This Privacy Policy explains how AREDO s.r.o. (hereinafter the "controller") processes your personal data when you use the website https://www.torkemotor.eu and during business cooperation with you. Processing is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), the Slovak Act No. 18/2018 Coll. on personal data protection and Act No. 351/2011 Coll. on electronic communications, applicable to the controller as a Slovak company.
1. Controller
The controller of personal data is:
- AREDO s.r.o.
- Registered office: Radlinského 29, 052 01 Spišská Nová Ves, Slovak Republic
- Company ID (IČO): 50974513
- Tax ID (DIČ): 2120544305
- EU VAT ID: SK2120544305
- Registered in the Commercial Register of the City Court Bratislava III, Section Sro, File No. 141492/B
- Email: info@torkemotor.eu
The controller has not appointed a Data Protection Officer (DPO), as this does not arise from any legal obligation. For questions regarding personal data protection, please contact us at info@torkemotor.eu.
2. What personal data we process
We process the following categories of data:
Identification and contact data (when you place an order, send an enquiry or communicate with us):
- First and last name
- Company name, company / business registration number, tax ID, EU VAT ID
- Billing and delivery address
- Email address
- Phone number
Vehicle data (when sending a quote request through the form):
- Vehicle VIN number
- Engine code, engine type, requested parts
- Attachments uploaded by the customer (registration document, photos, documents) - if attached
- Free text in the note
Transaction data (in case of purchase):
- Order and invoice data
- Payment data (account number, amount, date)
Technical data (automatically collected when visiting the website):
- IP address
- Browser and operating system type (User-Agent)
- The page you came from (Referrer)
- Time and duration of the visit
3. Purposes and legal bases of processing
We process your personal data for the following purposes and on the following legal bases:
- Order processing and delivery of goods - legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- Issuing and archiving invoices - legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR; Slovak Act No. 431/2002 Coll. on accounting, Act No. 222/2004 Coll. on VAT).
- Processing of a quote request sent through the form (including VIN, engine code, photos and other attachments) - legal basis: pre-contractual measures and the controller's legitimate interest in communicating with a potential customer (Art. 6(1)(b) and (f) GDPR).
- Handling complaints and warranty claims - legal basis: performance of a contract and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR).
- Website security, prevention of spam and abuse - legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).
- Compliance with other legal obligations (tax, statistical, court orders) - legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
Processing based on your explicit consent (e.g. sending marketing newsletters) is not currently carried out. If such a situation arises, we will request your separate consent, which you can withdraw at any time.
4. Retention period
We keep personal data only for the period necessary to fulfil the purpose for which it is processed:
- Invoices and accounting documents - 10 years (Slovak Act No. 431/2002 Coll. on accounting, § 35).
- Order data and related communication - for the duration of the contract + 4 years after its termination (limitation period under § 397 of the Slovak Commercial Code).
- Quote requests without a placed order - 6 months from the last contact, after which the data is erased or anonymised.
- Complaint and warranty data - for the duration of the warranty (12 months) + 4 years.
- Website technical logs (IP address, access logs) - at most 12 months, used for security and diagnostics.
5. Recipients of personal data
Your personal data is processed primarily by the controller AREDO s.r.o. within its own systems (including its internal billing and lead-management system). Data may be made available to the following categories of recipients only to the extent necessary to fulfil the purpose:
- Web hosting and email service providers (within the EU)
- External accounting company (when keeping the books, where relevant)
- Courier and shipping companies (for the delivery of goods - name, address, phone only)
- Bank and payment service providers (when processing payments)
- State authorities and authorised public bodies (Tax Office, court, police) - only on the basis of a legal obligation
- Providers of analytics and advertising services (Google – Google Analytics, Google Ads; Meta Platforms – Facebook/Instagram) – only with your consent via cookies
We do not sell your data or trade in it. Sharing with the analytics and advertising providers listed above (Google, Meta) takes place solely on the basis of your consent given via the cookie banner, which you can withdraw at any time.
6. Cross-border data transfers
We process your personal data primarily within the territory of the Slovak Republic and within the European Economic Area (EEA). We do not transfer personal data outside the EEA.
7. Your rights
In connection with the processing of personal data, you have the following rights under the GDPR:
- Right of access (Art. 15 GDPR) - you may request information about what data we process about you and obtain a copy of it.
- Right to rectification (Art. 16 GDPR) - if your data is inaccurate or incomplete.
- Right to erasure (Art. 17 GDPR) - "right to be forgotten". This right has limitations - data necessary to comply with legal obligations (e.g. invoices) must be retained even against your wishes.
- Right to restriction of processing (Art. 18 GDPR).
- Right to data portability (Art. 20 GDPR) - to obtain data in a structured, machine-readable format.
- Right to object (Art. 21 GDPR) - against processing based on legitimate interest.
- Right to withdraw consent (Art. 7(3) GDPR) - if processing is based on consent. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.
- Right not to be subject to automated decision-making (Art. 22 GDPR). The controller does not carry out automated decision-making or profiling of data subjects.
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR):
- You may lodge a complaint with the supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.
- The lead supervisory authority for the controller is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava 27, Slovakia - dataprotection.gov.sk.
You can exercise your rights by email at info@torkemotor.eu or by post to the address of the controller's registered office. We will handle your request without undue delay, and no later than 30 days from its receipt.
8. Cookies and similar technologies
Necessary (technical) cookies ensure the basic functioning of the website, remembering your language, security and storing your consent — they are required for operation and do not need your consent. We activate the other categories only with your explicit consent via the cookie banner.
With your consent we use the following cookie categories:
- Functional cookies — enhanced features and remembering your settings (e.g. a started form).
- Analytics cookies — Google Analytics 4 (via Google Tag Manager) for anonymized traffic measurement and website improvement.
- Personalization cookies — tailoring the displayed ads and offers to your interests.
- Marketing cookies — Google Ads and Meta Pixel (Facebook/Instagram) for conversion measurement, remarketing and showing relevant ads.
We manage consent via Google Consent Mode v2 — until it is granted, analytics, personalization and marketing cookies are blocked. You can change or withdraw your choice at any time via the cookie management link in the website footer, or adjust cookies in your browser settings. If technical cookies are disabled, the website may not work correctly.
9. Protection against spam (Cloudflare Turnstile)
To protect the contact form against automated spam, we use the Cloudflare Turnstile service provided by Cloudflare, Inc. When the form is opened and submitted, Cloudflare may process technical data from your browser (IP address, browser headers and a small amount of cookies without identifiers) for the purpose of verifying whether the form was filled in by a human or an automated bot.
Legal basis: legitimate interest of the controller under Article 6(1)(f) GDPR - protecting the website from abuse and spam attacks.
Cloudflare acts as an independent processor. More information can be found in the Cloudflare Privacy Policy, which also contains Turnstile-specific provisions.
To pre-fill the international phone-number country code in the contact form, we additionally use a one-time IP geolocation request to the third-party service ipapi.co (operated by Kloudend, Inc.). Only your public IP address is processed in order to return a country code; the result is used solely for the form's user-interface default and is not stored. Legal basis: legitimate interest of the controller under Article 6(1)(f) GDPR - improving the form's usability for visitors from various countries. You can override the suggested country at any time in the dropdown. Details: ipapi.co Privacy Policy.
10. Data security
The controller has implemented appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. Communication with the website takes place over the encrypted HTTPS protocol. Access to data is granted only to authorised persons bound by confidentiality.
However, no measure provides absolute certainty - therefore we cannot guarantee the security of data you send to us through unsecured channels (e.g. unencrypted email).
11. Changes to this policy
The controller reserves the right to modify this Privacy Policy at any time. The amended policy takes effect on the day of its publication on the website. We will inform you appropriately about material changes that affect the processing of your data (e.g. by email or notice on the website).
12. Contact
For any questions, requests or objections regarding the protection of personal data, please contact us:
- AREDO s.r.o., Radlinského 29, 052 01 Spišská Nová Ves, Slovak Republic
- Email: info@torkemotor.eu
Policy effective from: 01.05.2026