Privacy Notice

Effective date: 8 October 2026

Contents of the Privacy Notice

The purpose of this Privacy Notice (the “Notice”) is to inform you transparently about the personal data we collect when you use the https://sidronautika.com website – in particular when browsing, registering or making purchases – or use services provided by Sidro Nautika, the purposes and legal bases of processing, and how we protect your data.

Sidro Nautika is committed to protecting your personal data and treating it confidentially.

This Notice explains in detail:

• the purposes and legal bases of processing,
• the identity and contact details of the controller,
• the categories of personal data we process,
• how long and in what manner data are processed,
• our measures to ensure data security,
• and your data protection rights and how you may exercise them.

1. Purposes, compliance and legal bases of data processing

This Notice aims to define the lawful use of the records and databases maintained by Sidro Nautika s.r.o. (hereinafter the “Controller”), ensure observance of the constitutional principles of data protection, the right to informational self-determination and data security requirements, and enable individuals to control their personal data within the limits of the law, understand how those data are processed, and prevent unauthorized access, alteration and disclosure.

The Controller undertakes to comply with this Notice. We make this Notice available when you contact the Controller or use its services. The Controller takes appropriate technical and organizational measures to handle its partners’ personal data securely and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

1.1 Personal and material scope

This Notice applies to the Controller and to natural persons whose data are included in the processing activities covered by this Notice, as well as persons whose rights or legitimate interests are affected. Its material scope extends to all processing connected with activities and services on the website.

1.2 Legal bases for processing

The Controller processes personal data only in the following cases:

• the data subject has consented to processing for one or more specific purposes (Article 6(1)(a) GDPR),
• processing is necessary for the performance of a contract to which the data subject is a party (Article 6(1)(b) GDPR),
• processing is necessary for compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) GDPR),
• processing is necessary to protect the vital interests of the data subject or another natural person (Article 6(1)(d) GDPR),
• processing is necessary for the legitimate interests pursued by the Controller or a third party (Article 6(1)(f) GDPR).

1.3 Data protection at places of performance

The services may be performed in Slovakia, Hungary or Croatia. Data protection rules of the country of performance may apply additionally, while the GDPR remains the primary framework. Hungarian customers may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), and Croatian customers with the Croatian Personal Data Protection Agency (AZOP).

1.4 Recordings at events

Photos, audio and video recordings may be made at Sidro Nautika events for documentation and marketing purposes and may be published on the website and social media platforms. We use such recordings on an appropriate legal basis under the GDPR and with due regard for the rights of the persons concerned.

2. Retention periods by purpose

The Controller processes personal data for different periods depending on the relevant purpose, in accordance with the applicable laws and the purpose of processing.

• Newsletters: We process the data until you unsubscribe from the newsletter or request deletion of your data.
• Suppression list: We process the necessary data of persons who object to marketing communications for as long as reasonably needed to prevent further contact, subject to regular review.
• Cookies: Processing continues until its purpose is fulfilled or you object. For cookies based on consent, processing continues until the cookie expires or a request for deletion is made.
• Registration, courses and yacht charter: We retain data for the period necessary to provide the service, settle accounts and handle any legal claims, taking into consideration the applicable limitation periods.
• Invoicing: We retain invoices and accounting documents for the period prescribed by the applicable accounting and tax laws.
• Messages: Incoming messages are retained for up to 13 months, or for 5 years in the event of a legal claim.
• Social media: Retention periods are determined by the policies of the relevant platform.
• Complaints: We retain complaint-handling data for 5 years and entries in the customer complaints book for 2 years.

3. Controller details and contact information

• Company name: Sidro Nautika s.r.o.
• Registered office: Petőfiho 3125, Štúrovo 94301, Slovakia
• Company registration number: 55 614 132
• Tax identification number: 2122042615
• Telephone: +36 20 250 9297
• Email: hello@sidronautika.com
• Website: https://sidronautika.com/
• Primary supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava, Slovakia

4. Acknowledgement of the Privacy Notice

When registering on the Sidro Nautika website, you confirm that you have familiarized yourself with this Privacy Notice. Personal data are processed on the appropriate legal basis under the GDPR. Where separate consent is required for processing, the Controller requests it separately.

5. Data processors

The Controller uses only data processors that provide appropriate guarantees of compliance with the GDPR. Details of the hosting provider:

• Name: Websupport Magyarország Kft.
• Registered office: 1119 Budapest, Fehérvári út 97-99.
• Company registration number: 01-09-381419
• Tax identification number: 25138205-2-43
• Telephone: +36 22 78 76 74
• Email: support@websupport.hu
• Website: websupport.hu
• Privacy notice: https://www.websupport.hu/adatvedelem/

Other data processors:

• Google LLC (https://policies.google.com/privacy)
• MailChimp, The Rocket Science Group, LLC
• MailerLite UAB (https://www.mailerlite.com/legal/privacy-policy)
• Facebook Ireland Ltd. (https://www.facebook.com/about/privacy/update)
• TikTok Inc. (https://www.tiktok.com/legal/page/us/privacy-policy/en)

6. Browsing the website and the use of cookies

When you browse the website, we process technical data and, in certain cases, personal data to ensure the website operates properly, improve user experience, personalize content and collect data for statistical and analytical purposes. Cookies are used in accordance with the GDPR and Hungarian Act XLVIII of 2008.

6.1 Categories of data processed

• IP address
• MAC address for mobile devices
• Start, end and duration of visit
• Type of browser and operating system used
• Actions performed while browsing
• Source of the visit
• Social media activity (e.g. comments, likes)

6.2 Legal basis for processing

Data are processed on the basis of legitimate interests (Article 6(1)(f) GDPR) or consent (Article 6(1)(a) GDPR).

7. Newsletters and direct marketing

Sidro Nautika offers newsletter subscriptions, which are voluntary and may be withdrawn. We use MailerLite and MailChimp to send newsletters. Consent may be withdrawn by emailing hello@sidronautika.com or using the unsubscribe link in a newsletter.

Sidro Nautika may also send offers for its own similar services to existing customers using electronic contact details provided during the customer relationship, where permitted by applicable law. Customers may object to marketing messages or unsubscribe easily and free of charge when their details are collected and in each such message.

8. Measures to ensure data security

The Controller ensures data security and uses technical and organizational measures to protect data against unauthorized access, alteration or deletion. Data are stored on servers of Websupport Magyarország Kft. and in a secure location at the Controller’s registered office.

9. Processing for suppression lists

We keep the necessary data of persons who unsubscribe or object to marketing messages on a suppression list to prevent further marketing contact. The legal basis is the legitimate interest referred to in Article 6(1)(f) GDPR, taking account of the right to object under Article 21 GDPR.

10. Rights of data subjects and how to exercise them

Under the GDPR, data subjects have rights of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent.

11. Legal framework for data processing

• Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
• Directive 2002/58/EC of the European Parliament and of the Council (ePrivacy Directive), and applicable national provisions implementing it.
• Other applicable data protection legislation of Member States.

12. Data protection contact

For questions, contact us at hello@sidronautika.com.

13. Applicable law and other provisions

This Notice is governed by Slovak law; the GDPR and the data protection rules applicable in the customer's country of residence also apply.

14. Procedure for safeguarding data subject rights

We process requests within one month; this period may be extended by two months if necessary. Information is provided free of charge, except in the case of manifestly unfounded or excessive requests.

15. Remedies

• Lodging a complaint:

–  Slovakia: Úrad na ochranu osobných údajov SR, www.dataprotection.gov.sk

–  Hungary: NAIH, www.naih.hu

–  Croatia: AZOP, www.azop.hr

• Court proceedings: Before the courts of the customer's place of residence or the registered office of Sidro Nautika.
• Compensation: Compensation may be claimed for unlawful data processing.

16. Processing of data in the mobile application

When using the Sidro Nautika mobile application, the following processing activities take place to ensure user experience and provide the service:

• Notifications (Push Notifications): To send notifications, the system processes a unique device identifier (token). Processing is intended to inform users about course updates, examination dates and exclusive offers. Legal basis: User consent, which may be withdrawn at any time in the application settings.
• Location data: With the user's consent, the application may access the device's geographical location data (GPS) when the user uses location-based features (e.g. nearby yacht charter options, marina information, nearby events). The Service Provider does not store location data in the long term; it uses them solely to deliver the requested functions and does not sell them to third parties. Legal basis: User consent.
• Technical data and statistics: The application may automatically collect data (e.g. device model, IP address, application usage statistics) to improve user experience and ensure error-free operation. Legal basis: The Service Provider's legitimate interest in ensuring service quality (Article 6(1)(f) GDPR).
• Data security: Data entered into the application are transmitted and stored over an encrypted connection. Only anonymized data for statistical purposes are transmitted to third parties (e.g. Google, Apple), where necessary for the operation of the application

17. Closing statement

Protecting your data is of utmost importance to us. Please contact us with any questions at hello@sidronautika.com.

Issued in Štúrovo on 8 October 2026.