Privacy policy

Privacy Policy

Data Controller

The controller of personal data is:

Reverie Studio s. r. o.
Tehelná 443/17
831 03 Bratislava – Nové Mesto
Slovak Republic

Company ID: 53 821 181
Tax ID: 2121510688
VAT ID: SK2121510688

Email: janaspanirova@st-martin.sk
Telephone: +421 949 364 494

Personal Data We May Process

Depending on how you use the website, we may process in particular:

your first and last name, email address and any other information you voluntarily provide through the contact form or by email;
your email address and information relating to your consent to, or withdrawal of consent from, receiving our newsletter;
technical information relating to your visit to the website, such as your IP address, device information, browser information, security logs and other technical data;
information about cookie settings and consents granted;
information about your interaction with the website where the relevant analytics or similar technologies have been enabled.

Stmartinpharmacia.com does not currently accept online orders or payments. Therefore, in its current mode, we do not process personal data through this website for the purpose of handling online orders.

Purposes and Legal Bases for Processing

We may process personal data in particular for the following purposes:

Communication and handling enquiries – for the purpose of responding to a message, enquiry or request submitted by a visitor.

Newsletter and marketing communications – on the basis of the data subject’s prior consent.

Website operation and security – to ensure the functionality, protection and technical security of the website and our systems.

Cookies and analytics tools – essential technologies may be used to ensure the proper functioning of the website; other technologies are used in accordance with the relevant consent provided by the visitor.

Compliance with legal obligations and protection of legal claims – where such an obligation arises under applicable law or where processing is necessary to protect our rights and legitimate interests.

We send marketing emails only to persons in respect of whom we have an appropriate legal basis for doing so.

Consent to marketing communications may be withdrawn at any time via the unsubscribe link included in the marketing communication or by contacting the controller.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

Recipients of Personal Data

Personal data may, to the extent necessary, be disclosed to providers of technical infrastructure and hosting services, the operator of the Shopify e-commerce platform, providers of email or communication services, analytics and security service providers, professional advisers, or public authorities where required by law.

Such recipients process personal data only to the extent necessary for the relevant purpose.

Transfers of Personal Data Outside the EEA

Some technical service providers may process personal data outside the European Economic Area.

Where such a transfer takes place, the controller will ensure that an appropriate legal mechanism is used in accordance with Chapter V of the GDPR.

Retention Period

We retain personal data only for as long as necessary for the purpose for which it was collected.

Data relating to communications is retained for the period necessary to deal with the communication and subsequently only for as long as necessary to protect legal claims or comply with legal obligations.

Data used for sending newsletters is processed until consent is withdrawn or until another applicable legal basis ceases to apply. Records of consent or withdrawal of consent may be retained for as long as necessary to demonstrate compliance with legal obligations.

Technical and security logs are retained for as long as necessary and in accordance with the settings of the relevant systems.

Rights of the Data Subject

Subject to the conditions laid down in the GDPR, the data subject has, in particular, the right:

to access their personal data;
to have inaccurate data corrected;
to have personal data erased;
to restrict processing;
to object to processing;
to data portability where the statutory conditions are met;
to withdraw consent at any time where processing is based on consent;
to lodge a complaint with the competent supervisory authority.

The GDPR requires that, when personal data is collected, the data subject is provided in particular with information about the controller, the purposes and legal bases of processing, recipients, retention periods and the rights of the data subject.

Supervisory Authority

Office for Personal Data Protection of the Slovak Republic
Galvaniho Business Centrum II
Galvaniho 7/B
821 04 Bratislava
Slovak Republic

The current registered office of the authority has been located at Galvaniho 7/B since June 2026.

External Websites

When you click on a link leading to the website of a manufacturer or external retailer, the processing of personal data on that external website is governed by the privacy policy of its respective operator.

Reverie Studio s. r. o. has no control over the way personal data is processed on external websites.

Changes to this Privacy Policy

This Privacy Policy may be updated, in particular where there are changes to the functionality of the website, the services used or applicable legislation.

Effective from: 17 August 2026