What data from this website we process, why, for how long and whom you can contact.
This is a translation for your convenience; the Slovak version is legally binding.
1. Controller
ROŠERO – P, s.r.o., Sadová 14, 052 01 Spišská Nová Ves, Company ID 36 194 514, VAT ID SK2020033895. Registration: Commercial Register of the District Court Košice I.
Send questions about the processing of personal data and requests to exercise your rights to rosero@rosero.sk or by post to our registered office, or call +421 911 033 088.
2. What we use the data for
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Contact form, configurator and enquiries about vehicles in stock | name, company, e-mail, phone, message content, selected vehicle configuration | Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract | for as long as it takes to handle the request, at most 2 years from the last communication; if we enter into a contract, for the period set by accounting and archiving regulations |
| Warranty claims and service | company name, contact person, address, e-mail, phone, VIN, mileage, description of the fault, attached photos and documents | Art. 6(1)(b) and (c) GDPR — performance of a contract and legal obligations when exercising rights arising from liability for defects | for the duration of the warranty and 4 years after the warranty claim has been settled |
| Recruitment (careers) | data in the application and CV | Art. 6(1)(a) GDPR — your consent | 1 year from submission of the application, or until consent is withdrawn |
| Client zone | name, company, e-mail, vehicle models purchased, language of communication | Art. 6(1)(b) GDPR — performance of a contract (providing access to vehicle documentation) | for the duration of the contractual relationship, until we revoke access |
| Sign-in and website security | technical sign-in cookies | Art. 6(1)(f) GDPR — legitimate interest in secure operation | until sign-out, at most 12 hours |
Providing your data is voluntary, but without it we cannot handle your request. We do not carry out automated decision-making or profiling.
3. Who we share data with
- Cloudflare, Inc. — website hosting, database and file storage. Transfers to the USA take place on the basis of the EU–US Data Privacy Framework and standard contractual clauses.
- The e-mail service provider that delivers messages from the forms to our inboxes.
- Google — only if you choose to display the map on the site yourself (see section 4).
- Public authorities, where required by law.
4. Cookies
The website uses only strictly necessary cookies: rosero_client for signing in to the client zone and rosero_admin for staff sign-in, both for at most 12 hours. We do not use analytics or advertising cookies.
The Google map loads only after you click on it. Google may then store its own cookies under its own policies. We keep your choice from the cookie bar in your browser's storage (not in a cookie); you can change it at any time via “Cookie settings” in the footer.
5. Your rights
You have the right:
- to access your data (Art. 15 GDPR),
- to have it rectified (Art. 16) and erased (Art. 17),
- to restriction of processing (Art. 18) and to data portability (Art. 20),
- to object to processing based on legitimate interest (Art. 21),
- to withdraw consent at any time — withdrawal does not affect the lawfulness of processing before it.
We will handle your request without undue delay, and within one month at the latest.
If you believe the processing breaches the regulations, you may file a petition to initiate proceedings with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
6. Legal framework
Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act No. 18/2018 Coll. on Personal Data Protection and Act No. 452/2021 Coll. on Electronic Communications.
This information applies from 13 September 2026.