PRIVACY POLICY

1. Data Controller

Business name: Valko Consulting s.r.o.

Registered office: Kirejevská 1119/6, 979 01, Rimavská Sobota, Slovakia
Company ID: 54633214
VAT ID: Not applicable – Seller is not a VAT payer
Registered in the Commercial Register of Obchodný register Okresného súdu Banská Bystrica, Section Sro, Insert No. 43799/S

Email: info@gradedcardz.com
Website: www.gradedcardz.com

(hereinafter referred to as the "Controller")

The Controller processes personal data in accordance with:

• Regulation (EU) 2016/679 (GDPR)

• Act No. 18/2018 Coll. on Personal Data Protection (Slovakia)

2. Categories of Personal Data

We may process the following data:

Identification & Contact Data

• Name and surname

• Billing address

• Delivery address

• Email address

• Phone number

Order & Transaction Data

• Purchased products

• Order history

• Payment method

• Communication related to orders

Technical & Usage Data

• IP address

• Device information

• Browser type

• Cookies

• Website interaction data

3. Purposes and Legal Basis

A) Contract Performance (Art. 6(1)(b) GDPR)

• Order processing

• Delivery of goods

• Complaint handling

• Grading intermediation services

B) Legal Obligation (Art. 6(1)(c) GDPR)

• Accounting

• Tax compliance

• Archiving invoices

C) Legitimate Interest (Art. 6(1)(f) GDPR)

• Fraud prevention

• Legal claims

• Basic website analytics

D) Consent (Art. 6(1)(a) GDPR)

• Newsletter subscription

• Marketing emails

• Marketing cookies

• Personalized advertising

Consent may be withdrawn at any time.

4. Third-Party Service Providers

Personal data may be shared with the following categories of processors:

Website & Hosting

• Webnode AG (website platform and hosting provider)

Payment Providers

• Stripe, Inc.

• PayPal (Europe) S.à r.l. et Cie, S.C.A.

Shipping Carriers

• Courier and postal service providers used for delivery

Accounting Services

• External accounting provider

Email Marketing Providers

• Intuit Mailchimp

• Klaviyo, Inc.

Analytics & Advertising Providers

• Google LLC (Google Analytics, Google Ads)

• Meta Platforms Ireland Ltd. (Facebook & Instagram advertising tools)

Grading Partner (if customer uses grading service)

• AP Grading

Data is shared only to the extent necessary to provide services.

5. International Data Transfers

Some service providers (e.g., Google, Meta, Mailchimp, Klaviyo, Stripe) may process personal data outside the European Union.

In such cases, transfers are carried out:

• Based on an adequacy decision by the European Commission, or

• Using Standard Contractual Clauses (SCCs) approved by the European Commission

6. Data Retention

Personal data is retained:

• For the duration of the contract

• For 10 years for accounting purposes (legal obligation)

• Until consent is withdrawn (newsletter/marketing)

• For the duration of legitimate interest

7. Cookies & Tracking Technologies

Our website uses:

• Necessary cookies

• Analytical cookies (Google Analytics)

• Marketing cookies (Meta Pixel, Google Ads)

Marketing and analytical cookies are activated only based on user consent via cookie banner.

Detailed information is provided in the Cookie Policy.

8. Rights of the Data Subject

Under GDPR, you have the right to:

• Access your data

• Rectify inaccurate data

• Erase personal data

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

You may exercise your rights by contacting: [your email]

You have the right to lodge a complaint with:

Office for Personal Data Protection of the Slovak Republic
https://dataprotection.gov.sk

9. Data Security

The Controller implements appropriate technical and organizational measures to ensure the protection of personal data.

Access to personal data is restricted to authorized persons only.

10. Automated Decision-Making

We do not carry out automated decision-making or profiling that produces legal effects.

11. Changes to This Policy

The Controller reserves the right to amend this Privacy Policy.

This Privacy Policy is valid from: 03.03.2026.

Cookie Policy