Privacy Policy
Who we are
Our website address is https://2troubletravelers.com.
Operator: Skeasyy s.r.o. Registered office: Kaštieľska 4, 821 05 Bratislava, Slovak Republic Company registration number: 57173915 VAT number: 2122600238 Registered in the Commercial Register of the Municipal Court Bratislava III, section: Sro, file no. 192191/B
Contact details regarding data protection: Email: eshop@2troubletravelers.com Telephone: 0908 801 152
The controller is not obliged to appoint a data protection officer (DPO) and has not done so.
The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018. on the protection of personal data.
What personal data do we collect and why do we collect it?
Shopping at an online shop
When you make a purchase from us, we will ask you to provide the following details: first name and surname, email address, country, and – for business customers – optionally the company name, registered office, company registration number, tax identification number and VAT number.
We use this data to:
- processing the order and delivering the digital product,
- sending order details and a download link,
- issuing an invoice,
- the processing of any complaints or refunds,
- compliance with legal obligations.
Legal basis: performance of a contract — Article 6, section 1, b) GDPR pri vybavení objednávky; plnenie zákonnej povinnosti — čl. 6, section 1, c) GDPR pri účtovných dokladoch.
The provision of this information is essential for the conclusion and performance of the contract. Without them, it is not possible to process the order.
We never collect or store payment card details — these are processed exclusively by the payment gateway provider.
During your visit to the shop, we also use cookies to record the products you have viewed and the contents of your basket, to ensure the shop functions correctly.
We do not create an account in the shop — purchases are made as a guest without registration.
Reviews and comments
When you leave a comment or product review on the website, we collect the data displayed in the form, as well as your IP address and browser User Agent, for the purpose of protecting against spam.
An anonymised string generated from your email address (known as a hash) may be provided to the Gravatar service to check whether you are using it. Gravatar’s Privacy Policy: https://automattic.com/privacy/. Once your comment has been approved, your profile picture will be displayed publicly alongside the content of your comment.
Legal basis: your consent — Article 6, section 1, a) GDPR.
We use the Akismet service to filter spam; this service collects the commenter’s IP address, browser, referring page and URL, including the details you provide directly (name, email address and comment text).
Newsletter subscription
If you subscribe to our newsletter using the form on the website, we will store your email address and, where applicable, your name. We use them to send information about new products, articles and promotions.
Legal basis: your consent — Article 6, section 1, a) GDPR. Consent is voluntary; it is not a condition of purchase, and you may withdraw it at any time by clicking the link in the footer of any email or by writing to eshop@2troubletravelers.com.
Contact form
If you contact us via the contact form on our website, we process the data you enter into the form — in particular, your name, email address and the content of your message. The form is powered by the WP Forms plugin.
We use this data solely to process your enquiry and do not use it for marketing purposes.
Legal basis: performance of a contract or pre-contractual arrangements, where the communication relates to an order — Article 6, section 1, b) GDPR; inak náš oprávnený záujem na komunikácii s návštevníkmi — čl. 6, section 1, f) GDPR.
Communication and questions
If you contact us by email, we process your email address, name and the content of your message in order to deal with your enquiry.
Legal basis: performance of a contract, where the matter relates to an order; otherwise, a legitimate interest in communication — Article 6, section 1, f) GDPR.
Multimedia
If you are uploading images to the website, you should avoid uploading images containing EXIF location data (GPS). Website visitors can download and view such data from the images.
Embedded content from other websites
Articles on this site may contain embedded content from social media and other services — in particular, posts and videos from Instagram, TikTok, Facebook and YouTube. Embedded content from other websites is treated in exactly the same way as if you had visited that website directly.
These websites may collect personal data about you, use cookies, embed third-party tracking and monitor your interaction with embedded content — including when you have an account on that website and are logged in.
We only load the embedded content once you have given your consent via the cookie banner. Until it is granted, we display a placeholder symbol in place of the content.
We recommend that you read the privacy policies for these services. Instagram and Facebook are operated by Meta Platforms, TikTok by TikTok Ltd, and YouTube by Google — all of which are based outside the European Economic Area or process data there.
Special categories of data
We do not process special categories of personal data (so-called sensitive data) — such as data relating to health, religious beliefs or political opinions.
Cookies
You can find a detailed list of cookies and their settings in the Cookie Policy and in the cookie banner, where you can change your consent at any time.
Overview of the main groups:
Essential cookies — these ensure the basic functionality of the website and the online shop. They store the contents of the shopping basket, language settings and consent to the use of cookies. They are based on legitimate interests and do not require consent.
WordPress cookies — if you leave a comment, you can choose to save your name, email address and website in cookies so that you do not have to fill them in again; these cookies are valid for one year. When you log in to the admin panel, we store login cookies (2 days; 2 weeks if you select the ‘remember me’ option) and display settings (1 year). When an article is edited, a cookie containing the article ID is stored for 1 day.
WPML cookies — these are used to recognise the current language, the last language visited and the language of logged-in users. The WPML plugin for WooCommerce also uses them to transfer shopping basket information and to identify the language and currency of an order.
Complianz cookies — these record your consent to the use of cookies. Your IP address is anonymised for this purpose and stored in our database. The service does not process personally identifiable information and does not share data with the provider.
Cookies Popup Maker — prevents the same pop-up window from appearing repeatedly. These are non-tracking cookies with a validity period of between 1 day and 1 month.
Social media cookies — embedded content from Instagram, TikTok, Facebook and YouTube sets its own cookies. We will only load it once you have given your consent.
Analytical and marketing cookies — we use these solely on the basis of the consent you have given via the cookie banner. These include, in particular, Meta Pixel (Facebook, Instagram) and Google (Google Analytics, Google Tag Manager and, where applicable, Google Ads). They are used to measure website traffic, evaluate the effectiveness of adverts and display more relevant adverts. These tools will not run without your consent.
Who we share your data with
We do not sell your data or pass it on to third parties for their own marketing purposes. However, to ensure the website and online shop run smoothly, we work with the following service providers:
| Recipient | Purpose | Location |
|---|---|---|
| Websupport, s.r.o. | web hosting, email services, database storage | Slovakia |
| Stripe | card payment processing, Apple Pay, Google Pay | USA |
| PayPal | processing payments via PayPal | USA |
| SuperFaktúra | issuing, sending and archiving invoices | Slovakia |
| Automattic (Gravatar, Akismet) | displaying profile photos, filtering out spam | USA |
| OnTheGoSystems Limited (WPML) | Translation of the content using the Advanced Translation Editor | Hongkong |
| Meta Platforms (Facebook, Instagram) | Embedded content, advertising and conversion tracking – only with your consent | USA |
| TikTok Ltd. | Content embedded from TikTok, only with your consent | outside the EEA |
| analytics, advertising, YouTube – only with your consent | USA | |
| Accountant | bookkeeping | Slovakia |
Regarding payments: when a payment is processed, some of your details are sent to the payment gateway provider — in particular, the total purchase amount and billing details. For more information, see PayPal’s Privacy Policy and Stripe’s Privacy Policy.
Regarding translations: the WPML plugin (OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong) is installed directly on our web server. When you browse the site as normal, your data is not sent to the plugin provider — WPML simply stores a cookie containing your language setting. Data is transferred when using the Advanced Translation Editor, whereby the page content and the translators’ email addresses are sent to this service and to the translation services used.
We may also disclose data to public authorities where required to do so by law.
If you request a password reset, your IP address will be included in the password reset email.
Where is your data sent?
Some of the recipients listed are based outside the European Economic Area — Stripe, PayPal, Automattic, Meta Platforms and Google, which are based in the US; OnTheGoSystems Limited (WPML), which is based in Hong Kong; and TikTok Ltd.
The transfer of personal data to the USA takes place on the basis of the European Commission’s decision on an adequate level of protection (the EU–US Data Privacy Framework) or, where applicable, on the basis of standard contractual clauses approved by the European Commission.
For countries for which the European Commission has not issued an adequacy decision, data transfers take place on the basis of standard contractual clauses. With WPML, data is only transferred when content is being translated, not during normal browsing of the site. In the case of social media, data is only transferred once you have given your consent.
Visitors’ comments may be checked by an automated spam detection service (Akismet).
How long do we keep your data?
| Data | Retention period |
|---|---|
| Invoices and accounting documents | 10 years under Act No. 431/2002 Z. z. on accounting |
| Order details | 4 years from the fulfilment of the contract |
| Email address for the newsletter | until consent is withdrawn |
| Reviews and comments | until consent is withdrawn or the data is deleted |
| Communication by email and via the contact form | 3 years since the last communication |
| Record of consent to the use of cookies | 12 months |
Comments and their metadata are stored separately so that we can automatically recognise and approve related comments without moderation.
The payment deadline for invoices cannot be shortened, even at your request — this is stipulated by law.
What rights do you have over your data?
- Right of access — to obtain confirmation as to whether we are processing your data, and a copy of that data.
- Right to rectification — to have incorrect data corrected or incomplete data completed.
- Right to erasure — to request the erasure of data. This does not apply to data that we are required to retain for legal, administrative or security reasons — in particular, invoices.
- The right to restrict processing — if you contest the accuracy of the data or the lawfulness of the processing.
- Right to data portability — to receive data in a structured, commonly used and machine-readable format.
- The right to object — to processing based on legitimate interests, including direct marketing.
- The right to withdraw consent — at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of any processing carried out prior to that.
- The right to lodge a complaint with the supervisory authority.
You can exercise your rights by emailing eshop@2troubletravelers.com. We will reply within one month of receiving your application at the latest.
Supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27. Email: statny.dozor@pdp.gov.sk. Telephone: +421 2 3231 3214. Website: https://dataprotection.gov.sk
How we protect your data
We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse or alteration:
- the website is secured by the encrypted HTTPS protocol,
- Access to the administration system is password-protected and restricted to the necessary group of people,
- we use a security add-on to protect against attacks,
- we carry out regular backups,
- Payment card details never pass through our website.
Who on our team has access: site administrators have access to order information (what was purchased and when) and customer details (name, email address, billing details). Access is provided solely for the purpose of processing orders, handling complaints and answering enquiries.
Procedures in the event of a data breach
If we become aware of a personal data breach that may pose a risk to your rights and freedoms, we will report it to the Office for Personal Data Protection within 72 hours. If the breach were to pose a high risk, we would also inform you of it without undue delay.
If you have discovered a security vulnerability on our website, please do get in touch with us at eshop@2troubletravelers.com.
From which third parties do we obtain data?
We collect personal data exclusively directly from you. We do not obtain them from advertisers, data brokers or other third parties.
Automated decision-making and profiling
When processing your personal data, no automated decision-making takes place that would have legal effects on you or similarly significantly affect you.
If you consent to marketing cookies, our advertising tools (in particular Meta Pixel and Google) may create advertising profiles based on your behaviour on our website. These are used to display more relevant adverts on social media and advertising networks, and to measure the effectiveness of our campaigns. This profiling has no legal implications for you and does not affect the price of the products or the terms and conditions of purchase.
You can withdraw your consent at any time in the cookie bar settings. Once you have withdrawn your consent, these tools will stop tracking your behaviour.
Changes to these principles
We may update this policy if there are changes to the way we process data or to the relevant legislation. The current version is always available on this page.
Effective from: 1. September 2026