Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
NEOMED DENTAL s. r. o.
Miletičova 21, 821 08 Bratislava – Ružinov, Slovakia
Commercial Register: Mestský súd Bratislava III, Section: Sro, Insert No.: 127889/B · Company ID (IČO): 51 662 019
E-mail: office@dental-neomed.com · Phone: +43 676 6820 740

A data protection officer has not been appointed; there is no legal obligation to do so.

2. Hosting and shop platform (Shopify)

Our shop runs on the Shopify platform. Our contractual partner is Shopify International Ltd., 2nd Floor, 1–2 Victoria Buildings, Haddington Road, Dublin 4, Ireland; the parent company is Shopify Inc. (Canada). Shopify processes personal data on our behalf on the basis of a data processing agreement (Art. 28 GDPR). This may involve transfers to Shopify companies in Canada and the USA (see Section 10).

3. Server log files

When you visit our website, technical access data is processed automatically (IP address, date and time, page accessed, browser type, operating system). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).

4. Customer account and professional customer approval

When you register a customer account and apply for approval as a professional customer, we process the company and contact data you provide (company, name, address, e-mail address, phone number), your VAT ID and the evidence submitted to verify your professional status (e.g. professional or trade licence). Legal bases: Art. 6(1)(b) GDPR (contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in selling exclusively to professional customers). We validate VAT IDs via the European Commission’s VIES system.

5. Order and contract processing

To process orders, we process order, invoicing and delivery data. Legal bases: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(c) GDPR (tax, commercial and accounting obligations).

6. Payment processing

Payment is made by bank transfer (advance payment or purchase on invoice). We process the payment-related data (invoice data, payment reference); our bank (Slovenská sporiteľňa, a. s.) processes transfer data under its own responsibility. If additional payment methods are offered via payment service providers in the future, we will transmit the necessary data to the respective provider and update this policy. Legal basis: Art. 6(1)(b) GDPR.

7. Shipping and logistics

For delivery, we transmit your name, delivery address and – where required for delivery – e-mail address or phone number to our fulfilment and logistics partner euShipments (warehouse in Senec, Slovakia) and to the parcel services commissioned by them. Legal basis: Art. 6(1)(b) GDPR.

8. Contact

When you contact us via the contact form, e-mail or phone, we process your details to handle the enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual) or Art. 6(1)(f) GDPR.

9. Cookies and consent

We use technically necessary cookies (e.g. shopping cart, login, language setting, storage of your cookie choice) on the basis of Art. 6(1)(f) GDPR. We currently do not use non-essential cookies (analytics/marketing); should such cookies be used in the future, this will only happen with your prior consent via the cookie banner (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

10. Recipients in third countries

Where data is transferred to third countries (in particular Canada and the USA in the context of Shopify hosting), the transfer is based on adequacy decisions of the EU Commission (for Canada and for companies certified under the EU-US Data Privacy Framework) and, additionally, on EU standard contractual clauses (Art. 44 et seq. GDPR).

11. Storage periods

We store personal data only for as long as necessary for the stated purposes or as required by statutory retention obligations. Under Slovak law, accounting and tax records are retained for up to 10 years (Act No. 431/2002 Coll. on Accounting). Customer accounts are stored until the account is deleted; server log files are deleted after a short period.

12. Your rights

Within the statutory conditions, you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future. An e-mail to office@dental-neomed.com is sufficient.

13. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority – in Slovakia: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava 27, Slovakia (dataprotection.gov.sk) – or with the supervisory authority of your habitual residence or place of work.

14. Automated decision-making

Automated decision-making, including profiling (Art. 22 GDPR), does not take place.

15. Obligation to provide data

The data required for registration, approval and ordering is necessary for the conclusion of the contract; without it, we cannot process approval and delivery.

Version: September 2026. We will update this privacy policy if processing operations change.