Privacy Policy
Issued under Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. Last updated: 10 May 2026.
1.Data controller
The data controller within the meaning of Art. 4(7) GDPR is TMB CAPITAL s. r. o., IČO: 57256730, VAT ID: 2122632160, registered seat Lermontovova 911/3, 811 05 Bratislava — Staré Mesto district, Slovakia (hereinafter the "controller" or "we").
Contact: info@bullvend.com, phone +421 951 981 839.
The controller has not appointed a Data Protection Officer (DPO), as it does not meet the criteria under Art. 37 GDPR. For privacy matters, please contact us directly using the contact details above.
2.What data we process
When you use bullvend.com we process:
- Identification and contact data: name, phone, email, optionally city, that you provide in forms.
- Enquiry content: answers from the configurator, notes and details of the chosen machine configuration.
- Technical data: IP address (stored as a one-way hash), browser, operating system, language, time zone, pages visited.
- Geolocation: country, region and city derived from the IP address. We do not collect precise GPS location.
- Cookies: including analytics and marketing cookies (only with consent — see the Cookies document).
3.Purposes and legal bases
Providing identification and contact data is a contractual requirement to process your enquiry — without it, we cannot contact you with an offer. Other data (analytics, geolocation) is processed only with consent or based on legitimate interests; not providing it will not affect processing of your enquiry.
The configurator generates an indicative product recommendation based on your answers. This recommendation does not constitute automated decision-making under Art. 22 GDPR — it is purely a helper; the final configuration is always confirmed manually as part of our offer.
| Purpose | Legal basis | Retention period |
|---|---|---|
| Handling enquiries from the configurator and contact form | Art. 6(1)(b) GDPR (pre-contractual) | 3 years |
| Processing and delivering spare-part orders | Art. 6(1)(b) GDPR (contract) | 10 years (accounting) |
| Visit analytics (Google Analytics 4) | Art. 6(1)(a) GDPR (consent) | 14 months |
| Security, fraud prevention, rate limiting | Art. 6(1)(f) GDPR (legitimate interest) | 12 months |
4.Recipients of personal data
Your data may be processed by these processors solely for the purposes above:
- Vercel Inc. — site hosting (USA / EU).
- Neon, Inc. — database (EU).
- Resend, Inc. — email sending (USA / EU).
- Google LLC — Google Analytics 4 (only with consent).
- ipinfo.io (IP info Inc.) — IP-based geolocation (USA).
- ipwho.is — fallback geolocation (EU).
We do not share your data with third parties for marketing purposes. For transfers to third countries (USA), we rely on Commission Implementing Decision (EU) 2023/1795 on the adequate level of protection under the EU-U.S. Data Privacy Framework, or on standard contractual clauses pursuant to Commission Decision (EU) 2021/914. A copy of these safeguards is available on request.
5.Your rights
Under the GDPR you have the right:
- to access your data (Art. 15);
- to rectify inaccurate data (Art. 16);
- to erasure ("right to be forgotten") (Art. 17);
- to restrict processing (Art. 18);
- to data portability (Art. 20);
- to object to processing based on legitimate interest (Art. 21);
- to withdraw consent at any time (Art. 7(3));
- to lodge a complaint with the Office for Personal Data Protection of the SR (dataprotection.gov.sk).
We process requests within 30 days of receipt. Send them by email to info@bullvend.com.
Complaints should be addressed directly to the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, email: statny.dozor@pdp.gov.sk, web: dataprotection.gov.sk.
6.Data security
Data is transmitted over HTTPS, IP addresses are hashed, access to the admin panel is password-protected. Database backups are encrypted and stored within the EU.
7.Changes to this document
We may update this privacy policy from time to time. The current version is always available at bullvend.com/ochrana-sukromia. Material changes will be communicated by email or a notice on the site.
Questions or requests about this document? Email us at info@bullvend.com.