Privacy Policy
Last updated: June 2025
1. Data Controller
The controller of personal data is MerchCrate, based in Zvolen, Slovakia (hereinafter "MerchCrate" or "we"). Contact: hello@merchcrate.eu.
2. What Data We Process
When you place an order, we collect the following personal data:
- Full name
- Email address
- Phone number (optional)
- Delivery address
- Company registration number / VAT ID (for business purchases)
- Logos and artwork you provide to us
3. Purpose of Processing
We use your data exclusively for:
- Processing and delivering your order
- Communicating with you regarding your order
- Issuing invoices and fulfilling legal obligations
- Sending confirmations and visualizations
We do not sell or share your data with third parties for marketing purposes.
4. Legal Basis
Processing is necessary for the performance of a contract (Art. 6(1)(b) GDPR) and for compliance with the controller's legal obligations (Art. 6(1)(c) GDPR).
5. Retention Period
We retain data for as long as necessary to process your order, and thereafter for the period required by law (generally 5 years for tax and accounting records).
6. Cookies
This website uses cookies to improve functionality and analyze traffic. You can accept or decline them on your first visit. Cookies are not required for the core functions of the order form.
7. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Have your data erased ("right to be forgotten")
- Restrict processing
- Data portability
- Lodge a complaint with the Slovak Data Protection Authority (dataprotection.gov.sk)
To exercise your rights, contact us at hello@merchcrate.eu.