Privacy Policy

Last updated: 1 July 2026

1. Introduction

Anatomic s.r.o. processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR), Act No. 18/2018 Coll. on Personal Data Protection, and other applicable legal regulations of the Slovak Republic.

We process personal data only to the extent necessary for processing orders, communicating with customers, fulfilling our legal obligations, and ensuring the proper operation of our online store.

2. Data Controller and Contact Details

Anatomic s.r.o.
Na Stráni 122, Žilinská Lehota
010 01 Žilina
Slovak Republic

Company ID (IČO): 50457161
VAT ID: SK2120333688

E-mail: anatomic@anatomic.sk
Phone: +421 948 255 307

3. What Personal Data We Process

Depending on how you use our website, we may process the following personal data:

Registration and Online Store Purchases

• First name and surname
• Billing address
• Delivery address
• E-mail address
• Telephone number
• Order information
• Customer account login credentials

Contact Forms

• Name
• E-mail address
• Message content

We process your telephone number solely for communication related to the processing of your order and the delivery of goods through our contracted shipping providers.

Your e-mail address is never publicly displayed unless explicitly stated for a particular feature.

Where applicable, the following information may be published:

• your name or nickname,
• the content of your comment, review or rating,
• the date of publication.

4. Purpose and Legal Basis for Processing Personal Data

a) Processing Orders and Performing the Purchase Agreement

Processed data:

• First name and surname
• Billing address
• Delivery address
• E-mail address
• Telephone number
• Order information
• Payment and delivery information

Legal basis:
Article 6(1)(b) GDPR – processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract.

b) Customer Account Management

Processed data:

• First name and surname
• E-mail address
• Username
• Password (stored in a technically secured form)
• Order history
• Billing and delivery information

Legal basis:
Article 6(1)(b) GDPR – where the customer account is necessary for providing the service.

Where registration is voluntary, the legal basis may be Article 6(1)(a) GDPR (consent).

c) Issuing and Retaining Accounting and Tax Documents

Processed data:

• Identification and contact details
• Order information
• Payment details
• Invoice information

Legal basis:
Article 6(1)(c) GDPR – compliance with a legal obligation.

d) Delivery of Goods and Communication with Shipping Providers

Processed data:

• First name and surname
• Delivery address
• E-mail address
• Telephone number
• Shipment information

Legal basis:
Article 6(1)(b) GDPR – performance of a contract.

e) Handling Complaints, Returns, Withdrawal from Contract and Customer Requests

Processed data:

• Identification and contact details
• Order information
• Information relating to the claimed goods
• Communication records
• Photographs or other supporting documents provided by the customer

Legal basis:

• Article 6(1)(c) GDPR – compliance with legal obligations under consumer protection and accounting legislation;
• Article 6(1)(f) GDPR – the Controller’s legitimate interest in establishing, exercising or defending legal claims.

f) Protection of the Controller’s Legal Rights

Processed data:
Information related to contracts, orders, payments, deliveries, complaints, withdrawal from contracts, and communication with customers.

Legal basis:
Article 6(1)(f) GDPR – the Controller’s legitimate interest in establishing, exercising and defending legal claims.

g) Website and IT Security

Processed data:

• IP address
• Technical logs
• Device information
• Browser information
• Access time
• Security logs

Legal basis:
Article 6(1)(f) GDPR – the Controller’s legitimate interest in ensuring website security, preventing misuse and protecting its IT infrastructure.

h) Comments, Reviews and Ratings

We process personal data for the purpose of enabling users to publish comments, reviews and ratings, identifying the author where appropriate, protecting the website against spam, abuse and unlawful content, and moderating user-generated content.

Legal basis:

• Article 6(1)(b) GDPR – processing necessary to provide the requested commenting, review or rating functionality where the user voluntarily submits such content;
• Article 6(1)(f) GDPR – the Controller’s legitimate interest in protecting the website, preventing spam, safeguarding its reputation, ensuring the legality of published content and protecting its own rights or the rights of third parties.

The Controller’s legitimate interests include, in particular:

• ensuring the proper operation of the website;
• preventing misuse of the commenting and review system;
• preventing unlawful, offensive, misleading, promotional or spam content;
• establishing, exercising or defending legal claims.

i) Analytical and Marketing Cookies

Processed data:

• Online identifiers
• Website usage data
• Device information
• Browser information
• User preferences

Legal basis:
Article 6(1)(a) GDPR – consent.

The storage of or access to information on a user’s device is carried out in accordance with applicable electronic communications legislation and, where required, only on the basis of the user’s prior consent, except for strictly necessary cookies.

5. Recipients of Personal Data

Personal data may be disclosed to third parties only to the extent necessary for processing orders and operating our online store.

These recipients include in particular:

• shipping and logistics service providers (e.g. DPD, Raben, DSV and other contracted carriers);
• payment service providers and banks;
• hosting providers, IT support providers and website maintenance providers;
• accounting and tax service providers;
• public authorities where disclosure is required by law.

Personal data is disclosed only to the extent necessary to fulfil the relevant processing purpose.

As a rule, personal data is processed within the European Union and the European Economic Area (EEA).

Where certain services involve the transfer of personal data to a third country or access from a third country, such transfers are carried out only in accordance with the GDPR, in particular on the basis of an adequacy decision of the European Commission or appropriate safeguards such as the Standard Contractual Clauses (SCCs).

Further details regarding specific third-party services are provided in our Cookie Policy or elsewhere in this Privacy Policy.

The website uses strictly necessary cookies required for its operation.

Analytical, statistical and marketing cookies are used only on the basis of your consent where required by applicable law.

Through cookies and similar technologies, personal data such as online identifiers, IP addresses, device information, browser information and website usage data may be processed.

Detailed information about third-party services, analytics tools, marketing services and cookies is available in our Cookie Policy.

6. Data Retention Period

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or for the period required by applicable law.

Data relating to orders and purchase agreements is retained for the period necessary to perform the contract and thereafter for the period during which legal claims may be asserted.

Accounting and tax documents are retained for the period required by applicable accounting and tax legislation, generally 10 years.

Data relating to complaints, withdrawals from contracts, customer claims and requests for remedies is retained for the duration of the respective proceedings and thereafter for the period necessary to establish, exercise or defend legal claims.

Data stored in customer accounts is retained for as long as the customer account exists. Deletion of a customer account does not affect the retention of personal data that we are required or entitled to retain under another legal basis, particularly for accounting, order processing, complaint handling or the protection of legal claims.

Personal data processed on the basis of consent is retained until the consent is withdrawn or until the retention period specified at the time consent was given expires.

Personal data relating to comments, reviews and ratings is retained for as long as the relevant comment, review or rating remains published on the website. If a user requests the removal of a comment or if the Controller removes it due to a breach of the applicable rules, the related personal data may subsequently be retained for the period necessary to protect legal claims, resolve complaints, demonstrate violations of the rules or protect the website against misuse.

Technical data associated with comments, including the IP address, date and time of submission and the User Agent, is retained for the period necessary to prevent spam, security incidents and misuse of the website, generally for no longer than 12 months, unless a longer retention period is necessary for establishing, exercising or defending legal claims.

Technical and security logs are retained only for as long as necessary to ensure the security of the website and IT systems.

The retention periods applicable to cookies are specified in the separate Cookie Policy.

7. Your Rights as a Data Subject

Under the conditions laid down by the GDPR, you have the following rights:

• the right to access your personal data;
• the right to have inaccurate or incomplete personal data corrected;
• the right to erasure (“right to be forgotten”);
• the right to restriction of processing;
• the right to object to processing based on the Controller’s legitimate interests;
• the right to object to processing for direct marketing purposes;
• the right to data portability where the legal conditions are met;
• the right to withdraw your consent at any time where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal;
• the right to lodge a complaint with the competent supervisory authority.

You may exercise your rights by contacting us:

E-mail: anatomic@anatomic.sk

or by writing to the registered office of the Controller.

We will respond to your request without undue delay and, in any event, within one month of receiving it. In justified cases, this period may be extended by a further two months, in which case you will be informed of the extension and the reasons for it.

Supervisory Authority

Office for Personal Data Protection of the Slovak Republic

Galvaniho Business Centre II
Galvaniho 7/B
821 04 Bratislava
Slovak Republic

8. Content Moderation Policy

The Controller reserves the right to reasonably moderate comments, reviews and ratings published on the website.

The Controller may refuse to publish or remove any content that:

a) contains unlawful, offensive, vulgar, discriminatory, hateful or threatening material;

b) infringes the rights of third parties, including personal rights, privacy, reputation, copyright or trade secrets;

c) contains false, misleading or deceptive statements;

d) contains advertising, spam or links to competing or unrelated websites;

e) contains personal data of third parties without a valid legal basis;

f) is unrelated to the reviewed product, service or topic;

g) contains malicious code or may compromise the security or proper operation of the website.

Content moderation is carried out solely to ensure compliance with applicable laws, maintain website security and preserve the relevance and quality of published content.

The Controller does not alter the substantive meaning of comments, reviews or ratings.

If a comment, review or rating is removed, the Controller may retain the personal data necessary to document the reasons for removal and to establish, exercise or defend legal claims.

9. Provision of Personal Data

Providing personal data required for placing an order, concluding and performing a purchase agreement is a contractual requirement. Without this information, we are unable to process your order, conclude the contract or deliver the purchased goods.

Providing personal data required for issuing and retaining accounting and tax documents is a legal requirement.

Providing personal data for marketing purposes or consenting to analytical and marketing cookies is voluntary where consent is required by law. Refusing or withdrawing consent does not affect your ability to purchase goods or services through our online store.

The Controller has implemented appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or destruction.

Access to personal data is granted only to authorised persons and contractual partners to the extent necessary for the performance of their duties.

10. Cookies and Similar Technologies

This website uses cookies and similar technologies to ensure the proper functioning of the website, analyse website traffic and, where applicable, support marketing activities.

Detailed information about the cookies we use, their purposes, legal bases for processing and your consent management options is available in our separate:

Cookie Policy

published on: https://shop.anatomic.sk/en/cookie-policy/

11. Final Provisions

This Privacy Policy may be updated from time to time to reflect changes in applicable legislation or changes to the way we process personal data.

The current version is always available on the Controller’s website.

Last updated: 1 July 2026

Anatomic s.r.o.