Privacy Policy

Last updated: 9 May 2026

1. Introduction

CopyBox s.r.o. ("CopyBox," "we," "us," or "our") operates the self-service document printing service available at https://copybox.sk and through our CopyBoxes across Slovakia. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Slovak law.

2. What personal data we collect

Files you upload

The documents you upload for printing (PDF, JPG, or PNG format). These files are processed solely to fulfil your print order and are deleted automatically within 24 hours of successful printing or order cancellation.

Payment information

When you pay online, your payment is processed by our payment provider, GoPay. We do not receive or store your card number, CVV, or any other payment credentials — these are handled entirely by GoPay on its own secure systems.

Email address

If you provide your email address at checkout, we use it to send you a payment confirmation for your order. If you voluntarily provide your email address elsewhere (for example, when contacting customer support), we store it solely to respond to your request.

Technical data

We collect limited technical data including your IP address, browser type, and device type. We use this data for security monitoring and to maintain and improve our service.

3. How we use your data

• To process and fulfil your print order
• To respond to customer support requests
• To improve our service and detect and prevent fraud

4. Legal basis (GDPR Article 6)

• Performance of a contract (Art. 6(1)(b)): processing your files and payment to fulfil your print order
• Legitimate interest (Art. 6(1)(f)): technical logging for security, fraud prevention, and service improvement
• Consent (Art. 6(1)(a)): cookies where consent is required, and any optional communications you opt into

5. Who we share your data with

We share your data only with the following third parties, and only to the extent necessary to provide the service:

• Render Services, Inc. (USA) — cloud hosting for our application and file storage. Render's Privacy Policy
• GoPay s.r.o. (Czech Republic) — processes your online payment. GoPay acts as an independent data controller for the payment data it processes. GoPay's Privacy Policy
• Resend — delivers your payment confirmation email if you provide an email address at checkout.
• Authorised CopyBox operators — the operator of your chosen CopyBox location receives your print job in order to print your document. Operators do not have access to your payment details.

We do not sell your personal data to any third party.

6. International data transfers

Render is based in the United States. Transfers of personal data to this provider are made under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for your data.

7. How long we keep your data

• Uploaded files: deleted automatically within 24 hours of successful printing or order cancellation
• Order records (amount, date, CopyBox, page count — no file content): retained for 10 years to comply with Slovak accounting and tax legislation
• Support correspondence: retained for up to 2 years, then deleted
• Technical logs: retained for up to 90 days

8. Your rights under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data, subject to legal retention obligations
• Right to restriction: request that we limit how we process your data
• Right to object: object to processing based on our legitimate interest
• Right to data portability: receive your data in a structured, machine-readable format
• Right to withdraw consent: where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing

To exercise any of these rights, email podpora@copybox.sk. We will respond within 30 days.

You also have the right to lodge a complaint with the Slovak Data Protection Authority:
Úrad na ochranu osobných údajov Slovenskej republiky — https://dataprotection.gov.sk

9. Security measures

• All data is transmitted over HTTPS (TLS encryption)
• Uploaded files are stored with access controls and encryption at rest
• Files are deleted automatically within 24 hours after printing
• Access to our systems is restricted to authorised personnel only

10. Children

Our service is not directed at or intended for use by children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact podpora@copybox.sk and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact us

Email: podpora@copybox.sk
Tel.: +421 902 538 699