Privacy policy

01Browsing the website and contacting us

When you visit, we process technical information needed to deliver and protect the website, such as your IP address, the request time, the requested page and browser information. Our legitimate interests under Article 6(1)(f) GDPR are keeping the site secure, diagnosing problems and preventing abuse.

When you email us, we process your email address, your message and any other information you choose to provide. For general inquiries, our legitimate interest is responding to your message. When you ask us to take steps before entering into a contract or we handle an existing order, we rely on Article 6(1)(b) GDPR. If the law requires us to handle your request, Article 6(1)(c) GDPR applies.

02Information used to process an order

Public sales have yet to open. When they open, we will use your email address to verify the order and your first and last name, street address, city, postal code and country for billing. We record the chosen number, amount, currency, order reference, payment reference and status, language, order timestamps and the version of the terms accepted.

We need these details to handle the order, confirm payment and verify the allocation of the collectible number. We process them to take steps at your request before entering into a contract and to perform that contract under Article 6(1)(b) GDPR. An order cannot be completed without the required contact and billing details. You enter payment card details on the payment provider’s website.

We process data for accounting and other legal obligations under Article 6(1)(c) GDPR. We may also process the details needed to prevent fraud or establish or defend claims where our legitimate interests under Article 6(1)(f) GDPR justify this.

03Optional audience measurement

Google Analytics 4 loads only with your consent under Article 6(1)(a) GDPR. It uses pseudonymous cookie identifiers, browser and device information, approximate location, pages visited, referring pages and selected interactions. These may include opening the catalogue, switching languages, clicking the contact email link or downloading an artwork file. We keep analytics off the checkout pages.

You can withdraw consent at any time using Analytics settings on the Cookies page or in the footer. Withdrawal applies to future processing and does not affect the lawfulness of processing before you withdrew consent. Your analytics choice does not affect access to the catalogue.

04Who can access the information

Websupport s. r. o. provides website and email hosting. If you allow analytics, Google processes measurement data. When sales open, relevant details may be shared with the payment provider and accounting professionals. We may also share necessary details with the competent authorities or legal advisers when required by law or to handle a dispute.

Google may process analytics data outside the European Economic Area, including in the United States. For these transfers, Google uses the adequacy decision for organisations certified under the EU–US Data Privacy Framework or standard contractual clauses, as applicable. For details, see Google — data transfers. You can request information about the applicable safeguards via first@marsathon.com.

05How long we keep information

We use technical records for as long as needed to investigate and resolve operational or security issues. We keep correspondence for as long as needed to respond to your request and any follow-up. If a dispute arises, we retain the necessary information until the dispute is resolved or for the applicable period for bringing a claim.

When sales open, we will retain information needed to confirm the order and verify the allocation of a number for as long as necessary to perform the contract. Under Slovak accounting law we keep accounting documents for the ten years following the year to which they relate.

The Cookies page explains how long your analytics choice applies and how long analytics cookies last. The retention period for event data and user identifiers in Google Analytics is governed by the retention setting in the analytics service.

06Your rights and how to contact us

Subject to the conditions in the GDPR, you can request access to your personal data, rectification, erasure, restriction of processing or data portability. You can object to processing based on legitimate interests on grounds relating to your particular situation. You can withdraw consent at any time.

To exercise your rights, email first@marsathon.com. If you believe your personal data has been handled unlawfully, you can complain to the competent supervisory authority. In Slovakia, this is the Slovak Data Protection Authority. We do not use personal data to make decisions based solely on automated processing that have legal or similarly significant effects.