Effective from: the launch date of this version of the website (October 2026)
This policy explains what personal data we process when you visit benab.sk, send us an inquiry, write a review or contact us, for what purpose and how long we keep it, who we share it with and what rights you have.
You cannot buy anything on benab.sk. You buy products from our retailers (in their online stores or shops), linked via “Where to buy”. When you go to a retailer’s website, your data is processed by the retailer under its own policy – we have no access to it.
1. Who is the controller
BENAB TRADE, spol. s r. o.
Slavkovská 2019/73, 060 01 Kežmarok, Slovak Republic
Company ID (IČO): 36515477, VAT ID: SK 2022159348
registered in the Commercial Register of the Prešov District Court, section: s.r.o., file no.: 17260/P
Contact for personal data questions: [email protected], phone +421 52 452 2006, or by post to our registered address.
We have not appointed a data protection officer (DPO) because the law does not require it for the scope of our processing. Please direct all questions to the contact above.
2. What we use data for, on what legal basis and for how long
2.1 Business inquiry (B2B form)
The form on the pages for hotels, healthcare and other facilities.
- Data: full name, company name, email, phone, message text, optionally an attachment you upload yourself; technically also the date and time of submission.
- Purpose: to respond to your inquiry, prepare a quote and agree on business terms.
- Legal basis: taking steps prior to entering into a contract at your request; if you write to us as an employee or representative of a company, our legitimate interest in responding to a business inquiry from the company you represent.
- Is providing data mandatory? No. However, without an email or phone number we cannot reply to you.
- Retention period: we keep the inquiry and attachment for 24 months from the last communication, if no contract results from it. If a contract is concluded, we keep them for the duration of the business relationship and then to the extent and for the period required by accounting and tax regulations.
- Who receives the data: our sales department and the suppliers listed in section 3.
2.2 Communication by email and phone
When you write to us or call the contacts listed on the website (showroom, info line, complaints, sales department).
- Data: name, contact details and the content of the message or call that you provide to us.
- Purpose: to handle your question or request.
- Legal basis: our legitimate interest in answering questions from customers and partners; where a contract you are concluding or have with us is concerned, taking steps prior to entering into a contract or performance of the contract.
- Retention period: 24 months from resolving the request, unless we need them longer to establish or defend legal claims.
2.3 Product reviews
- Data: name or nickname, email, rating and review text, date; technically also the IP address and browser information that WordPress stores with every post to protect against abuse.
- What is public: name or nickname, rating, text and date. Neither the email nor the IP address is published.
- Purpose: to publish your experience with the product for other visitors and to protect reviews from spam.
- Legal basis: your consent, which you give by submitting the review. You can withdraw your consent at any time (section 5) and we will remove the review.
- Retention period: while the review is published, at the latest until consent is withdrawn or the product is discontinued.
- Review verification: We do not make reviews conditional on a purchase and do not verify whether the author bought the product. We do not publish reviews containing advertising, insults or content unrelated to the product.
2.5 Traffic measurement (only with consent)
- Data: a browser identifier stored in a cookie, pages visited, time and source of the visit, device and browser type, approximate location derived from the IP address. Google Analytics 4 does not store the full IP address.
- Purpose: to find out how the website is used, improve it and evaluate the effectiveness of our promotion.
- Tools: Google Tag Manager and Google Analytics 4, managed for us by the agency Birne Studio.
- Legal basis: your consent given in the cookie banner. Without consent, these tools do not run.
- Retention period: data in Google Analytics for a maximum of 14 months; cookies according to the Cookie Policy.
2.6 Marketing tools (only with consent)
We run advertising tools (for example, conversion tracking for ad campaigns) only with consent in the “marketing” category of the cookie banner. The current list of these tools and their cookies is always in the Cookie Policy.
2.7 Form spam protection (Cloudflare Turnstile)
- Data: IP address, technical data about the browser and device, and data about interaction with the page needed to distinguish a human from an automated program.
- Purpose: to protect forms from spam and abuse.
- Legal basis: our legitimate interest in website security and protecting forms from abuse.
- Retention period: the data is evaluated by Cloudflare when the form is submitted; we do not store it. Its retention by Cloudflare is governed by Cloudflare’s terms.
2.8 Website operation and security
- Data: IP address, date and time of the request, requested address, browser information (server and Cloudflare network logs).
- Purpose: to deliver the website to you, protect it from attacks and fix technical errors.
- Legal basis: our legitimate interest in the secure and functional operation of the website.
- Retention period: we keep logs for a maximum of 30 days; in the event of a security incident, until it is resolved.
What we do not process
The Sleep Compass works only with your answers to questions about sleep and does not require any personal data. The website has no customer account, newsletter or purchases. We do not carry out automated decision-making or profiling with legal effects on you.
3. Who we share data with
We do not sell personal data. We share it only with suppliers who operate the website and services for us, and only to the extent they need. Those who process data on our behalf are contractually bound to protect it and use it only according to our instructions.
| Recipient | What they do for us | Role |
|---|---|---|
| Websupport s. r. o., Slovakia | website, database and mailbox hosting | processor |
| Cloudflare, Inc., USA (processing also in the EU) | website delivery, attack protection, form protection (Turnstile) | processor |
| Google Ireland Limited, Ireland (and Google LLC, USA) | Google Tag Manager, Google Analytics 4 – only with consent | processor |
| Birne Studio | management of measurement and advertising tools | processor |
| Pixeler s. r. o., Slovakia | website development and technical administration | processor |
| Google (YouTube) | playback of embedded videos – only with consent | independent controller |
We may also provide data to public authorities if required by law.
4. Transfers of data outside the European Union
Some of our suppliers (Cloudflare, Google) are companies based in the USA or may access data from the USA. Transfers are based on the European Commission’s adequacy decision for companies participating in the EU-U.S. Data Privacy Framework and, where this cannot be relied on, on standard contractual clauses approved by the European Commission. We will provide information about the safeguards on request.
5. Your rights
You have the right:
- of access – to find out whether and what data we process about you and to receive a copy,
- to rectification of inaccurate or incomplete data,
- to erasure, if we no longer need the data, you have withdrawn your consent or we are processing it unlawfully,
- to restriction of processing, for example while we verify the accuracy of the data,
- to portability of data you provided to us on the basis of consent or a contract, in a commonly used machine-readable format,
- to object to processing based on our legitimate interest (sections 2.1, 2.2, 2.7 and 2.8); we will stop processing unless we demonstrate compelling legitimate grounds,
- to withdraw consent at any time, as easily as you gave it; consent to cookies via the “Cookie settings” link in the footer, consent to a review by email to [email protected]. Withdrawal does not affect the lawfulness of processing before the withdrawal.
Send your request to [email protected] or by post to our registered address. We will handle it without undue delay.
Lodging a complaint
If you believe we are handling your data in breach of the law, you can lodge a complaint with the supervisory authority:
Office for Personal Data Protection of the Slovak Republic
Galvaniho 7/B, 821 04 Bratislava
www.dataprotection.gov.sk
6. Cookies
How we use cookies and similar technologies is described in the separate Cookie Policy. You can change or withdraw your consent to analytics and marketing cookies at any time via the link Cookie settings in the footer of every page.
7. How we protect data
The website runs over a secure connection (HTTPS), only authorized persons have access to the administration, and suppliers are contractually bound to confidentiality and data protection.
8. Changes to this policy
We may update this policy, for example when we add a new service. The current version is always on this page with its effective date. If we wanted to use data for a purpose other than those listed above, we will inform you in advance.