Privacy Policy & GDPR Disclosure

Privacy Policy & Data Protection Notice

Last Updated: 3 August 2026

1. Controller Identification & Compliance

The Sleek Geek is an EU-based commercial entity operated by Jiri Houra (Self-Employed Individual, Bulgaria). All personal data processing operates strictly in accordance with Article 12 and Article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR).

2. Data Collection Parameters

During checkout and account initialization, we capture only essential commercial transactions data: billing and fulfillment name, shipping destination, communication email address, and telephone contact. All debit, credit, and financial authorizations are handled via encrypted third-party payment settlement institutions; we neither retain nor observe banking card credentials.

3. Processing Lawfulness & Purpose

In adherence to Article 6(1)(b) and Article 6(1)(c) of Regulation (EU) 2016/679, data processing is strictly constrained to order fulfillment, dispatch logistics, statutory tax reporting, and mandatory EU warranty administration.

4. Logistics Third-Party Transmission

Destination coordinates and delivery addressee identities are transmitted securely to verified logistics transport operators for physical delivery. We explicitly prohibit commercial monetization, lending, or brokering of consumer profiles to external advertising syndicates.

5. Data Retention Horizon

In compliance with Bulgarian fiscal and statutory accounting directives, transactional records are preserved for a duration of 7 fiscal years following settlement. Non-statutory operational records can be purged upon request.

6. Consumer Statutory Data Rights

Pursuant to Articles 15 through 22 of Regulation (EU) 2016/679, individuals hold unconditional rights to: obtain comprehensive copies of archived personal records, rectify erroneous parameters, mandate complete administrative erasure (the Right to be Forgotten), restrict systematic processing, and initiate formal supervisory dispute processes before the Bulgarian Commission for Personal Data Protection (CPDP).

7. Data Protection Officer Contact

Direct all data access requests, modification mandates, or deletion notices to: hourajiripersonal@gmail.com.