GDPR — Your Rights at CardMadeEasy.com

Version: 1.1 (sync with Privacy Policy v1.2) Effective from: May 29, 2026 Last updated: June 22, 2026

🇸🇰 The Slovak version of this document is the binding legal text. This English version is provided for international users.

This page is a quick reference to your rights under the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"). For the full data processing details, see our Privacy Policy.

1. Who is the data controller?

Marketing support s.r.o., Studenohorská 67, 841 03 Bratislava, Slovak Republic, Company ID: 36 823 937. Contact: [email protected].

2. Your rights at a glance

2.1. Right of access (Art. 15)

You can request a copy of all your personal data we hold.

How: Profile → "Download data (ZIP)" — generates a ZIP with JSON exports of your account, listings, transactions, messages, and collection.

2.2. Right to rectification (Art. 16)

You can correct or update your data.

How: Profile → edit form fields → "Save changes".

2.3. Right to erasure (Art. 17)

You have the right to be forgotten.

How: Profile → "Delete account" (3-step confirmation flow):

  1. Click "Delete my account"
  2. Verify via email link (24-hour validity)
  3. Confirm final deletion

Exceptions: Sales history (anonymized) and accounting records are retained for 10 years per Slovak tax law (Act 431/2002 Coll.).

2.4. Right to restriction of processing (Art. 18)

You can request that we limit how we use your data (e.g., suspend marketing emails while keeping the account).

How: Email [email protected] describing what you want to restrict.

2.5. Right to data portability (Art. 20)

You can receive your data in a machine-readable format and transmit it to another controller.

How: Profile → "Download data (ZIP)" → JSON format (see Art. 15 above).

2.6. Right to object (Art. 21)

You can object to processing based on legitimate interest (e.g., anti-fraud monitoring) or for direct marketing.

How:

  • Marketing: Profile → Notifications → toggle off marketing emails
  • Other: email [email protected] with the reason

2.7. Right not to be subject to automated decision-making (Art. 22)

We do not use automated decision-making with legal or similarly significant effects on you.

2.8. Right to withdraw consent (Art. 7(3))

Where we process your data based on consent (e.g., analytics cookies, marketing emails), you can withdraw consent at any time.

How:

  • Cookies: Footer → "Cookie settings"
  • Marketing emails: Profile → Notifications

3. Response times

We respond to GDPR requests within 30 days as required by Article 12(3). In complex cases this period may be extended by 2 months — we will inform you about the extension within 30 days.

All responses are free of charge unless the request is manifestly unfounded or excessive (Article 12(5)).

4. Right to lodge a complaint

If you believe your rights have been violated, you can lodge a complaint with the supervisory authority:

Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic) Hraničná 12, 820 07 Bratislava 27 Tel.: +421 2 32 31 32 14 Email: [email protected] Web: https://dataprotection.gov.sk

You may also lodge a complaint with the supervisory authority in your country of residence or workplace.

5. Contact

For any GDPR-related questions or to exercise your rights:

Marketing support s.r.o. Email: [email protected] Mail: Studenohorská 67, 841 03 Bratislava, Slovak Republic