Privacy Protection Notice

Privacy Policy (Data Protection Notice)

Effective Date: March 16, 2026

Content of the Data Protection Notice

This Data Protection Notice (“Notice”) aims to transparently inform you about the personal data we collect when you use the website https://sidronautika.com – particularly during browsing, registration, and purchases – as well as when using the services provided by Sidro Nautika, the purposes and legal basis for processing such data, and how we ensure their security.

Sidro Nautika is committed to protecting your personal data and handling it confidentially.

This Notice details:

• the purpose and legal basis of data processing,
• the details and contact information of the data controller,
• the types of personal data processed,
• the method and duration of data processing,
• measures to ensure data security,
• your data protection rights and how to exercise them.

1. Purpose, Compliance, and Legal Basis of Data Processing

The purpose of this Notice is to establish the lawful framework for the use of registries/databases maintained by Sidro Nautika s.r.o. (hereinafter: “Data Controller”), ensure compliance with constitutional principles of data protection, the right to informational self-determination, and data security requirements, as well as enable individuals to control their data, understand the circumstances of its processing, and prevent unauthorized access, alteration, or disclosure of data. The Data Controller undertakes to comply with this Notice. Acceptance of this Notice is a prerequisite for contacting the Data Controller and using the services. The Data Controller takes all technical and organizational measures to ensure personal data is handled in accordance with GDPR (EU) 2016/679.

1. Scope of the Notice

This Notice applies to the Data Controller, to natural persons whose data are processed, and to those affected by the processing. The material scope covers all data processing on the website.

1. Legal Basis for Data Processing

Processing occurs only if:

• The data subject has given consent (GDPR Art. 6(1)(a));
• Processing is necessary for contract performance (GDPR Art. 6(1)(b));
• Processing is necessary for compliance with a legal obligation (GDPR Art. 6(1)(c));
• Processing is necessary for vital interests (GDPR Art. 6(1)(d));
• Processing is necessary for legitimate interests (GDPR Art. 6(1)(f)).

1. Data Protection at Places of Performance

The place of performance may be Slovakia, Hungary, or Croatia. Data protection rules of the place of performance apply supplementarily, but the primary framework is the GDPR. Hungarian customers may contact NAIH, Croatian customers may contact AZOP.

2. Duration of Data Processing by Purpose

The Data Controller processes personal data for different durations based on the specific processing purpose, in accordance with applicable laws:

• Newsletter: Processed until you unsubscribe or request deletion.
• Blacklist (Suppression List): Processed indefinitely to avoid marketing communications, unless the data subject requests deletion.
• Cookies: Processed until the purpose is achieved or until you object. For consent-based cookies, until the expiry or deletion request.
• Registration, Courses, Yacht Charter: Retained for 5 years after service completion (statute of limitations).
• Invoicing: Retained for 8 years under accounting regulations.
• Messages: Stored for a maximum of 13 months, or 5 years in case of legal claims.
• Social Media: Duration determined by platform policies.
• Complaint Handling: Stored for 5 years; entries in the "Customer Book" for 2 years.

3. Data Controller Details and Contact Information

• Company Name: Sidro Nautika s.r.o.
• Registered Address: Petőfiho 3125, Štúrovo 94301, Slovakia
• Company Registration No.: 55 614 132
• Tax ID: 2122042615
• Phone: +36 20 250 9297
• E-mail: hello@sidronautika.com
• Website: https://sidronautika.com/
• Primary Supervisory Authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava, Slovakia

4. Acceptance of the Privacy Policy

By using the website or our services, you confirm you have read and understood this Notice and give your explicit consent to data processing.

5. Data Processors

The Data Controller engages only data processors that provide sufficient guarantees to comply with GDPR.

• Hosting: Websupport Magyarország Kft. (websupport.hu)
• Additional: Google LLC, MailChimp, MailerLite UAB, Facebook Ireland Ltd., TikTok Inc.

6. Website Browsing and Use of Cookies

Processing technical/personal data for site operation and statistics based on GDPR and Act XLVIII of 2008.

6.1 Scope of Data Handled

IP address, MAC address, session data, browser type, actions, visit source, social media activity.

6.2 Legal Basis

Legitimate interest (GDPR Art. 6(1)(f)) or consent (GDPR Art. 6(1)(a)).

7. Newsletters and Direct Marketing

Voluntary subscription, managed via MailerLite/MailChimp. Revocation via hello@sidronautika.com or unsubscribe link.

8. Data Security Measures

Technical/organizational measures protecting against unauthorized access/modification. Stored on secure servers and at the Data Controller’s premises.

9. Blacklist Management

Unsubscribed users kept on a blacklist to avoid marketing communications. Legal basis: Act CXIX of 1995 and Act XLVIII of 2008.

10. Rights of Data Subjects

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent according to GDPR.

11. Legal Basis for Processing

GDPR, Infotv., Grt., DM law, E-commerce law.

12. Data Protection Contact

Questions to: hello@sidronautika.com.

13. Governing Law and Provisions

Slovak law is governing, with GDPR and customer's local regulations applicable.

14. Procedures for Exercising Data Subject Rights

Requests processed within one month, extendable by two months. Free of charge unless unfounded/excessive.

15. Legal Remedies

• Complaint filing: Slovakia: Úrad na ochranu osobných údajov SR; Hungary: NAIH; Croatia: AZOP.
• Legal Action: Before the court of residence or seat.
• Compensation: Claims for damages if processing is unlawful.

16. Data Processing in the Application

During the use of the Sidro Nautika mobile application:

• Push Notifications: System manages a unique identifier (Token). Purpose: Informing the User about updates, exams, and offers. Legal basis: User consent (revocable in settings).
• Location Services: With User consent, app accesses GPS for local functions (charter availability, port info, events). Data not stored long-term and not sold. Legal basis: User consent.
• Technical Data/Statistics: Automatic collection (device model, IP, usage stats) for user experience and performance. Legal basis: Legitimate interest (GDPR Art. 6(1)(f)).
• Data Security: Data transmitted/stored via encrypted connections. Third parties receive only anonymized, statistical data.

17. Closing Declaration

The protection of your data is of paramount importance to us. For any questions, please contact us at hello@sidronautika.com.

Date: Štúrovo, March 16, 2026