Privacy notice
Effective from 23 October 2026
Who processes your data
The controller is ShopStack s. r. o., Novomestská ulica 9514/9, 917 01 Trnava, Slovakia, company ID 57 466 505, registered in the Commercial Register of the District Court Trnava, section Sro, file 62144/T. Contact: support@shopstack.eu, +421 911 541 875. We have not appointed a data protection officer, as the law does not require one for us.
This notice applies to the ShopStack websites and add-on admin panels:
- shopstack.eu
- productwidgets.cz + app.productwidgets.cz
- reviews.shopstack.eu
- linkwithink.com
Data that an online store keeps in the add-on itself (for example products, orders or reviews) we process as a processor under the terms and the data processing agreement of that add-on. The store is the controller of that data.
What data, why and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Measuring traffic and improving the websites and add-ons (Google Analytics 4, Microsoft Clarity) | pseudonymous identifier, pages, clicks, movement on the page, device, browser, approximate location from IP | your consent, Art. 6(1)(a) GDPR | Google Analytics 14 months, Clarity recordings 30 days, Clarity aggregate statistics 13 months |
| Record of your cookie consent | random consent ID, choice, time, banner version, truncated IP address, browser | legal obligation to prove consent, Art. 6(1)(c) GDPR | 3 years |
| Replying to an e-mail or enquiry | name, e-mail, phone, message | legitimate interest in replying, Art. 6(1)(f) GDPR | 2 years from the last contact |
| Partner programme application | name, contact details, company details, website | entering into and performing a contract, Art. 6(1)(b) GDPR | for the cooperation and 10 years after it for accounting |
| Add-on account and invoicing | name, e-mail, store name, billing details | performance of a contract and legal obligations, Art. 6(1)(b) and (c) GDPR | while you use the add-on, invoices 10 years |
| Security and operation of the websites | IP address, time, requested URL, error reports | legitimate interest in protecting the websites, Art. 6(1)(f) GDPR | usually up to 30 days |
Who receives the data
Only companies that help us run the websites and add-ons. All of them have a data processing agreement with us.
- Google Ireland Ltd. – Google Analytics 4, Search Console
- Microsoft Ireland Operations Ltd. – Microsoft Clarity
- Gaelta Agency s.r.o., Trnava – Consentry cookie banner and consent records, website management
- Cloudflare, Inc. – hosting and website protection
- Resend, Inc. – sending e-mails from forms and add-ons
- the add-ons' server providers in the EU and our accountant
Google, Microsoft, Cloudflare and Resend may also transfer data to the USA. The transfer is protected by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
Your rights
You have the right to access, rectify and erase your data, to restrict its processing and to data portability. You can object to processing based on legitimate interest. You can withdraw your cookie consent at any time in the cookie settings; this does not affect processing that took place before. Just write to support@shopstack.eu and we will reply within 30 days.
You can lodge a complaint with the Slovak Office for Personal Data Protection (dataprotection.gov.sk) or the supervisory authority in the country where you live.
We do not carry out automated decision-making or profiling with legal effects. Details about cookies are in our cookie policy.