Privacy Policy
Last updated: 29 September 2026
This Privacy Policy explains how Showtacle s.r.o., operating the LED Strip Studio website and online shop, processes personal data when you visit our website, create an account, place an order, purchase our products or services, download or activate software, subscribe to communications, submit a contact form, or otherwise communicate with us.
We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation – GDPR) and applicable Slovak data protection legislation.
1. Data Controller
The controller responsible for your personal data is:
Showtacle s.r.o.
Ľubietovská 8
851 01 Bratislava
Slovakia
Company ID (IČO): 36 735 361
Tax ID (DIČ): 2022320652
VAT ID (IČ DPH): SK2022320652
Email: info@ledstripstudio.com
Phone: +421 948 280 393
LED Strip Studio is a brand operated by Showtacle s.r.o.
We have not appointed a Data Protection Officer (DPO), as we currently do not consider ourselves subject to the mandatory DPO appointment requirements under Article 37 GDPR.
For privacy-related questions or requests, please contact us at:
2. Personal Data We Process
Depending on how you interact with our website and services, we may process the following categories of personal data:
- name and surname;
- company name;
- billing and delivery address;
- email address;
- telephone number;
- company identification and VAT information;
- account credentials and account information;
- order and transaction information;
- purchased products, licences and services;
- payment status and transaction identifiers;
- software licence and activation information;
- customer support correspondence;
- information submitted through contact or enquiry forms;
- information included in complaints or warranty claims;
- photographs, videos or other files voluntarily provided to us;
- product reviews and ratings;
- IP address;
- browser and device information;
- server and security logs;
- cookie identifiers and similar online identifiers;
- website usage information; and
- any other information you voluntarily provide to us.
We do not intentionally collect more personal data than reasonably necessary for the purposes described in this Privacy Policy.
3. Purposes and Legal Bases of Processing
We process personal data only where we have an appropriate legal basis under the GDPR.
3.1 Orders, products, licences and services
We process personal data necessary to:
- process and fulfil orders;
- deliver physical products;
- provide software licences and digital products;
- provide online training or other services;
- communicate with you regarding your order;
- provide customer support;
- process returns, withdrawals and refunds; and
- administer contractual relationships.
Legal basis: Article 6(1)(b) GDPR – performance of a contract or taking steps at the request of the data subject prior to entering into a contract.
3.2 Invoicing, accounting and tax obligations
We process personal data contained in invoices, accounting documents and related records in order to comply with our legal obligations.
Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation.
Accounting documentation is retained for the periods required by applicable Slovak law. Certain accounting records are subject to a ten-year statutory retention period.
3.3 Customer accounts
If you create an account, we process your account information, including:
- email address;
- password or authentication information;
- saved addresses;
- order history; and
- account preferences.
Legal basis: Article 6(1)(b) GDPR – performance of a contract.
We retain your account while it remains active. Where appropriate, inactive accounts may be deleted after a reasonable period, subject to legal obligations and legitimate business needs.
3.4 Customer support and enquiries
When you contact us, we process the information necessary to respond to your enquiry, provide technical or pre-sale assistance, handle a complaint, or otherwise communicate with you.
Depending on the circumstances, the legal basis may be:
- Article 6(1)(b) GDPR – taking steps prior to entering into a contract or performance of a contract; or
- Article 6(1)(f) GDPR – our legitimate interest in responding to enquiries, providing customer support and managing our business.
3.5 Complaints, returns and warranty claims
We process information necessary to handle:
- returns;
- statutory withdrawal requests;
- complaints;
- warranty claims;
- defective products;
- refunds; and
- related correspondence.
Legal basis: Article 6(1)(b) GDPR where processing is necessary to perform the contract, and/or Article 6(1)(c) GDPR where processing is required by law.
We may retain relevant information for as long as reasonably necessary to administer the claim and comply with applicable legal and accounting obligations.
3.6 Product reviews
If you submit a product review, we may process your name or nickname, rating and review text.
Legal basis: Article 6(1)(f) GDPR – our legitimate interest in displaying customer feedback and improving our products and services.
Reviews may remain publicly visible until removed by you or by us.
We may remove reviews that are unlawful, misleading, abusive, defamatory, spam, unrelated to the relevant product, or otherwise violate our website rules.
3.7 Newsletter and marketing communications
We may send newsletters, promotional emails and other direct marketing communications where we have an appropriate legal basis.
Where consent is required, we rely on:
Article 6(1)(a) GDPR – consent.
You may unsubscribe at any time using the unsubscribe mechanism included in our marketing emails or by contacting us.
Where applicable law permits direct marketing to existing customers on the basis of a legitimate interest or a similar statutory “soft opt-in” mechanism, we may rely on that legal basis provided that the applicable requirements are satisfied and an easy opt-out is provided.
3.8 Website security and technical operation
We process technical information such as IP addresses, browser information, device information and server logs where necessary to:
- operate the website;
- maintain security;
- prevent fraud and abuse;
- detect attacks;
- investigate technical incidents;
- maintain system stability; and
- protect our rights and systems.
Legal basis: Article 6(1)(f) GDPR – legitimate interest in maintaining the security and reliable operation of our website and systems.
Security and server logs are retained only for as long as reasonably necessary for these purposes, taking into account security, technical and legal requirements.
3.9 Analytics and advertising
Where required by applicable law, analytics, advertising and similar non-essential technologies are activated only after obtaining the required consent.
Depending on your choices, we may process:
- cookie identifiers;
- online identifiers;
- device information;
- browsing activity;
- interactions with our website;
- advertising information; and
- aggregated or pseudonymised usage information.
Legal basis: Article 6(1)(a) GDPR – consent, where consent is required.
You may change or withdraw your consent through our cookie settings.
3.10 Legal claims and protection of rights
We may process personal data where necessary to:
- establish;
- exercise;
- investigate; or
- defend
legal claims or protect our legal rights and legitimate business interests.
Legal basis: Article 6(1)(f) GDPR – legitimate interest.
Where another legal basis applies, we may rely on that basis instead.
4. Required Information
Certain personal data is necessary to place and fulfil an order.
Where information is marked as required during checkout, failure to provide that information may prevent us from:
- accepting or processing an order;
- issuing an invoice;
- delivering the products;
- providing a software licence;
- providing a service; or
- fulfilling a legal obligation.
Information requested for optional purposes, such as marketing, is not required to complete a purchase unless expressly stated otherwise.
5. Recipients and Service Providers
We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy.
Depending on the services you use, these recipients may include:
Hosting and infrastructure
A2 Hosting / hosting.com
Used for website, hosting and infrastructure services.
Website security and content delivery
Cloudflare, Inc.
Used for website security, content delivery, network services and related technical functions.
Payment processing
Stripe Payments Europe, Limited
Used to process payments.
Payment card details are processed by the relevant payment provider and are not stored by us in full payment-card form.
Email and communication services
Brevo SAS
Used for transactional email delivery and, where applicable, newsletters and marketing communications.
Analytics and advertising
Google Ireland Limited / relevant Google services
Used for analytics and advertising measurement where applicable and where the required consent has been obtained.
Delivery providers
Courier companies, postal operators and other logistics providers may receive the information necessary to deliver your order.
Accounting and professional service providers
Accountants, auditors, lawyers, IT providers and other professional advisers may receive personal data where reasonably necessary to provide services to us or comply with legal obligations.
Public authorities
We may disclose personal data to courts, tax authorities, customs authorities, law enforcement authorities, regulators or other public authorities where required or permitted by law.
We do not sell your personal data.
Where a service provider processes personal data on our behalf, we take appropriate steps to ensure that the processing is governed by appropriate contractual and data protection safeguards where required by GDPR.
6. International Transfers
Some service providers used by us may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we use an appropriate transfer mechanism under Chapter V GDPR where required.
Depending on the recipient and circumstances, this may include:
- an adequacy decision of the European Commission;
- participation in an applicable approved data transfer framework;
- Standard Contractual Clauses approved by the European Commission; or
- another legally recognised transfer mechanism.
The specific mechanism may depend on the service, processing activity and recipient involved.
Where goods are shipped outside the EEA, delivery and customs information may need to be transferred to carriers, customs authorities or other relevant parties in the destination country where necessary to fulfil the order or comply with legal requirements.
7. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Retention periods may depend on:
- the nature of the relationship with you;
- legal and accounting obligations;
- warranty and complaint periods;
- limitation periods;
- regulatory requirements;
- security requirements; and
- the need to establish or defend legal claims.
Examples include:
| Category | Typical retention |
|---|---|
| Order and contractual information | For the duration of the contractual relationship and thereafter as reasonably necessary for legal claims and obligations |
| Accounting and tax records | As required by applicable Slovak law, including statutory ten-year periods where applicable |
| Customer account | Until deletion or closure, subject to legal obligations |
| Customer support | For as long as reasonably necessary to handle the enquiry and related legal or business needs |
| Complaints and warranty claims | For the duration of the claim and any applicable legal or statutory period |
| Marketing consent | Until consent is withdrawn or otherwise no longer applicable |
| Newsletter subscription | Until unsubscribe or withdrawal of consent |
| Server/security logs | For the period reasonably necessary for security and technical purposes |
| Analytics and advertising data | According to the applicable cookie settings and relevant service configuration |
| Legal claims | Until the relevant claim or proceeding has been finally resolved and applicable retention periods have expired |
The actual retention period may be longer where required by law or where necessary to establish, exercise or defend legal claims.
8. Your Rights
Subject to the conditions and limitations provided by GDPR, you have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- request erasure of personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- object to direct marketing at any time;
- receive personal data in a structured, commonly used and machine-readable format where the right to data portability applies;
- withdraw consent where processing is based on consent; and
- lodge a complaint with a competent supervisory authority.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Some rights are subject to exceptions. For example, we may be required by law to retain certain personal data even if you request its deletion.
9. Exercising Your Rights
To exercise your rights or ask questions about our processing of personal data, contact us at:
We may need to verify your identity before fulfilling certain requests in order to protect your personal data from unauthorised disclosure.
We will normally respond to a valid request within one month of receiving it.
Where permitted by GDPR, this period may be extended by up to two additional months where the request is complex or numerous. We will inform you where an extension applies.
10. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
In Slovakia, the supervisory authority is:
Office for Personal Data Protection of the Slovak Republic
Galvaniho 7/B
821 04 Bratislava
Slovak Republic
Website: dataprotection.gov.sk
The Office is the Slovak supervisory authority responsible for personal data protection.
You may also contact the supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement where applicable.
11. Automated Decision-Making and Profiling
We do not use automated decision-making that produces legal effects concerning you or similarly significantly affects you.
Some third-party advertising or analytics services may use automated processing or profiling for advertising measurement or personalisation where applicable. Such processing is subject to the relevant service provider’s terms and your applicable cookie and consent choices.
12. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some cookies are strictly necessary for the website and online shop to function, including technologies used for:
- shopping cart functionality;
- account authentication;
- checkout;
- security;
- session management; and
- essential website functionality.
Where required by law, non-essential cookies, including analytics, advertising and certain preference technologies, are used only after the required consent has been obtained.
You can manage your cookie preferences through the cookie consent mechanism provided on our website.
More information is available in our Cookie Policy.
13. Security
We implement reasonable technical and organisational measures designed to protect personal data against:
- unauthorised access;
- accidental loss;
- destruction;
- alteration;
- disclosure; and
- other unlawful processing.
Depending on the relevant processing activity, these measures may include:
- HTTPS encryption;
- access controls;
- authentication mechanisms;
- password protection;
- encrypted password storage;
- system monitoring;
- backups;
- security updates; and
- restricted access to personal data.
No internet transmission or electronic storage system can be guaranteed to be completely secure.
14. Third-Party Websites and Services
Our website may contain links to third-party websites, services, software or platforms.
If you follow such a link or use a third-party service, your personal data may be processed according to that third party’s own privacy policy and terms.
We are not responsible for the privacy practices of third-party websites or services that we do not control.
15. Children’s Data
Our website and Shop are not intentionally directed at children.
We do not knowingly collect personal data from children for marketing purposes.
If you believe that a child has provided personal data to us without appropriate authorisation, please contact us at:
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes to our services;
- changes to our technology;
- changes to the third parties we use;
- changes to applicable legislation; or
- changes to our data processing practices.
The current version will always be published on this page.
The Last updated date at the beginning of this Privacy Policy indicates when the policy was most recently revised.
Where required by law, we will provide additional notice of material changes.
17. Contact
If you have any questions about this Privacy Policy or our processing of personal data, please contact:
Showtacle s.r.o.
Ľubietovská 8
851 01 Bratislava
Slovakia
Email: info@ledstripstudio.com
Phone: +421 948 280 393
LED Strip Studio is operated by Showtacle s.r.o.