Personal Data Processing
Notice

This document explains what personal data we process, for what purposes, on what legal basis, to whom it may be provided, how long we retain it, and what rights the data subject has.

A. Controller identification

Hereinafter referred to as the "Controller".

When this document is used on the TikTok agency website, the following contact email may also be used: info@tiktokagentura.sk.

B. Purposes of personal data processing

The Controller processes personal data primarily for the following purposes:

1. Handling contact forms and messages

We process personal data of individuals who contact us via a web form, email, phone or social media in order to respond to enquiries, handle requests and prepare proposals.

2. Receiving and evaluating applications to the TikTok LIVE agency

When a person fills in an application to the TikTok LIVE agency, we process data necessary to assess the applicant's suitability, verify basic conditions and potentially initiate collaboration.

3. Communication with creators, managers and partners

We process personal data for routine communication, organising collaboration, answering questions, providing support and coordinating next steps.

4. Record-keeping of applicants and collaborating persons

We process data of persons who have expressed interest in or been accepted for collaboration.

5. E-shop, goods sales and order processing

Where the Controller sells goods or services online, it processes customer personal data to accept, process and deliver orders and communicate with customers.

6. Accounting and tax obligations

We process personal data necessary to fulfil legal obligations, particularly in relation to invoicing and document archiving.

7. Handling complaints, grievances and legal matters

We process personal data necessary to handle complaints, grievances and disputes.

8. Marketing communications

Where the data subject consents or where permitted by law, we may process personal data to send marketing information. Consent may be withdrawn at any time.

9. Publication of photographs and videos

Photographs and videos of individuals may only be processed and published where a legal basis exists, in particular the consent of the data subject.

10. Competitions, campaigns and reviews

Where a data subject participates in a competition or campaign, we process personal data to organise it and contact participants.

11. Website operation, security and cookies

When visiting the website, technical data, cookies and IP addresses may be processed for purposes of security, analytics and service improvement.

C. Categories of personal data processed

The Controller may process in particular: full name, age, email address, phone number, address, country, TikTok username, TikTok profile link, social media links, follower count, LIVE streaming information, communication content, billing details, photographs, videos, IP addresses and cookies. Only data that is adequate, relevant and necessary for the specific purpose is processed.

D. Legal basis for processing

1. Consent of the data subject

Article 6(1)(a) GDPR – marketing communications, voluntary form submissions.

2. Performance of a contract or pre-contractual steps

Article 6(1)(b) GDPR – order processing, application assessment, preparation of collaboration.

3. Compliance with a legal obligation

Article 6(1)(c) GDPR – accounting and tax obligations.

4. Legitimate interests of the Controller

Article 6(1)(f) GDPR – protection of rights, website security, internal record-keeping.

E. Retention periods

1. Contact forms and routine communications

Generally for as long as necessary to handle the request, at least 2 years.

2. Applications to the TikTok LIVE agency

Generally up to 2 years from submission of the application or last communication.

3. Contractual collaboration

For the duration of collaboration and generally 5 years after its termination.

4. Accounting and tax documents

Generally 10 years in accordance with applicable law.

5. Complaints and legal matters

For the duration of handling the matter and for as long as necessary to protect legal claims.

6. Marketing communications

Until consent is withdrawn, or up to 5 years.

7. Cookies

Depends on the type of cookie and the settings of the specific tool.

F. Recipients of personal data

Personal data may be disclosed to website hosting providers, email service providers, accountants, legal representatives, IT administrators, courier services, payment gateways, analytics tools, public authorities and platforms where a legal basis exists.

G. Transfer of personal data to third countries

Personal data may in some cases be processed through services whose providers are located outside the EU or EEA. Such transfers only take place where GDPR conditions are met (e.g. standard contractual clauses). This may include tools such as Google, Meta, TikTok or cloud services.

H. Automated decision-making and profiling

The Controller does not carry out automated individual decision-making with legal effects on the data subject. Basic website traffic analysis may occur where cookie settings permit.

I. Cookies

The website may use cookies — small text files stored on the visitor's device. They are used for website functionality, traffic measurement and marketing. Analytical and marketing cookies are only used with the visitor's consent.

J. Security of personal data

The Controller takes appropriate technical and organisational measures to protect personal data. Access is restricted to persons bound by confidentiality obligations.

K. Rights of the data subject

The data subject has the right to access their personal data, request rectification, erasure, restriction of processing, data portability, object to processing and withdraw consent. They also have the right to lodge a complaint with a supervisory authority.

L. How to exercise rights

By contacting the Controller:

• Email: info@elektrorepas.sk
• Address: Elektrorepas, s. r. o., Turčiansky Peter 84, 038 41 Turčiansky Peter, Slovakia

For queries related to the TikTok agency website: info@tiktokagentura.sk

M. Obligation to provide personal data

Provision of data may be a legal or contractual obligation, necessary for handling a request, or voluntary. If the data subject does not provide the necessary data, the Controller may be unable to provide the service or process the application.

N. Controller's declaration

The Controller declares that personal data is processed lawfully, fairly and transparently, only for specified purposes, to the extent necessary and for the minimum period required.

O. Final provisions

Effective date: 11 June 2026

The Controller reserves the right to update this document. The current version will be published on the website.