enhanced Conversions

PURPOSE

In order to measure the effectiveness of our advertising in Google Ads more accurately and attribute completed purchases to specific advertising campaigns, we may process your contact details, in particular your e-mail address and telephone number, and transmit them to Google in hashed form.

This feature, known as Enhanced Conversions, enables us to evaluate more accurately whether and how our advertising resulted in a purchase, including in circumstances where this cannot be measured using standard cookies.

LEGAL BASIS

We process this data only on the basis of your consent, which you may provide when visiting the website through the cookie settings, specifically marketing/advertising cookies. You may withdraw your consent at any time.

RETENTION PERIOD

For the duration of your consent, but no longer than 1 year from your visit to the website.

n) Social Media

PURPOSE

In order to develop our activities and increase awareness of our business, we operate pages, user accounts and channels on social media platforms, in particular Facebook and Instagram. Through these platforms, you can obtain information about our activities and may comment on, share or like our posts.

We process your personal data for the purposes of managing and administering these pages, accounts and channels and obtaining statistical information relating to their use.

LEGAL BASIS

We may process relevant personal data without your consent on the basis of our legitimate interest in managing and administering our social media presence and communicating with users who interact with our profiles and content.

Social media platform operators may also process personal data independently or, in certain circumstances, jointly with us in accordance with their own terms, privacy policies and applicable law.

RETENTION PERIOD

For the duration of the relevant fan page, user account or channel, but no longer than 5 years from the commencement of the relevant processing unless a longer period is required or permitted by applicable law.

o) IT Security

PURPOSE

We place great importance on data protection and information security. We may therefore process personal data where necessary for IT security, the prevention, detection and investigation of security incidents and other matters relating to IT administration. This may include, for example, information relating to customer accounts and IP addresses.

LEGAL BASIS

We may carry out this processing without your consent on the basis of our legitimate interest in protecting our information systems and the personal data processed within them.

RETENTION PERIOD

For the period necessary to investigate and resolve a security incident, but no longer than 6 months unless a longer period is necessary for the establishment, exercise or defence of legal claims or is required by law.

p) GDPR and Data Protection Compliance

PURPOSE

We process personal data where necessary to fulfil our obligations relating to personal data protection, including handling enquiries and requests from data subjects, investigating security incidents and complying with obligations under the GDPR and other applicable data protection legislation.

LEGAL BASIS

We may process such personal data without your consent where processing is necessary for compliance with our legal obligations as controller under the GDPR and other applicable data protection legislation.

RETENTION PERIOD

For 5 years from the creation of the relevant record or output.

q) Meta (Facebook) Conversions API

PURPOSE

In order to measure the effectiveness of our advertising on Meta platforms, including Facebook and Instagram, more accurately and attribute completed purchases to specific advertising campaigns, we may process your contact details, in particular your e-mail address and telephone number, as well as information relating to your order.

Relevant identifiers may be transmitted to Meta in hashed form through the Conversions API. This enables us to evaluate more accurately whether and how our advertising resulted in a purchase, including where this cannot be measured using standard cookies.

LEGAL BASIS

RETENTION PERIOD

For the duration of your consent, but no longer than 1 year from your visit to the website.

2. Recipients or Categories of Recipients

We protect your personal data and do not disclose it to third parties except where necessary for the purposes described in this Privacy Policy, where required by law, or where another valid legal basis applies.

We may share personal data with contractual partners that process personal data on our behalf and in accordance with our instructions. These include, in particular, providers of cloud and web hosting services, accounting services, marketing services and IT services.

In connection with our use of Google Analytics and Google Ads, including Enhanced Conversions, personal data may be provided to Google Ireland Limited and, where applicable, Google LLC in the United States.

In connection with our use of Meta advertising services, including Facebook, Instagram and the Conversions API, personal data may be provided to Meta Platforms Ireland Limited and, where applicable, Meta Platforms, Inc. in the United States.

Where we use the services of auditors, lawyers or other regulated professionals, they may act as independent controllers and are responsible for processing personal data in accordance with their own legal obligations and privacy terms.

Personal data may also be disclosed to public authorities, courts or other authorised entities where such disclosure is required by law, a binding decision or another applicable legal obligation.

3. International Transfers of Personal Data

In connection with the use of services provided by Google, including Google Analytics, Google Ads and Enhanced Conversions, and Meta, including Facebook, Instagram and the Conversions API, some personal data may be transferred outside the European Economic Area, including to the United States.

Where personal data is transferred to a country outside the European Economic Area, we ensure that an appropriate transfer mechanism under the GDPR is used.

Where applicable, transfers to organisations in the United States may be based on the European Commission’s adequacy decision relating to the EU-U.S. Data Privacy Framework where the relevant recipient is certified under that framework.

Where the EU-U.S. Data Privacy Framework or another adequacy decision does not apply, transfers may be based on Standard Contractual Clauses approved by the European Commission or another lawful transfer mechanism under the GDPR.

Further information about the safeguards used in connection with services provided by Google and Meta is available in their respective privacy information.

4. Rights of the Data Subject

As a data subject, you have a number of rights under the GDPR.

Right of Access to Personal Data

You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed and, where that is the case, to obtain access to that personal data and the information required by applicable law.

You also have the right to obtain a copy of the personal data undergoing processing. The first copy is provided free of charge. For any further copies requested by you, we may charge a reasonable fee based on administrative costs, where permitted by the GDPR.

Right to Rectification and Completion of Personal Data

You have the right to request that we rectify inaccurate personal data concerning you without undue delay.

Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed.

Right to Erasure of Personal Data

You have the right to request the erasure of your personal data without undue delay where the conditions provided by the GDPR are met, including where:

the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
you withdraw the consent on which the processing is based and there is no other legal ground for the processing;
you object to the processing and there are no overriding legitimate grounds for the processing;
the personal data has been unlawfully processed;
the personal data must be erased for compliance with a legal obligation under European Union or applicable Member State law; or
the personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

You may contact us at any time to exercise this right. We will assess whether the conditions for erasure are met and whether any applicable exception allows or requires us to retain the relevant personal data, for example where processing is necessary for the establishment, exercise or defence of legal claims.

Right to Restriction of Processing

You have the right to request restriction of the processing of your personal data where:

you contest the accuracy of the personal data, for a period enabling us to verify its accuracy;
the processing is unlawful and you oppose the erasure of the personal data and request restriction of its use instead;
we no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims; or
you have objected to processing pending verification of whether our legitimate grounds override your grounds.

Where processing has been restricted, the personal data may continue to be processed in circumstances permitted by the GDPR.

Right to Object to Processing

You have the right to object, on grounds relating to your particular situation, to the processing of your personal data where the processing is based on our legitimate interests or the legitimate interests of a third party.

In such cases, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where processing is necessary for the establishment, exercise or defence of legal claims.

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, including profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for those purposes.

Right to Data Portability

Where the processing of your personal data is based on your consent or on a contract and is carried out by automated means, you have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format.

You also have the right to transmit that data to another controller and, where technically feasible, to have the personal data transmitted directly from us to another controller, subject to the conditions provided by the GDPR.

Right to Withdraw Consent at Any Time

Where processing is based on your consent, you have the right to withdraw that consent at any time.

You may withdraw your consent by contacting us using the contact details provided above or, where applicable, through the relevant consent or cookie settings.

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a competent supervisory authority.

Under Article 77 GDPR, you may lodge a complaint in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.

A list of European data protection supervisory authorities and their contact details is available from the European Data Protection Board (EDPB).

5. Requirement to Provide Personal Data

Where we process your personal data on the basis of your consent, providing such personal data is voluntary and is not a statutory or contractual requirement. Failure to provide such personal data will generally have no adverse consequences for you, although you may not be able to use the particular optional service or functionality concerned.

Where personal data is processed because it is necessary for the performance of a contract or compliance with a legal obligation, failure to provide the necessary personal data may result in our inability to conclude or perform the relevant contract or fulfil the relevant legal obligation.

Blocking essential cookies or the associated processing may result in certain functions of the website not operating correctly.

In other cases, failure to provide personal data will not generally have adverse consequences for you.

The Controller may amend this Privacy Policy from time to time. The current version will be published on our website. Where appropriate or required by applicable law, we may also inform you of material changes using the contact details you have provided to us.

This Privacy Policy takes effect on 19 June 2026.

Discussion (0)