Privacy Polic
The protection of the personal data you entrust to us is important, and we do everything to ensure you feel safe with us. The purpose of these Personal Data Processing Terms is to explain how your personal data, which you provide when using our website https://www.luxoriumcars.com/ (hereinafter the “Website”), will be processed and protected. We would also like to inform you of your rights in connection with the processing of your personal data.
These Terms inform you about the general rules of personal data processing when using the Website and social media Accounts.
1. Definitions
1.1. Controller or DDMJ4 s. r. o., Lermontovova 911/3, 811 05, Bratislava, Slovakia
1.2. Personal Data – information about a natural person who is identified or identifiable through one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, location data, an online identifier, and information collected via cookies and other similar technologies.
1.3. Policy – this Privacy Policy, which contains information on the processing of Personal Data on the Website.
1.4. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
1.5. Website – websites managed by the Controller under the domain https://www.luxoriumcars.com/, accessible via web browsers.
1.6. User – any natural person visiting the Website or using one or more of the services or features described in the Policy.
1.7. Device – an electronic device through which the User accesses the Website.
2. General Information
2.1. In connection with your use of the Website, we collect data necessary to provide the services offered as well as information about your activity on the Website. In this regard, we are the controller of your personal data and place great emphasis on their adequate protection. We ensure that our data processing processes comply with applicable legal provisions, in particular the GDPR. Our goal is to enable you to obtain complete information about how we process your Personal Data and to provide you with tools that allow you to exercise your rights. Below we provide information on how we process your Personal Data.
2.2. We process your personal data in accordance with the law and ensure that they are up to date and accurate. From time to time, we may therefore remind you to update them by sending a message to the email address you have provided or by displaying a relevant message on the Website after logging into your account.
3. How can I contact the Controller?
3.1. If you have any questions regarding how we process your personal data, or if you wish to exercise your rights, write directly to our Data Protection Officer at: info@luxoriumcar.sk or at Lermontovova 911/3, 811 05, Bratislava, or use the contact form via the link: https://www.luxoriumcars.com/.
4. How do we obtain your personal data?
4.1. We obtain your Personal Data directly from you for the purpose of properly providing our services and ensuring the smooth operation of our Website. You provide your data to us primarily through dedicated forms when contacting us, e.g., via the contact form at: https://www.luxoriumcars.com/.
5. Is providing personal data mandatory?
5.1. It is entirely up to you whether and what personal data you provide to us—it is not mandatory. However, please remember that in some cases providing Personal Data is necessary for the proper provision of the services we offer or is a condition for concluding and performing a contract, as detailed below.
6. How do we process your personal data?
Use of the Website
6.1. If you use the Website, we process your Personal Data (including IP address or other identifiers and information collected via cookies or other similar technologies):
6.1.1. for the purpose of providing electronic services to deliver to you content made available on the Website—the legal basis for processing is the necessity of processing for the performance of a contract (Article 6(1)(b) GDPR);
6.1.2. for analytical and statistical purposes—the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR), consisting of conducting analyses of Users’ activity and preferences in order to improve the functions used and the services provided;
6.1.3. for the purpose of possible establishment, exercise, and defense of claims—the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR), consisting of protecting its rights and business interests;
6.1.4. for the marketing purposes of the Controller and other entities, particularly related to the presentation of behavioral advertising—the rules for processing Personal Data for marketing purposes are described in the MARKETING section.
6.2. Your activity on the Website, including your personal data, is recorded in system logs (a special computer program used to store a chronological overview containing information about events and activities related to the information system used to provide our services). The information collected in the logs is processed primarily for the purpose of providing services. We process it for technical and administrative purposes, to ensure the security of the information system and system management, as well as for analytical and statistical purposes—in this respect, the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR).
Placing Orders
6.7. Placing orders for goods or services we offer involves processing your Personal Data. Providing data marked as mandatory is required to accept and fulfill the order, and failure to provide such data will result in the order not being processed. Providing additional data is voluntary.
6.8. Your Personal Data is processed:
6.8.1. for the purpose of fulfilling the order placed—the legal basis for processing is the necessity for the performance of a contract (Article 6(1)(b) GDPR); for the scope of optional data—the legal basis for processing is your consent (Article 6(1)(a) GDPR);
6.8.2. for the purpose of fulfilling the Controller’s legal obligations, arising in particular from tax and accounting regulations—the legal basis for processing is a legal obligation (Article 6(1)(c) GDPR);
6.8.3. for analytical and statistical purposes—the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR), consisting of conducting analyses of Users’ activity on the Website and Users’ purchasing preferences in order to improve the functions used;
6.8.4. for the purpose of possible establishment, exercise, and defense of claims—the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR), consisting of protecting its rights and business interests.
Complaints and Returns
6.9. Submitting a complaint or returning goods involves the processing of your Personal Data. Providing data in the complaint form is not mandatory, but it is necessary to properly handle the complaint. Providing data in the return form is not mandatory, but it is necessary for an effective withdrawal from the contract.
6.10. Your Personal Data is processed:
6.10.1. for the purpose of handling a submitted complaint—the legal basis for processing your personal data is the Controller’s obligation arising from the provisions of the law on warranty for defects in sold goods (Article 6(1)(c) GDPR);
6.10.2. for the purpose of fulfilling other legal obligations imposed on the Controller, arising in particular from tax and accounting regulations—the legal basis for processing is a legal obligation (Article 6(1)(c) GDPR);
6.10.3. for analytical and statistical purposes—the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR), consisting of conducting analyses of Users’ activity on the Website and Users’ purchasing preferences in order to improve the functions used;
6.10.4. for the purpose of possible establishment, exercise, and defense of claims—the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR), consisting of protecting its rights and business interests.
Contact Form
6.11. We offer the option to contact us via a contact form. Using the form requires providing Personal Data necessary for us to contact you and answer your inquiry. Providing data marked as mandatory is necessary to accept and handle the inquiry, and if you do not do so, it will not be possible to process the inquiry. Providing other data (e.g., in the content of the inquiry) is voluntary.
6.12. Your Personal Data is processed:
6.12.1. for the purpose of identifying and handling your inquiry sent via the provided form—the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR), consisting of the need to resolve the reported case and conduct correspondence addressed to it in connection with its business activities;
6.12.2. for analytical and statistical purposes—the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR), consisting of keeping statistics of inquiries submitted by Users via the Website to improve its functionality.
Fraud Prevention
6.13.1. In order to ensure the proper functioning of our website, we verify whether users are not engaging in activities that prevent other customers from making purchases, particularly by placing excessive and unusual orders indicating that they do not intend to keep the ordered products, or by declaring that they are purchasing as consumers and subsequently reselling the goods as entrepreneurs. This analysis is performed based on your transaction history. By analyzing the history of your orders, payments made, and returns, our algorithm evaluates whether it is necessary to block or delete your account to prevent misuse. Decisions to block or delete your account are based solely on automated processing and are necessary for the performance of the contract concluded with you (Article 22(2)(a) GDPR). You have the right to express your own position and contest such a decision and to request that our staff re-examine your data. In such a case, please contact us as indicated in section 3.
7. Marketing
7.1. We process your Personal Data for the purpose of carrying out marketing activities, which may consist of:
7.1.1. displaying marketing content corresponding to your interests (behavioral advertising);
7.1.2. conducting activities related to direct marketing of goods and services (sending commercial information by electronic means and telemarketing activities).
7.2. For the purpose of implementing marketing activities, we sometimes use profiling. This means that through automated processing of data we evaluate selected factors relating to you in order to analyze your behavior or to create a forecast for the future. This enables better tailoring of displayed content to your individual preferences and interests.
Behavioral Advertising
7.3. Together with our trusted partners, we process your Personal Data, including Personal Data collected through cookies and other similar technologies, for marketing purposes in connection with targeting you with behavioral advertising (i.e., advertising tailored to your preferences). The processing of personal data in such a situation also involves profiling, the consequence of which is only the display of tailored advertising based on your Personal Data obtained by us and our partners.
Direct Marketing
7.5. If consent is granted, we may use your data to send marketing content via various channels, i.e., by email (in the form of a newsletter), via MMS/SMS, or by phone. The legal basis for processing your Personal Data in this case is the Controller’s legitimate interest (Article 6(1)(f) GDPR) in connection with your consent, consisting of marketing the goods and services offered. We carry out such activities only if you have given your consent, which you can withdraw at any time. You can withdraw your consent at any time by clicking the link included in every email containing commercial information, by contacting us at info@luxoriumcar.sk, or via the contact form. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
7.6. We may also conduct direct marketing via the traditional postal address you have provided. The legal basis for processing your Personal Data in this case is the Controller’s legitimate interest (Article 6(1)(f) GDPR) consisting of marketing the goods and services offered. You may object to the processing of your Personal Data for this purpose at any time. You can express your objection by contacting us at info@luxoriumcar.sk or via the contact form.
Google Ads Customer Match
7.8. Marketing of the products and services we offer may also be carried out using Google Ads Customer Match. Google Ads Customer Match is a tool that allows the Controller to upload a hashed database of email addresses (a customer list) into Google tools in order to verify whether User accounts have been created in Google services using the same email addresses (e.g., YouTube, Gmail, others). If a match of email addresses is confirmed, advertisements of the Controller may be displayed to Google service users after logging in.
8. Processing of data of users visiting the Controller’s social media profiles
8.1. The Controller has public profiles on the social networks Facebook, Instagram, LinkedIn. In connection with this, it processes the data left by persons visiting these profiles (e.g., comments, likes, online identifiers).
8.2. Personal data of such persons is processed:
8.2.1. to enable them to engage in activities on the profiles;
8.2.2. for the effective operation of the profiles, presenting Users of the platforms with information about the Controller’s initiatives and other activities and in connection with promoting various types of events, services, and products;
8.2.3. for statistical and analytical purposes;
8.2.4. where applicable, for the purpose of pursuing claims and defending against claims.
8.3. The legal basis for processing Personal Data is the Controller’s legitimate interest (Article 6(1)(f) GDPR), consisting of:
8.3.1. promoting its own brand and improving the quality of services provided,
8.3.2. conducting analyses of activity and preferences,
8.3.3. where necessary, pursuing claims and defending against claims.
The above information does not apply to the processing of personal data by the social network platform operators.
9. To whom will we disclose your personal data?
9.1. We may disclose your Personal Data to entities with which we cooperate in the provision of the services we offer.
9.2. Depending on the delivery method you choose for purchased or returned goods, we will provide your data necessary for delivery or return of goods to one of the entities with which we cooperate at that time.
9.3. Depending on the payment method you choose for purchased goods, we will provide your data necessary to collect or process the payment to one of the entities with which we cooperate in the area of payment processing.
9.4. We are also entitled to disclose selected information about our Users to competent authorities or third parties that have requested such information, on the basis of an appropriate legal basis and in accordance with applicable legal provisions.
10. How long will we process your personal data?
10.1. The period of processing your Personal Data depends on the type of service provided and the purpose of processing. As a rule, data is processed for the duration of the service or order fulfillment, until consent is withdrawn or an effective objection to processing is raised in cases where the legal basis for processing is the Controller’s legitimate interest.
10.2. The data processing period may be extended if processing is necessary to establish and pursue any claims or to defend against claims, and after this period only to the extent required by law. After the processing period expires, the data is irreversibly deleted or anonymized in such a way that the data subject can no longer be identified.
11. How do we protect your data?
11.1. To minimize the risk of data leakage, destruction, and disintegration, we use a range of IT and organizational security measures. Security features include tools such as firewalls, antivirus and anti-spam systems, internal processes, data processing and disaster recovery procedures, as well as a multi-level backup system.
11.2. Please remember that using the Internet always carries the risk of certain security incidents. However, we assure you that thanks to implemented procedures of regular reviews and updates of IT systems and active monitoring of critical points in the system, we strive to reduce this risk as much as possible.
12. What are your rights related to the processing of your personal data?
12.1. In connection with our processing of your Personal Data, you have the following rights:
12.1.1. the right to information about the processing of Personal Data—on this basis, the Controller will provide you with information about the processing of your Personal Data, in particular the purposes and legal grounds for processing, the scope of data held, the entities to which it is disclosed, and the planned date of data deletion;
12.1.2. the right to obtain a copy of the data—on this basis, the Controller will provide you with a copy of your personal data that it processes;
12.1.3. the right to rectification—the Controller is obliged to remove any inconsistencies or errors in the processed Personal Data and to supplement them if they are incomplete;
12.1.4. the right to erasure—on this basis, you may request the deletion of data whose processing is no longer necessary to achieve any of the purposes for which it was collected;
12.1.5. the right to restriction of processing—if such a request is made, the Controller will cease to perform operations on your Personal Data—except for operations to which you have consented—and will store the data in accordance with adopted retention rules, or until the reasons for restricting data processing cease to apply (e.g., a decision by a supervisory authority authorizing further data processing);
12.1.6. the right to data portability—on this basis, to the extent that data is processed by automated means in connection with a concluded contract or consent, the Controller provides the data you have provided in a format that allows the data to be read by a computer. You can also request that this data be sent to another entity, provided that there are technical possibilities for this both on the part of the Controller and on your part;
12.1.7. the right to object to data processing for marketing purposes—you may object at any time to the processing of your Personal Data for marketing purposes without having to justify such an objection;
12.1.8. the right to object to other purposes of data processing—you may at any time—on grounds relating to your particular situation—object to the processing of your Personal Data which takes place on the basis of the Controller’s legitimate interest (e.g., for analytical or statistical purposes or for reasons related to property protection); an objection in this respect should include justification;
12.1.9. the right to withdraw consent—if information is processed on the basis of your consent, you have the right to withdraw it at any time, which does not affect the lawfulness of processing carried out before its withdrawal;
12.1.10. the right to lodge a complaint—if you believe that the processing of Personal Data violates the provisions of the GDPR or other personal data protection provisions, you may lodge a complaint with a supervisory authority for the processing of Personal Data competent for your habitual residence, place of work, or the place of the alleged infringement;
12.1.11. the right to obtain human intervention by the controller, to express your point of view, and to contest decisions based solely on automated processing—in accordance with subsection 6.14.
13. Submitting requests related to the exercise of rights
13.1. Some of the above rights you can exercise yourself.
13.2. A request concerning all the above rights can be submitted by contacting our Data Protection Officer at the following email address: info@luxoriumcar.sk or at Lermontovova 911/3, 811 05, Bratislava, or use the contact form via the link: info@luxoriumcar.sk
13.3. We will try to respond to your request as soon as possible and will answer your questions related to the processing of your data. You will receive a response within 30 days from the day we receive your request. If it turns out that due to the complexity of the request or the number of requests we have received, we are unable to provide information about the actions taken within this period, we will inform you of its extension.
13.4. If we have doubts as to whether it is you who is submitting a particular request, we may ask you several additional questions to verify your identity. Providing this data is not mandatory, but failure to provide it will result in the refusal to comply with the request. We may also need additional information to determine the exact content of your request.
13.5. A request may be submitted in person or through an authorized representative (e.g., a family member). For data protection reasons, we recommend using a power of attorney certified by a notary public or an authorized legal advisor or agent, which will speed up verification of the authenticity of the request.
13.6. If the request has been sent to us electronically, we will respond in the same form unless the applicant requests a response in another form. In other cases, the response will be provided in writing. If the time limit for processing the request does not allow a written response and the scope of data we process about the applicant allows us to contact you electronically, the response will be provided electronically.
13.7. We keep information about the request submitted and the person who submitted the request in order to ensure its execution and to enable us to establish, defend, or pursue any claims of data subjects. The register of requests is stored in a manner that ensures the integrity and confidentiality of the data contained therein.
14. Changes to the Privacy Policy
14.1. The Policy is subject to ongoing review and updated as necessary.
Effective from: 11 August 2025
