The protection of personal data of our customers and online store visitors is important to us. In this document, we explain what personal data we process, for what purposes, on what legal basis, to whom we may provide it, how long we retain it, and what rights you have in connection with its processing.
These policies apply primarily to the Tiler Market online store, operated on the website www.tiler-market.com and its language or national versions.
I. Data Controller
The Data Controller is:
A2E, s.r.o.
SNP 498/96
039 01 Turčianske Teplice
Slovak Republic
Company ID (IČO): 51 134 403
Tax ID (DIČ): 2120732075
VAT ID (IČ DPH): SK2120732075
The company is registered in the Commercial Register of the District Court of Žilina, Section Sro, Insert No. 69786/L.
Email: info@tiler-market.com
Alternative email: info@a2e.sk
Phone: +421 902 137 501
Warehouse and pick-up point address:
A2E, s.r.o.
Nográdyho 24
960 01 Zvolen
Slovak Republic
If you have a question regarding the processing of personal data or wish to exercise any of your rights, you can contact us at info@tiler-market.com.
II. Legal Regulations
We process personal data primarily in accordance with:
- Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation (“GDPR”),
- Act No. 18/2018 Coll. on Personal Data Protection,
- other legal regulations applicable to our activities.
III. What Personal Data We May Process
Depending on how you use our online store or our services, we may process the following categories of personal data:
Identification data
Specifically:
- first name and surname,
- business name,
- Company ID (IČO),
- Tax ID (DIČ),
- VAT ID (IČ DPH),
- or other data necessary for customer identification.
Contact details
Specifically:
- email address,
- phone number,
- billing address,
- delivery address.
Order data
Specifically:
- ordered goods,
- price,
- payment method,
- shipping method,
- order status,
- order history,
- data related to complaints, contract withdrawal, or other customer requests.
Payment data
We may process data necessary for payment identification and allocation, such as:
- payment amount,
- variable symbol,
- payment status,
- partial payment transaction data.
Full payment card details are generally not processed by A2E, s.r.o., but by the respective payment service provider.
User account data
If you create a customer account, we may process, for example:
- identification and contact details,
- saved billing and delivery addresses,
- order history,
- user account settings.
Communication data
If you contact us by email, phone, contact form, or complaint form, we may store:
- content of communication,
- your contact details,
- information needed to resolve your request.
Technical data
When using the website, we may process, for example:
- IP address,
- device type,
- internet browser type and version,
- operating system,
- language settings,
- data on date and time of access,
- technical logs necessary for website security and operation.
Data obtained through cookies and similar technologies
Depending on your consent settings, data on website usage, pages viewed, interactions with the website, or the effectiveness of advertising campaigns may be processed.
Details are provided below in the Cookies section.
IV. Order and Purchase Agreement
If you place an order through Tiler Market, we process your personal data for the purposes of:
- receiving and processing the order,
- concluding the purchase agreement,
- receiving and allocating payment,
- delivering the ordered goods,
- communicating about the order,
- issuing accounting and tax documents,
- resolving potential contract withdrawal,
- complaints and exercising rights arising from liability for defects.
Legal basis
Processing is necessary primarily:
for the performance of a contract or in order to take steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR,
and to the relevant extent also:
for compliance with a legal obligation pursuant to Article 6(1)(c) GDPR.
Without providing the data necessary for concluding and fulfilling the contract, we may not be able to accept or process the order.
V. Accounting and Tax Obligations
We process the data listed on invoices, credit notes, accounting documents, and related records for the purpose of fulfilling our legal accounting, tax, and record-keeping obligations.
Legal basis
Compliance with a legal obligation pursuant to Article 6(1)(c) GDPR.
We retain data for the periods required by relevant accounting, tax, and archiving regulations.
VI. Goods Delivery
If you choose delivery via a shipping company or another transport provider, we will provide them with the data necessary for parcel delivery.
These may include, in particular:
- first name and surname or company name,
- delivery address,
- phone number,
- email,
- parcel number,
- cash on delivery amount, if selected.
We only provide data necessary to ensure transport and related services.
Legal basis
Performance of the purchase agreement pursuant to Article 6(1)(b) GDPR.
VII. Payments
When paying via a payment gateway or other payment service provider, your personal data may be processed by the respective payment provider.
A2E, s.r.o. generally does not receive your full payment card details.
We may receive information necessary for:
- payment identification,
- confirmation of payment success or failure,
- matching payment with an order,
- processing refunds.
The payment service provider may be an independent data controller and process data according to its own privacy policy.
VIII. User Account
If you create a user account in the online store, we process your personal data for the purposes of:
- account creation and operation,
- login,
- storing your settings,
- displaying order history,
- simplifying future purchases.
Legal basis
Processing is necessary for providing the user account service and fulfilling the relationship between you and the controller pursuant to Article 6(1)(b) GDPR.
You can request to cancel your account. However, account cancellation does not automatically mean the deletion of data that we must continue to retain by law or for the protection of legal claims.
IX. Customer Support and Communication
If you contact us, we process the data you provide so that we can:
- answer your question,
- resolve an order issue,
- provide product information,
- resolve a complaint or withdrawal,
- handle other customer requests.
Legal basis
Depending on the nature of the communication, this may involve:
- performance of a contract or measures prior to its conclusion,
- compliance with a legal obligation,
- our legitimate interest in providing customer support and recording communications.
X. Complaints, Withdrawals, and Legal Claims
We also process personal data for:
- complaints,
- contract withdrawals,
- payment refunds,
- dispute resolution,
- debt collection,
- defense or assertion of our legal claims.
Legal basis
Depending on the specific situation, this primarily involves:
- performance of a contract,
- compliance with a legal obligation,
- legitimate interest in protecting and asserting legal claims.
XI. Reviews and Ratings
After a purchase, we may ask you to rate the purchased product or our services under conditions permitted by law.
If we use an external service provider for this purpose, the minimum scope of data necessary to send the request or verify that the rating comes from a customer who actually purchased the product may be provided to them.
If consent is required for such processing, it will only be carried out on that basis.
XII. Marketing Communication
Newsletter and marketing emails
We may send marketing messages:
Based on consent
If you have subscribed to the newsletter or otherwise provided us with valid consent.
The legal basis is:
consent pursuant to Article 6(1)(a) GDPR.
You can withdraw your consent at any time.
To existing customers
In cases permitted by law, we may send you information about our own similar products or services based on an existing customer relationship.
In every marketing message, we will provide you with an easy way to opt out of further marketing communications.
Opting out of marketing does not affect service messages necessary for processing an order, complaint, or other contractual relationship.
XIII. Cookies and Similar Technologies
We may use cookies and similar technologies on our website.
Essential cookies
Essential cookies ensure the basic functioning of the online store, such as:
- shopping cart,
- user login,
- security,
- saving cookie settings choices,
- technical functioning of the website.
Consent is not required for the use of essential cookies, provided they are strictly necessary for providing the service requested by the user.
Functional, analytical, and marketing cookies
We use non-essential cookies only based on your consent, if such consent is required by law.
These may include cookies used for:
- traffic analytics,
- website performance measurement,
- personalization,
- measuring advertising campaigns,
- displaying relevant advertising.
These cookies are not activated before the necessary consent is granted, unless legal regulations allow otherwise.
Changing consent
You can change your decision at any time through the cookie settings available on our website.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
More detailed information about the specific cookies used, their providers, purpose, and validity period is provided in the cookie settings or in separate cookie usage policies, if the website uses them.
XIV. Technical Security of the Website
For the purpose of protecting the online store, user accounts, our systems, and customers, we may process technical data and security logs.
This primarily involves preventing:
- unauthorized access,
- fraudulent activity,
- attacks on the website,
- misuse of user accounts,
- disruption of the availability or security of our systems.
Legal basis
Our legal basis is legitimate interest in protecting our information systems, property, customers, and rights pursuant to Article 6(1)(f) GDPR.
XV. Camera System
If our premises are monitored by a camera system, we process personal data in the form of video recordings primarily for the purposes of:
- property protection,
- personal safety,
- prevention and clarification of security incidents,
- protection of legal claims.
The monitored area is appropriately marked.
Legal basis
Legitimate interest pursuant to Article 6(1)(f) GDPR.
Camera recordings are retained only for the necessary period proportionate to the purpose of monitoring.
If a recording captures a security incident or may be necessary for asserting or defending legal claims, the relevant part of the recording may be retained for a longer necessary period or provided to the authorized authority.
XVI. Recipients of Personal Data
We do not sell your personal data.
However, we may provide or make personal data accessible to the necessary extent to entities that help us ensure the operation of the online store and the fulfillment of our obligations.
These may include, in particular:
- transport and courier companies,
- payment service providers and banks,
- web hosting, server, and cloud service providers,
- email and communication service providers,
- IT support and online store management providers,
- accountants and tax advisors,
- lawyers and other professional advisors,
- service centers, manufacturers, or distributors when handling complaints,
- analytical and marketing service providers, if you have consented to the relevant processing,
- public authorities, if we are legally obliged to provide data.
Some recipients process personal data as our processors, and some as independent controllers.
We require adequate guarantees for the protection of personal data from each processor.
XVII. Service, Manufacturer, and Distributor
In case of a complaint or service intervention, it may be necessary to provide essential data to:
- an authorized service center,
- the manufacturer,
- the distributor,
- the spare parts supplier.
We only provide data necessary to identify the product, complaint, service case, and to contact the customer, if necessary.
XVIII. Transfer of Personal Data Outside the EEA
For some technological, analytical, cloud, or marketing services, personal data may be processed outside the European Economic Area.
Such a transfer will only be carried out if the conditions of the GDPR are met, especially if:
- the European Commission has decided on an adequate level of protection in the given country,
- standard contractual clauses approved by the European Commission have been adopted,
- another legally permissible mechanism ensuring adequate protection exists.
If we use a service where data transfer outside the EEA may occur based on optional cookies, the relevant processing will only take place after the necessary consent has been granted.
XIX. How Long We Retain Personal Data
We do not retain personal data longer than necessary for the purpose for which it was obtained, unless longer retention is required by law or necessary for the protection of legal claims.
Orders and contracts
During the duration of the contractual relationship and subsequently for the period necessary to protect or assert legal claims.
Accounting and tax documents
For the period required by relevant accounting and tax regulations.
Complaints
During the handling of the complaint and subsequently for the period necessary to demonstrate compliance with legal obligations and protect legal claims.
User account
For the duration of the user account and subsequently for a reasonable period necessary for technical, security, or legal purposes. Data that we must retain on another legal basis may remain stored even after the account is canceled.
Marketing based on consent
Until consent is withdrawn or the purpose for which consent was granted ends.
Information about the withdrawal of consent or objection itself may also be retained subsequently to demonstrate that further marketing communication should not be sent.
Technical and security logs
For a period proportionate to the security purpose and the nature of the relevant data.
Cookies
According to the validity period of specific cookies indicated in the cookie settings.
XX. Third-Party Data
If you provide us with data of another person in connection with an order, such as:
- a person authorized to receive the parcel,
- a contact person for the company,
- a person designated to pick up the goods,
please ensure that only data necessary for the given purpose is provided.
If reasonably possible, inform this person that their data will be provided to A2E, s.r.o. for the purpose of processing the order or a related request.
Providing third-party data does not mean that you must always obtain “consent to our policies” from this person. We assess the legal basis for processing according to the specific purpose and circumstances.
XXI. Automated Decision-Making
In the course of a regular purchase at Tiler Market, we do not carry out decision-making based solely on automated processing that would produce legal effects concerning the customer or similarly significantly affect them, unless explicitly stated otherwise for a specific service.
Standard technical functions of the online store, product filtering, or product recommendations do not in themselves constitute such automated decision-making under the GDPR.
XXII. Security of Personal Data
We take appropriate technical and organizational measures to protect personal data from:
- unauthorized access,
- misuse,
- loss,
- damage,
- unauthorized alteration,
- unauthorized disclosure.
We regularly assess the scope of security measures, taking into account the nature of the processing and potential risks.
For security reasons, we do not disclose the detailed technical configuration of our systems.
XXIII. Your Rights
Under the conditions stipulated by the GDPR, you have the right to:
Right of access
You can request confirmation from us as to whether we are processing your personal data, and if so, you can request access to this data and related information.
Right to rectification
You have the right to rectify inaccurate data and to have incomplete personal data completed.
Right to erasure
Under the conditions set out in the GDPR, you can request the erasure of your personal data.
The right to erasure is not absolute. For example, we cannot erase data if we must retain it to comply with a legal obligation or if we need it to establish, exercise, or defend legal claims.
Right to restriction of processing
Under the conditions of the GDPR, you can request the restriction of processing of your data.
Right to data portability
If the conditions of the GDPR are met, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller.
Right to object
You have the right to object to processing based on our legitimate interest.
For processing for direct marketing purposes, you have the right to object at any time. After exercising your objection, we will no longer process your data for this purpose.
Right to withdraw consent
If processing is based on your consent, you can withdraw it at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
XXIV. How to Exercise Your Rights
You can exercise your rights at:
or in writing to the address:
A2E, s.r.o.
SNP 498/96
039 01 Turčianske Teplice
Slovak Republic
In case of reasonable doubts about the identity of the person who submitted the request, we may ask for additional information necessary to verify identity.
We will not automatically request a copy of your ID card to verify identity if a more reasonable and less invasive method of verification exists.
We will respond to the request within the period specified by the GDPR.
XXV. Right to Lodge a Complaint
If you believe that we are processing your personal data in violation of legal regulations, you have the right to lodge a complaint or propose initiating proceedings with the supervisory authority:
Office for Personal Data Protection of the Slovak Republic
Current contact details of the office are available at:
Exercising your rights with the supervisory authority does not affect your right to appeal to a court.
XXVI. Changes to These Policies
We may reasonably update these Privacy Policies, especially if:
- the method of personal data processing changes,
- we start using a new provider or service,
- legal regulations change,
- our business or technical processes change.
The current version is always published on the Tiler Market website.
Substantial changes that, according to legal regulations, require specific notification of data subjects or new consent, will be addressed appropriately.
Valid and effective from 26. 8. 2026.