Privacy Policy

Version EN 2026-09-23-v3 · effective from 23.9.2026

1. Operator and contact

The operator isNizum s. r. o., Baka 40, 930 04 Baka, Slovak Republic, PIN 57420092, VAT number 2122730698, VAT number SK2122730698, Commercial Register of the District Court of Trnava, Section Sro, Insert No 61925/T. Contact:<a href="mailto:info@virtualcockpit.eu,+421 905 880 898and WhatsApp, usually on weekdays 9:00 to 17:00.

2. Scope and principles

These principles explain the processing of data when using virtualcockpit.eu, purchase, payment, transport, installation, customer support, withdrawal, complaint, warranty, review and marketing. We process data legally, transparently, only for the intended purpose, to the extent necessary and for the time needed. If the customer is outside the EU/EEA, we also respect mandatory local rules that must be applied.

3. Data categories

  • identification and contact details, address, delivery details, language and country;
  • corporate, invoicing and tax data, including IČ, VAT ID and the outcome of the VIES verification;
  • order, selected product, price, transport, method and status of payment; Nizum does not normally receive full payment card details;
  • vehicle data and compatibility, such as model, year, equipment, VIN or photographs if necessary;
  • the installation and partner details, the date, the transfer protocol and the authorised test run;
  • content of communication, complaint, withdrawal, warranty, service, reviews and customer account;
  • technical, security and consent details: IP address, time, browser, device, necessary cookies, security logs and cookie selection log;
  • for authorised analytics of the event of the purchasing funnel, product, step, category of error and chosen payment method. We do not store forms, passwords, complete payment details or content of sensitive fields.

4. Purposes and legal bases

  • Contract and pre-contractual steps:order, account, verification of compatibility, payment, delivery, installation, support, withdrawal and claim, Article 6 (1) (a). b) GDPR.
  • Legal obligation:accounting, taxation, consumer protection, product safety, rights handling and interaction with the authorities of the Member States c) GDPR.
  • Legal interest:web security, fraud prevention, defence and claim proof, basic aggregated improvement of operation and property protection; each time after assessing the adequacy of Article 6 (1) (a) f) GDPR.
  • Consent:optional analytical and marketing cookies, newsletters and marketing reports a) GDPR. The consent may be revoked at any time without prejudice to earlier lawful processing.

5. Sources and obligation to provide data

We obtain the data from you, from the order, communication and equipment, from the payment or transport provider and from the company purchase from public registers and VIES. We need data marked as mandatory for the contract or legal obligation; without them it may not be possible to conclude or fulfil the order. Marketing and optional cookies are not mandatory.

6. Beneficiaries

We only transmit the data to the following categories of beneficiaries:

  • hosting, IT message, WordPress/WooCommerce/WPML, email and security services;
  • carriers and dispensing networks, including Packet, foreign carriers, customs agents and authorities;
  • Payment and financial partners Tatra banka/TatraPay, GoPay and Skip Pay; they can act as separate operators in their service;
  • SuperInvoices, Accountants, Tax, Legal and Audit Advisers;
  • Your selected external installer, to whom we provide only the data needed to download the product, contact and installation;
  • Google Ireland and Meta Platforms Ireland in analytics or marketing only according to your choice of cookies;
  • Allianz insurance undertaking and experts, where necessary to deal with the incident or claim;
  • public authorities, if required by law.

7. Non-EU/EEA transfers and global delivery

On delivery outside the EU/EEA, we will provide the necessary data to the carrier, its foreign partners and the customs authorities of the destination country. Some IT, analytics or communication providers may process data also outside the EU/EEA. In such a case, we use the adequacy decision, the European Commission’s standard contractual clauses or another legal guarantee and risk-based supplementary measures. Details of the specific guarantee will be provided upon request.

8. Storage period

  • orders, invoices and accounting/tax documents: normally 10 years or longer, if required by law;
  • complaints, resignations, servicing and warranties: during equipment, duration of rights and subsequent limitation periods, as a general rule not more than 5 years after the closure of the case, unless the dispute or law requires longer;
  • customer account: until cancellation or reasonable inactivity, while the mandatory contractual documents remain preserved;
  • availability requests and warnings: up to equipment and, as a rule, up to 3 years to protect claims;
  • marketing: pending withdrawal of consent or objection; we may leave a limited log-out record to respect the choice;
  • detailed analytical events and common safety logos: typically no more than 90 days, then deletion or aggregation if the incident does not require longer;
  • proof of consent and the text of legal documents: for the period necessary to demonstrate compliance.

9. Cookies and Analytics

We use the necessary cookies for the function of basket, login, language, security and saving options. Analytical and marketing technologies shall only be activated upon consent. The option can be changed at any time via Cookie Settings. The exact list, providers and times are inCookies policy.

10. Automated decision-making

Nisum does not exercise decision-making based solely on automated processing which would have legal or similar significant effects on the customer. Tatra banka, GoPay or Skip Pay may individually assess funding or payment according to its own rules; information is provided by the partner.

11. Rights of the data subject

You have the right to access, repair, deletion, restriction, portability, withdrawal of consent and object to processing based on legitimate interest; you can object at any time to direct marketing. The law is not absolute if we have to keep the data out of law or legal claims. Please send the request to info@virtualcockpit.eu. We can reasonably verify the identity. We will respond within the time limit according to GDPR.

12. Security, children and complaint

We use access control, HTTPS, updates, backups, limited data scope and other appropriate measures. E-shop is not targeted for children. If you believe that processing violates the rules, please contact us or file a complaint with the Office for Personal Data Protection of the Slovak Republic, Border 12, 820 07 Bratislava 27,dataprotection.gov.sk. You can also contact the supervisory authority in your country of usual residence.

13. Final provisions

We will update and notify you if necessary when a significant change of policy occurs. Translations serve customers in their language; in contrast, the Slovak version is decisive only to the extent that they are not affected by mandatory rights. In Bake, 23 September 2026.