Privacy Policy

1. Controller

The controller of personal data within the meaning of the GDPR Regulation and Act No. 18/2018 on the protection of personal data is:

2. What data we process

Depending on how you use the MazutoBox service, we process the following categories of personal data:

• Identification data: first name, last name, company name,
• Contact data: email address, phone number, postal address,
• Operational data: time and location of locker use, parcel identifier,
• Technical data: IP address, device type and browser when visiting the website.

We do not process special categories of personal data (so-called sensitive data).

3. Purpose of processing

We process personal data for the following purposes:

• providing the parcel locker service — receiving, storing and collecting parcels,
• communicating with the user in connection with a parcel (notifications, handling complaints),
• fulfilling legal obligations (e.g. accounting, archiving),
• protecting the legitimate interests of the operator (device security, fraud prevention).

4. Legal basis

We process personal data on the basis of:

• Art. 6(1)(b) GDPR — performance of a contract (provision of the parcel locker service),
• Art. 6(1)(c) GDPR — compliance with a legal obligation (e.g. tax and accounting regulations),
• Art. 6(1)(f) GDPR — legitimate interests of the operator (security and damage prevention).

5. Retention period

We retain personal data only for the period necessary to fulfil the purpose for which they were collected:

• Operational records of locker use: 12 months from the end of the transaction,
• Accounting and invoicing documents: 10 years under accounting legislation,
• Correspondence and complaints: 3 years from resolution,
• Technical website logs: 90 days.

After the retention period expires, data are securely deleted or anonymised.

6. Your rights

In connection with the processing of personal data, you have the following rights:

• Right of access — you may request information about what data we process about you,
• Right to rectification — you may request correction of inaccurate or incomplete data,
• Right to erasure — you may request deletion of data if the reason for processing has ceased,
• Right to restriction of processing — you may request temporary restriction of processing,
• Right to data portability — you may request that your data be provided in a machine-readable format,
• Right to object — you may object to processing based on legitimate interests,
• Right to lodge a complaint — you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

You may exercise your rights by email at info@mazutobox.com or in writing to the company's registered address. We will respond to your request within 30 days.

7. Contact

The operator is not legally required to appoint a Data Protection Officer (DPO). If you have any questions regarding the protection of personal data, please contact us at info@mazutobox.com.

Last updated: April 2025