Privacy Policy

Controller and scope

The controller is 68travel, s.r.o., Dunajská 4, 811 08 Bratislava, Slovakia, company ID 46675311. This notice explains processing connected with https://www.68travel.com, orders, accounts and customer communications. Privacy contact: shop@68travel.com. The Slovak company controls the shop processing it determines. Partners may independently sell and invoice; for their own sales, invoicing and legal duties they act as separate controllers. The seller for a particular purchase is identified in its contractual and invoicing documents.

Why we use personal data

Orders, customization, payment and delivery: identity, contact, billing/delivery details, goods, instructions and payment status are needed to prepare and perform the contract (GDPR Article 6(1)(b)); without essential details we cannot fulfil it. Accounting uses the legal-obligation basis (c). Accounts use login/contact details and order history to provide the requested service (b). Support, returns and defects use correspondence, order details and necessary attachments for contract/legal duties (b/c); protecting legal claims uses legitimate interests (f). Voluntary public reviews/photos use consent (a), with anti-abuse moderation assessed under legitimate interests (f). Optional marketing/tracking uses consent where required. Data comes from you, site use and relevant payment/delivery providers. Agreeing to terms is not blanket privacy consent.

Payment providers may automatically assess payment details and fraud/security risk, resulting in approval, further verification or refusal. Their notices explain the processing and applicable rights. Where GDPR rules on solely automated decisions with legal or similarly significant effects apply, you may request human intervention, express your view and contest the decision under the applicable conditions. Contact the provider or us for help identifying the payment and next steps.

Marketing and cookies

Newsletter permission is optional and separate from purchase. Some signup routes require email confirmation; existing subscriptions may differ. Unsubscribe through the message or contact us. Requested stock alerts are not general newsletter permission. Review invitations and cart reminders are separate purposes; entering an email does not itself grant general advertising consent.

Necessary technologies support the basket, session, security, language and preferences. Our cookie settings use session/form cookies for up to 60 days, language notice for 14 days, consent preferences for 120 days and newsletter-popup choices for 3 or 365 days; use may renew them. Favorites remain in local storage until removed. Analytics uses Google Analytics/PostHog; advertising uses Google/Meta. Lifetimes: ph_*_posthog 365 days and _fbp 90 days; local storage lasts until cleared or changed. Freshchat supports online assistance and security. Optional technologies require the applicable choices/consent. Provider information: https://policies.google.com/privacy, https://www.facebook.com/privacy/policy/, https://posthog.com/privacy, https://www.freshworks.com/privacy/.

Reopen preferences using the Cookies link in this page's footer; provider advertising controls supplement your choices on our site.

Recipients and international transfers

Necessary recipients can include banks/payment providers, carriers, shop operation, messaging, support and accounting services and competent authorities. Analytics/advertising can involve Google, Meta and PostHog; online support uses Freshchat. Each receives only data needed for its purpose. Their actual role may be processor or separate controller. Transfers outside the EEA require a valid GDPR mechanism, such as an applicable adequacy decision or appropriate safeguards including standard contractual clauses; ask our contact for relevant recipient/safeguard details and a copy. For manufacturing/customization, fulfilment, dispatch, independent sales, invoicing and support, necessary data may also be shared with these partners:
Wooden Maps & Decor, s.r.o., Dunajská 4, 811 08 Bratislava, Slovakia, company ID 46309870; BratiZlava, s.r.o., Dunajská 4, 811 08 Bratislava, Slovakia, company ID 46327363; FPPO s.r.o., Dunajská 4, 811 08 Bratislava, Slovakia, company ID 47864559; FCA s.r.o., Dunajská 4, 811 08 Bratislava, Slovakia, company ID 46913017; 68web s.r.o., Dunajská 4, 811 08 Bratislava, Slovakia, company ID 47353490; 68travel s.r.o., Schnirchova 1256/2, Holešovice, 170 00 Praha, Czech Republic, company ID 30130549.

Retention

We retain data for the periods or criteria listed below, rather than indefinitely until a deletion request. Accounting records subject to Slovak statutory retention are generally retained for ten years following the relevant year. This does not mean all account, marketing or behavioral data is retained for that period. Retention periods are support records: five years after closure; abandoned carts: 60 days after last activity; security logs: 12 months after the event; inactive accounts: three years after last activity. Account closure does not remove statutory accounting records. One-off requests last through handling and necessary evidence; newsletter use lasts while its lawful basis remains. Limited consent/opt-out evidence may remain to demonstrate compliance and honor your choice. Reviews/photos follow publication duration and any lawful retention need. Other records follow their purpose, justified claim periods and legal duties; use is restricted when retention alone is required. A deletion request may not require deletion of records that must be retained by law or are necessary for justified legal claims; access and further use are restricted appropriately.

Your rights

Depending on the processing and legal conditions, you may request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. You may object to direct marketing at any time. We normally respond within one month; any lawful extension will be explained within that period. We request only proportionate information needed to verify identity.

Privacy contact

Send privacy requests to shop@68travel.com. You may lodge a complaint with the competent data-protection authority, including in the EU/EEA country of your habitual residence, work or alleged infringement where applicable. Slovak data-protection authority (Úrad na ochranu osobných údajov Slovenskej republiky): https://www.dataprotection.gov.sk/sk/urad/konanie-ochrane-osobnych-udajov/. This does not restrict access to another competent authority. Effective date: 4.11.2026. Version: 1.0.