Privacy policy

This page explains how we process your personal data on our website and in the online service portal (service booking). We follow Regulation (EU) 2016/679 (GDPR) and the Slovak Act No. 18/2018 on personal data protection.

Who processes your data

RIVAL CAR spol. s r.o., Komárňanská cesta 88, 940 01 Nové Zámky, Slovakia, company ID (IČO): 31 447 279, registered in the Commercial Register of the District Court Nitra, section Sro, file No. 3505/N.

Contact for questions about personal data: info@rivalcar.com, phone +421 35 691 3021. We have not appointed a data protection officer, as the law does not require us to.

What data we process and why

Questions through the contact form and offer inquiries

  • Data: name, e-mail, phone (optional), your message and, where relevant, the car from our offers you are interested in.
  • Purpose: to answer your question or prepare an offer.
  • Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR); for general questions, our legitimate interest in answering (point (f)).
  • Retention: at most 1 year after our last contact; if a contract follows, according to the rules for that contract.

Newsletter

  • Data: e-mail address.
  • Purpose: sending offers, news and service deals.
  • Legal basis: your consent (point (a)), which you give by ticking the box when you subscribe. You can withdraw it at any time with the unsubscribe link in every newsletter or by e-mail to info@rivalcar.com.
  • Retention: until you withdraw your consent.

Online service portal (service booking)

  • Data: phone number, name, e-mail (if you give it), licence plate, VIN and other vehicle details, bookings, your notes and the text messages you exchange with us, service history.
  • Purpose: signing in with a one-time code by text message, booking and confirming appointments, a reminder the day before, planning the workshop's work and showing your car's service history.
  • Legal basis: performance of a contract and steps before entering into it (point (b)); for the service history and security records, our legitimate interest (point (f)).
  • Retention: account, vehicle and booking data while you use the portal and for 3 years after your last booking or sign-in; text messages for 90 days; security records for 1 year. Data we must keep under other laws (for example accounting documents) is kept for the period those laws require.

Running and securing the websites

  • Data: IP address and technical details of the request.
  • Purpose: protection against misuse (for example limiting sign-in attempts) and fixing technical problems.
  • Legal basis: legitimate interest (point (f)).
  • Retention: the IP address is only used briefly in the server's memory; technical logs (without IP addresses) are kept for 14 days.

Cookies

The websites only use cookies they need to work, which do not require your consent:

  • lang – your language (1 year),
  • theme – light or dark display (1 year),
  • consent – your decision in the welcome window (accepted: 1 year, declined: until you close the browser),
  • technical cookies that protect the forms and keep you signed in to the portal (until you close the browser).

We do not use analytics or advertising cookies.

Who we share data with

  • Mobile operator – we send text messages from our workshop's mobile phone through its SIM card.
  • Google – the Contact page shows a Google Maps map. Google receives your IP address, and the map may set its own cookies. The provider is Google Ireland Limited; data may also be transferred to the USA under the EU–US Data Privacy Framework. The font and the other website files are served from our own server.
  • IT service providers who run the server and the applications for us, as our processors.
  • Public authorities, where the law requires it.

We do not sell your data or use it for automated decision-making or profiling.

Your rights

You have the right:

  • to access your data and get a copy,
  • to have incorrect data corrected,
  • to have your data erased when we no longer need it or you withdraw your consent,
  • to restrict processing,
  • to data portability,
  • to object to processing based on legitimate interest,
  • to withdraw your consent at any time (this does not affect processing before the withdrawal).

Send your request to info@rivalcar.com. We will reply without undue delay and within one month at the latest.

If you believe we are not handling your data properly, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

Do you have to give us your data?

No. Without contact details, however, we cannot answer you, and without a phone number and vehicle details we cannot book a service appointment.

Last updated: 2 November 2026