Privacy Notice

1. Data Controller

The controller under Article 4(7) GDPR is PartsOutlet s.r.o., registered at Jazerná ulica 566/10, 930 02 Orechová Potôň, Slovak Republic, Company ID (IČO): 50 142 356, entered in the Commercial Register of District Court Trnava, Section: Sro, Insert No. 55203/T.

For any privacy question, email contact@megaparts.ch or write to our registered office. We are not required to appoint a Data Protection Officer under Article 37 GDPR.

2. No Cookies or Browser Storage

Under Section 109(8) of Slovak Act No. 452/2021 Coll. on Electronic Communications, this site stores no cookies and writes nothing to localStorage, sessionStorage, or IndexedDB. Fonts and media are served directly from our own domain.

3. Hosting & Basic Connection Logs

Static pages for megaparts.ch are delivered over HTTPS via Cloudflare Pages. Cloudflare, Inc. acts as our data processor under the Cloudflare Data Processing Addendum, EU Standard Contractual Clauses, and its EU-U.S. Data Privacy Framework certification (European Commission adequacy decision of 10 July 2023).

Delivering a web page technically requires processing your IP address, requested URL, timestamp, HTTP status, HTTP request headers and TLS connection data at the network edge. Our legal basis is Article 6(1)(f) GDPR (keeping the site reachable and preventing network abuse). Cloudflare retains and purges transient edge logs according to the schedules in the Cloudflare Data Processing Addendum without profiling visitors.

4. Business Emails, Orders & Invoices

When you email contact@megaparts.ch, we process your contact details and message to answer part inquiries, prepare quotes, verify supplier or VAT details, and handle orders. The legal basis is Article 6(1)(b) GDPR for pre-contractual and contractual steps, or Article 6(1)(f) GDPR for routine B2B correspondence. Company email is hosted on Google Workspace (Google Ireland Limited, with U.S. transfers covered by Google LLC under the EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses).

Under Article 13(2)(e) GDPR, writing to us is voluntary, though basic business contact details are needed if you ask for a quote or place an order. Technical connection metadata is required to load HTTPS pages.

We keep general non-contractual email inquiries for up to 12 months after our last reply. Contract files are kept for the contract duration plus the 4-year commercial limitation period under Section 397 of Slovak Act No. 513/1991 Coll. Accounting and tax invoices are kept for 10 years under Section 35 of Slovak Act No. 431/2002 Coll. on Accounting, to meet our legal obligations (Article 6(1)(c) GDPR). Where an order requires it, we share data with our accountant, bank, couriers and tax authorities.

5. Website Security Reports

If you report a technical issue on our website (/security/), we use your message under Article 6(1)(f) GDPR to check and fix the problem. Triage emails are kept for up to 24 months. Any thank-you note on /security/#acknowledgments is published only with your explicit consent (Article 6(1)(a) GDPR), which you can withdraw anytime via contact@megaparts.ch.

6. Your GDPR Rights & Supervisory Authority

Under Articles 15 to 22 GDPR, you may request access, correction, deletion, restriction, data portability where applicable, or object to Article 6(1)(f) processing. We do not use automated decision-making or profiling.

You also have the right to lodge a complaint with the Slovak supervisory authority: Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Galvaniho 7/B, 821 04 Bratislava, Slovak Republic (https://dataprotection.gov.sk), or the authority in your EU Member State.