Privacy policy

Last updated: 22 September 2026

This policy explains how Walterin s. r. o. processes personal data when you visit walterin.com, ask to be notified about a product, subscribe to our newsletter, place an order or contact us.

1. Who we are

The controller of your personal data is:

Walterin s. r. o.
Ľubochnianska 4, 831 04 Bratislava – Nové Mesto, Slovakia
Company ID (IČO): 57297991
Registered in the Commercial Register of the Municipal Court Bratislava III, section Sro, file no. 193235/B
Email: support@walterin.com
Phone: +421 905 549 907

We have not appointed a data protection officer. For any question about your personal data, write to support@walterin.com.

2. What we process, why, on what legal basis and for how long

2.1 Visiting the website

  • Data: IP address, device and browser information, pages visited, date and time of access, and data stored in cookies and similar technologies (see section 4).
  • Purpose: to display the website, keep it secure and working, and remember your settings (for example language, cart and cookie choices).
  • Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR). For cookies and similar technologies that are not strictly necessary: your consent (Art. 6(1)(a) GDPR; § 109 of Act No. 452/2021 Coll. on electronic communications).
  • Retention: strictly necessary cookies for the time shown in the cookie banner. Other data for as long as needed for the purpose, as set out in this policy.

2.2 "Notify me" sign-up

  • Data: email address. We also record the product and language edition you signed up for.
  • Purpose: to send you a one-off notice when the product becomes available. This is not a newsletter subscription. We will not send you newsletters or other marketing because of this sign-up.
  • Legal basis: your consent (Art. 6(1)(a) GDPR), which you give by submitting the form.
  • Retention: until 3 months after we send the notice, or until you withdraw your consent, whichever is earlier. After that, the sign-up is deleted, unless you have also become our customer or newsletter subscriber on another basis.

2.3 Newsletter

  • Data: email address. We also record the date and way you subscribed as evidence of your consent.
  • Purpose: to send you news about new Walterin products and announcements.
  • Legal basis: your consent (Art. 6(1)(a) GDPR and the rules on electronic marketing in Act No. 452/2021 Coll.).
  • Retention: until you unsubscribe. Every newsletter contains an unsubscribe link. We keep evidence of your consent and of its withdrawal for as long as we may need to prove it.

2.4 Orders, payment and delivery

  • Data: name, email, phone number, billing and delivery address, the products ordered, price, payment method and payment status, delivery and tracking information, correspondence about the order and, for eBooks, your consent declaration from the cart. We do not receive or store full card numbers.
  • Purpose: to conclude and perform the purchase contract, take payment, deliver the goods (including sending download links for eBooks) and send order and shipping notifications.
  • Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Retention: for the duration of the contract and then until the limitation periods for claims arising from it expire. Accounting documents (such as invoices) are kept for 10 years under § 35 of Act No. 431/2002 Coll. on accounting (Art. 6(1)(c) GDPR).

2.5 Customer account

  • Data: email address, name, saved delivery and billing addresses, phone number if you add it, and your order history.
  • Purpose: to let you sign in, see your orders and reuse your details. Creating an account is optional; you can also order without one.
  • Legal basis: performance of a contract, or steps taken at your request before entering into one (Art. 6(1)(b) GDPR).
  • Retention: until you delete your account or ask us to delete it. After that, we keep only what accounting law and possible claims require (see section 2.4).

2.6 Withdrawals, complaints and customer service

  • Data: your contact details, order details, the content of your message and our reply.
  • Purpose: to handle withdrawals from contracts, complaints about defective goods and your questions, including those sent through the contact form or the online withdrawal form.
  • Legal basis: compliance with our legal obligations under consumer protection law and the Civil Code (Art. 6(1)(c) GDPR). For other questions: steps taken at your request before entering into a contract or performance of a contract (Art. 6(1)(b) GDPR), or our legitimate interest in answering you (Art. 6(1)(f) GDPR).
  • Retention: for as long as consumer protection law requires records of withdrawals and complaints to be kept. Other correspondence is kept until the matter is resolved and any related claims are time-barred.

2.7 Advertising and measurement (Meta)

  • Data: information about your visit and actions on the website (for example pages viewed, adding to cart, purchase), IP address, browser information and cookie identifiers. For matching, we may also share contact details you gave us (such as email, phone number or name) in hashed (encrypted) form.
  • Tools: the Meta pixel and the Meta Conversions API, via the Facebook & Instagram sales channel.
  • Purpose: to measure the results of our ads on Facebook and Instagram and to show relevant ads.
  • Legal basis: your consent to marketing cookies in the cookie banner (Art. 6(1)(a) GDPR; § 109 of Act No. 452/2021 Coll.). We use these tools for you only if you have given this consent.
  • Joint controllership: we and Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) are joint controllers for collecting this data on our website and transmitting it to Meta (Art. 26 GDPR). The essential terms of our arrangement are set out in Meta's Controller Addendum: https://www.facebook.com/legal/controller_addendum. Meta is responsible for its own further processing, and you can exercise your rights for data stored by Meta directly with Meta. For matching hashed contact details, Meta acts as our processor and deletes the data once matching is complete. Information on Meta's processing, its legal bases and your rights: https://www.facebook.com/privacy/policy.
  • Retention: until you withdraw your consent. Meta keeps the data for the periods set out in its own terms.

2.8 Shopify Network Intelligence

Our store uses Shopify Network Intelligence. In this setting, Shopify uses data about your interactions with our store, and with other Shopify stores and with Shopify, to provide analytics, personalisation and advertising services. For this processing Shopify is an independent controller, not our processor, and its Consumer Privacy Policy applies: https://www.shopify.com/legal/privacy/customers. Shopify uses your data for targeted advertising only with your consent. If you reject non-essential cookies in our cookie banner, data from your device is excluded from non-essential uses. You can exercise your rights towards Shopify, including withdrawing consent or objecting, through the Shopify privacy portal: https://privacy.shopify.com. If you ask us to delete your data, it is also deleted from Shopify Network Intelligence.

2.9 Legal claims and security

We may process the data described above to establish, exercise or defend legal claims and to prevent fraud and misuse of the store. Our legal basis is our legitimate interest (Art. 6(1)(f) GDPR). We keep the data only for as long as that is necessary.

3. Who receives your data

We use the following providers. Unless stated otherwise, they act as our processors: they process data only on our instructions and under a data processing agreement.

  • Shopify (Shopify International Limited, Dublin, Ireland): the store platform, including hosting, checkout, customer records, order processing, the notify-me and contact forms, and the cookie banner. It also covers these Shopify apps: Shopify Messaging (newsletter, notify-me and order emails), Shopify Flow (automated store workflows), Shopify Digital Products (delivery of eBook download links) and Translate & Adapt (translation of store content; it does not process customer data). For Shopify Network Intelligence, Shopify is an independent controller (see section 2.8).
  • Stripe (Stripe Payments Europe, Limited, Ireland): card payments, including Apple Pay and Google Pay. Stripe processes payment data on our behalf. It acts as an independent controller for its own purposes, such as fraud prevention and compliance with financial regulation: https://stripe.com/privacy.
  • Meta Platforms Ireland Limited: see section 2.7.
  • Fulfilment and delivery (physical products, once they are on sale): our fulfilment partner in Slovakia will store, pack and ship physical orders, and carriers (for example Packeta, DPD or DHL, depending on the destination) will deliver them. They receive only the name, delivery address, phone and email needed for delivery; carriers act as independent controllers for the delivery. We will name the fulfilment partner here before physical products go on sale.
  • Accounting and legal advisers, bound by professional confidentiality, to the extent required.
  • Public authorities, where the law requires it.

We do not sell your personal data.

4. Cookies

Cookies are small files stored in your browser. We use:

  • Strictly necessary cookies: needed for the store to work (cart, checkout, security, saving your cookie choice). They do not require consent.
  • Preference, analytics and marketing cookies (including those used by Meta and by Shopify Network Intelligence): used only with your consent.

On your first visit, the cookie banner asks for your choice. You can accept or reject non-essential cookies. Rejecting them does not stop you from using the store. You can change or withdraw your consent at any time via the "Cookie preferences" link in the footer of every page, by deleting the cookies for walterin.com in your browser, or by writing to support@walterin.com. The cookies Shopify uses are listed at https://www.shopify.com/legal/cookies.

5. Where your data is processed

Our store's customer data is stored in the European Union. Some providers may still process data outside the European Economic Area: Shopify (in particular Canada, the USA and Singapore), Stripe (in particular the USA) and Meta (the USA). For these transfers, the providers state that they rely on an adequacy decision of the European Commission (for Canada, and for US companies certified under the EU–U.S. Data Privacy Framework, Art. 45 GDPR) or on appropriate safeguards such as standard contractual clauses or binding corporate rules (Art. 46–47 GDPR). You can ask us for more information about these safeguards at support@walterin.com.

6. Your rights

You have the right to:

  • access your personal data (Art. 15 GDPR);
  • have it corrected (Art. 16);
  • have it erased (Art. 17);
  • restrict its processing (Art. 18);
  • data portability (Art. 20);
  • object to processing based on our legitimate interest (Art. 21);
  • withdraw your consent at any time. This does not affect processing carried out before the withdrawal (Art. 7(3)).

To exercise your rights, write to support@walterin.com. We will reply within one month. In the cases allowed by Art. 12(3) GDPR, this period may be extended.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work. In Slovakia this is the Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava 27, https://dataprotection.gov.sk. If you live in the United Kingdom, you can also complain to the Information Commissioner's Office (https://ico.org.uk).

7. Is providing data required?

Data needed to conclude and perform a purchase (name, contact and delivery details) is a contractual requirement. Without it we cannot accept your order. Providing data for the notify-me sign-up and the newsletter is voluntary.

We do not use automated decision-making, including profiling, that has legal or similarly significant effects on you.

8. Children

The store is not intended for children under 16. We do not knowingly collect their personal data.

9. Changes

We may update this policy, for example when we add a new service. The current version is always published on this page, with the date of the last update.

10. Language versions

This policy is published in Slovak and English. The Slovak version is the original. In case of discrepancy, the Slovak version prevails.