Privacy policy and cookies instructions

These Privacy Policy and Cookie Instructions (hereinafter referred to as the “Policy”) describe how we collect, process, protect, and use personal information in connection with the operation of the online store nextrabiochem.eu and the provision of related services in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR“).

Identification of the Controller and Service Provider:

• Contractual Seller (Controller): MALAM – PAGI – SORE LTD, registered office: 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF, Company Number: 17441114
• Fulfillment, Logistics and Service Company (Processor): Hainburg, s. r. o., Prúdová 329/3A 821 05 Bratislava, SR, Company ID: 56216513
• Contact E-mail: info@nextrabiochem.eu

1. PROCESSING OF PERSONAL DATA
2. Processing of personal data in the case of using the contact form

If you contact us regarding our products and services, we will process your contact details that you provide to us via the contact form. This concerns personal data to the extent of: name, surname, place of residence, e-mail address, telephone number, billing address, delivery address, data obtained from cookies, and IP addresses.

• For what reason? Based on the submitted personal data, we will subsequently contact you regarding our product offer.
• On what legal basis? This is processing based on Article 6(1)(b) of the GDPR – performance of a contract, or taking steps prior to entering into a contract at your request. If you did not provide us with this personal data, we would not be able to communicate with you for the purpose of concluding a contract for the delivery of our products.
• How long will we process personal data? If we do not establish further cooperation, we will process your personal data for a maximum of 5 years from our last communication.

2. Processing of personal data in the case of a purchase

If you make a purchase from us, we will work with personal data that we need from you to ensure the conclusion of a contract for the provision of our products or services. These are mainly billing and delivery details: name, surname, place of residence, e-mail address, telephone number, billing address, delivery address, data obtained from cookies, and IP addresses.

• For what reason? We need to process personal data so that we can fulfill our obligations arising from the contract – delivery of goods. By using contact details, we will also communicate with you regarding the status of your order, or regarding complaints or your questions. We will further process personal data to fulfill our obligations arising from generally binding legal regulations (mainly for accounting and tax purposes, or for handling complaints).
• On what legal basis do we process personal data? This is processing based on Article 6(1)(b) of the GDPR – performance of a contract and Article 6(1)(c) of the GDPR – fulfillment of our legal obligation. If you did not provide us with this personal data, we would not be able to conclude a contract with you for the delivery of our goods.
• How long will we process personal data? For the duration of the delivery of goods and then for a maximum of 5 years from the last delivery of goods or provision of service.

3. Newsletter (commercial communication)

If you have purchased goods or services from us and at the same time have not explicitly refused the sending of marketing communications, we will use your e-mail address to send our marketing messages.

• On what legal basis? This is processing based on Article 6(1)(f) of the GDPR – our legitimate interests, which consist of marketing communications targeted at our customers.
• How long will we process personal data? 5 years from your last purchase. In the event that you no longer wish to receive our marketing communications, you can unsubscribe at any time via the link in the e-mail or you can contact us at the e-mail: info@nextrabiochem.eu.

1. WHO HAS ACCESS TO THE DATA?

Your personal data remains primarily with the Controller and, for logistics purposes, with the fulfillment partner. Nevertheless, some companies or other persons work for us who have access to your personal data due to the fact that they help us run our E-shop:

• Hainburg, s. r. o. (Slovakia) – a fulfillment, logistics, and service company that ensures order management, packaging, dispatch, and customer service.
• Packeta Slovakia s. r. o., registered office: Sliačska 1E, 831 02 Bratislava, Company ID (IČO): 48136999 – a third party providing transport services.

Transfer to third countries:

The Controller transfers personal data of individuals in the form of cookies to third countries to the following entities:

• Google HQ: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Further information on privacy can be found at: Google Privacy & Terms
• META Pixels: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (with transfer to the USA). Further information on privacy can be found at: Meta Privacy Policy

III. WHAT ELSE YOU SHOULD KNOW

• Data processing in our company also takes place through automated systems or profiling (especially in connection with analytical and advertising cookies).
• If you have any questions regarding the processing of personal data, please contact us at the e-mail address: info@nextrabiochem.eu.

1. USE OF COOKIES

Cookies are text files containing a small amount of information that are downloaded to your device when you visit our website. Cookies perform various tasks – they enable efficient navigation, remember your preferences, and improve the overall user experience, including the customization of online advertising.

We use the following cookies on the website:

• Essential cookies: Required for the operation of the website, enabling basic functionality. This category of cookies cannot be disabled and they are used without prior consent.
• Analytical/statistical cookies: Allow us to recognize and count the number of visitors and track how visitors use the website in order to improve it. We run these files only with your prior consent.
• Advertising cookies: Used to track preferences and create advertising profiles in order to display relevant advertising. We run these files only with your prior consent.

Third parties (including third-party service providers such as Google and Meta) may also use cookies and/or access data collected by cookies on the website.

Overview of used cookies:

Technical name	Publisher	Purpose and description of cookies	Duration
Functional cookies	Controller / Third parties	Relate to user choices regarding the use of cookies (accept, reject, customize).	According to settings
Statistical cookies	Google / Controller	Obtaining statistics regarding the use of the website (used only with consent).	According to settings
Essential cookies	Controller	Ensure the correct functioning of the website and its usage (used without consent).	According to settings
Advertising cookies	META / Google / Controller	Used to create advertising profiles and marketing activities (used only with consent).	According to settings

Consent can be expressed via a checkbox in the so-called cookie banner. You can refuse or adjust cookies at any time in your internet browser settings:

• Internet Explorer
• Google Chrome
• Firefox
• Safari
• Opera
• Microsoft Edge

1. YOUR RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA

The GDPR grants you the right to contact us and request:

• Information on what personal data of yours we process,
• Access to this data and its updating, correction, or restriction of processing,
• A copy of the processed personal data,
• Erasure of personal data in certain situations,
• Data portability.
• You can object at any time to processing based on legitimate interest (including profiling for marketing purposes).

If you believe that we are handling your data incorrectly, you have the right to lodge a complaint with the relevant European data protection supervisory authority or to turn to a court in accordance with EU international jurisdictional rules.

This Policy is effective as of September 15, 2026.