Privacy policy

Information for Customers on the Processing of Personal Data

The protection of your personal data is very important to us.

This document explains how Forensick Music, s.r.o., with its registered office at Novákova 554/6, 036 01 Martin, Slovakia, Company ID: 46419233, registered in the Commercial Register of the District Court Žilina, Section Sro, File No. 55678/L
(hereinafter referred to as “Controller” or “we”), processes personal data in accordance with applicable legal regulations.

1. Legal Framework

We process personal data in accordance with:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),

  • Act No. 18/2018 Coll. on Personal Data Protection (Slovak Republic),

  • related EU and national legislation.

Providing certain personal data is necessary for the conclusion and performance of a purchase contract. Without these data, it is not possible to process an order or deliver goods.

2. Categories of Personal Data Processed

2.1 Natural persons (customers)

We process the following personal data:

  • first name and last name

  • street and house number

  • city

  • postal code

  • country

  • e-mail address

  • telephone number (optional)

  • IP address

2.2 Legal entities / sole traders

We process the following personal data:

  • company name

  • registered address

  • city

  • postal code

  • country

  • Company ID (IČO)

  • Tax ID (DIČ)

  • VAT ID (if applicable; optional, as the Controller is not a VAT payer)

  • e-mail address

  • telephone number (optional)

  • IP address

An e-mail address is considered personal data if it allows identification of a natural person.

3. Purposes and Legal Basis of Processing

3.1 Order processing and contract performance

Personal data are processed for the purpose of:

  • processing and fulfilling orders,

  • delivery of goods,

  • issuing accounting and tax documents,

  • handling complaints and claims.

Legal basis:
Performance of a contract pursuant to Article 6(1)(b) GDPR and compliance with legal obligations pursuant to Article 6(1)(c) GDPR.

3.2 Customer communication and support

We use e-mail and telephone contact details for:

  • order confirmations,

  • shipping notifications,

  • availability information,

  • customer inquiries and support,

  • resolving delivery or payment issues.

Communication records are retained for the necessary period, usually no longer than 7 days after order completion, unless required otherwise by law.

3.3 Newsletter and marketing communication

If you give us your explicit consent, we may send you newsletters and marketing information about our products.

  • Consent can be withdrawn at any time via e-mail or by using the unsubscribe link in each newsletter.

  • We never provide newsletter databases to third parties.

Legal basis:
Consent pursuant to Article 6(1)(a) GDPR or legitimate interest pursuant to Article 6(1)(f) GDPR (direct marketing).

3.4 Cookies and website analytics

Our website uses cookies and similar technologies for:

  • website functionality,

  • analytics and statistics,

  • marketing and advertising purposes.

We use a cookie consent banner integrated in the e-shop system (nopCommerce), which allows users to manage cookie preferences in accordance with GDPR and ePrivacy rules.

Analytics tools used include:

  • Google Analytics (with IP anonymization enabled where applicable).

Cookies can be disabled via browser settings; however, this may affect website functionality.

3.5 Social media and external platforms

Our website and marketing activities may involve interaction with social networks and platforms such as:

  • Facebook

  • Instagram

  • Twitter (X)

  • Pinterest

These platforms process data according to their own privacy policies.

4. Recipients of Personal Data

Personal data are disclosed only to the extent necessary and exclusively to trusted processors, including:

4.1 Shipping and logistics partners

  • Packeta s.r.o. / Zásilkovna s.r.o., Ocelářská 392/9, 190 00 Prague 9, Czech Republic

  • Slovenská pošta, a.s., Partizánska cesta 9, 975 99 Banská Bystrica, Slovakia

4.2 Payment service providers

  • Comgate, a.s., Gočárova třída 1754/48b, 500 02 Hradec Králové, Czech Republic

  • PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (if enabled in the future)

4.3 IT and e-commerce services

  • nopCommerce (e-commerce platform)

  • SmarterASP.NET (hosting services)

  • Ecomail.cz (newsletter distribution)

4.4 Marketing and comparison platforms

  • Heureka Group a.s., Karolinská 706/3, 186 00 Prague, Czech Republic

  • Google services (Google Analytics, Google Ads)

Personal data may also be disclosed to:

  • accounting and tax advisors,

  • legal advisors,

  • public authorities where required by law.

5. Transfers to Third Countries

Personal data are not intentionally transferred outside the EU/EEA.

Where certain services involve data processing outside the EU (e.g. Google, Meta), such transfers are safeguarded by standard contractual clauses or other GDPR-compliant mechanisms.

6. Data Retention Period

  • User account data: stored until deletion is requested by the user.

  • Order and accounting data: stored for 10 years in accordance with accounting laws.

  • Marketing consent data: stored until consent is withdrawn.

7. Rights of Data Subjects

You have the right to:

  • access your personal data,

  • rectification of inaccurate data,

  • erasure (“right to be forgotten”),

  • restriction of processing,

  • data portability,

  • object to processing based on legitimate interest,

  • withdraw consent at any time,

  • lodge a complaint with a supervisory authority.

Supervisory authority in Slovakia:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava
https://dataprotection.gov.sk

8. Security of Personal Data

We apply appropriate technical, organizational and security measures to protect personal data against unauthorized access, loss or misuse.

9. Final Provisions

This Privacy Policy is effective as of 1 January 2026 and may be updated in accordance with legal or operational changes.