Privacy Policy
We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”) and Slovak Act No. 18/2018 Coll. on the protection of personal data. Protecting your data and handling it lawfully matters to us. This page explains what data we collect when you use makedecision.sk, why, who receives it, and what rights you have.
1. Who is the controller
The controller of your personal data within the meaning of Art. 4(7) GDPR is:
Name: Ivana Jalčová (sole trader, trading as Make Decision)
Address: Trieda SNP 342/96, 040 11 Košice, Slovakia
Company ID (IČO): 50105281
Tax ID (DIČ): 1049949153
E-mail: info@makedecision.sk
Phone: +421 915 969 010
Website: https://makedecision.sk
We are not required to appoint a Data Protection Officer. For anything related to your data, contact us at the e-mail above.
2. Purposes and legal bases
| Purpose | What we do | Legal basis |
|---|---|---|
| Processing your order | Handling the purchase of a digital product, delivering it, issuing an invoice | Performance of a contract (Art. 6(1)(b) GDPR) |
| User account and course access | Creating your account, giving you access to the course, recording your progress in lessons | Performance of a contract (Art. 6(1)(b) GDPR) |
| Online games and drills | Running the browser-based training games and drills, including camera mode and the optional leaderboard | Performance of a contract / consent for the camera (Art. 6(1)(b), (a) GDPR) |
| Accounting and tax | Keeping accounting records and invoices as required by law | Legal obligation (Art. 6(1)(c) GDPR) |
| Customer support | Answering questions, handling complaints and warranty claims, defending legal claims | Legitimate interest and legal obligation (Art. 6(1)(f), (c) GDPR) |
| News and offers by e-mail | Sending updates about new products and promotions | Consent (Art. 6(1)(a) GDPR) |
| Running and securing the website | Strictly necessary cookies and similar storage, security logs, preventing abuse | Legitimate interest (Art. 6(1)(f) GDPR) |
| Athlete’s journal (optional bonus in the Complete package) | Storing the entries a member writes in the journal (mood, sleep, movement, notes and, if entered, pain), showing them in their account and printing | Explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR); for persons under 16, consent of a parent or legal guardian |
3. What data we process
- Identification data: first name, last name; company name and tax/VAT ID if you buy as a business.
- Contact data: e-mail address, phone number (if you provide it).
- Billing data: billing address, country, order details. We never see or store your card number; payments are handled by Stripe.
- Course usage data: your login, purchased products, progress in lessons.
- Game data: nickname and score if you submit one to the leaderboard, and settings and records saved in your browser (local storage). In camera mode, the video image is analysed live inside your own browser or device; we do not record it, upload it or store it on our servers.
- Technical data: IP address, browser and device information, and server logs needed to keep the site secure.
- Data you send us: the content of your messages and feedback.
- Reviews and testimonials: name, surname, photo and the subject of the review, only if you give us your explicit consent to publish them on our website and social networks. We keep them for as long as the consent lasts. You can withdraw consent at any time by e-mail to info@makedecision.sk, and we will remove the review or your personal data from it within 14 days of your request.
- Athlete’s journal data: entries a member voluntarily writes in the journal (including mood, sleep and, if entered, pain, which is health data). We do not share them with coaches or third parties. A member can delete them at any time in the journal (which also withdraws the consent) or ask us to do so at info@makedecision.sk.
Providing the data needed for an order and an account is a contractual requirement: without it we cannot deliver the course. Everything else is voluntary.
4. Children
The course is also suitable for young basketball players. For anyone under 16, the purchase and the account are made by a parent or other legal guardian, and we process a child’s data only to the extent necessary to provide the course and, where consent is required, only with the guardian’s consent. We do not publish photos or other data of children without the guardian’s consent.
5. Who receives your data
We share personal data only where the law requires it or where it is necessary to perform the contract. Providers that process data on our behalf are bound by data processing agreements and confidentiality:
- Websupport s. r. o., Karadžičova 12, 821 08 Bratislava, Slovakia: domain, hosting and e-mail delivery; this is where orders and user accounts are stored.
- Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland: payment processing, which also acts as an independent controller for fraud prevention and regulatory purposes (Stripe privacy policy).
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland: YouTube video player (we use the privacy-enhanced mode, so YouTube sets no cookies until you press play; see Google privacy policy) and Google Drive, where backups of the website are stored.
- Public authorities (e.g. tax authorities, consumer inspectorate) where the law requires it.
We do not sell your data and we do not use analytics or advertising tools such as Google Analytics or Meta Pixel. If we start using them, we will update this page and ask for your consent first.
6. Transfers outside the EU/EEA
We do not intentionally transfer personal data outside the EU/EEA. Some of our providers (for example Stripe or Google) may process data in the United States or other countries. In that case the transfer is protected by an adequacy decision (such as the EU–US Data Privacy Framework), Standard Contractual Clauses or another safeguard under Chapter V of the GDPR. You can request a copy of the relevant safeguards from us.
7. How long we keep data
| Data | Retention |
|---|---|
| Orders and invoices | 10 years (Slovak accounting law) |
| Warranty claims and complaints | 5 years after the claim is resolved |
| E-mail correspondence | 12 months after the last message, unless it leads to a contract |
| User account and course progress | For as long as the account or your access to the course exists |
| Leaderboard nickname and score | Until you ask us to remove it or the leaderboard is reset |
| Marketing e-mails | Until you withdraw consent, at most 5 years |
| Cookies | Session, or up to 2 years depending on the cookie |
| Athlete’s journal entries | until the member deletes them, withdraws consent or the account is closed; website backups are deleted in the regular backup cycle |
8. Cookies and local storage
This website uses only strictly necessary cookies and browser storage: they keep you logged in, remember your cart and checkout, and save your game settings and records on your device. Under the ePrivacy rules these do not need your consent. We do not use analytics or marketing cookies. If we ever add them, we will ask for your consent beforehand and you will be able to change your choice at any time. You can also delete or block cookies in your browser settings, but parts of the site (login, cart, checkout) may then stop working.
9. Your rights
- Access (Art. 15): get confirmation of whether we process your data and a copy of it.
- Rectification (Art. 16): have inaccurate data corrected.
- Erasure (Art. 17): have your data deleted where we no longer need it or you withdraw consent.
- Restriction (Art. 18): ask us to limit processing while a dispute about accuracy or lawfulness is resolved.
- Data portability (Art. 20): receive your data in a structured, machine-readable format.
- Objection (Art. 21): object to processing based on legitimate interest and to direct marketing at any time.
- Withdraw consent (Art. 7): at any time, without affecting processing done before.
- Complain to a supervisory authority (Art. 77): you may lodge a complaint with the authority in the EU country where you live, work or where you think the infringement occurred (list of EU authorities), or with ours: Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
10. How to exercise your rights
- By e-mail: info@makedecision.sk
- By post: Ivana Jalčová, Trieda SNP 342/96, 040 11 Košice, Slovakia
- By phone: +421 915 969 010
We will answer without undue delay and at the latest within one month. Where necessary, this period may be extended by a further two months, and we will tell you if so. We may ask you to verify your identity first. Exercising your rights is free of charge.
11. Security
- encrypted connection (HTTPS) on the whole website,
- regular backups with restricted access,
- access to data limited to authorised persons,
- regular updates of the website and its software.
If a personal data breach is likely to result in a risk to you, we will notify the supervisory authority within 72 hours and, where required, you as well.
12. Automated decisions and profiling
We do not make decisions based solely on automated processing, and we do not carry out profiling that would have legal or similarly significant effects on you.
13. Changes
This policy takes effect on 1 March 2026; last updated: 19 October 2026. We may update it at any time; the current version is always available on this page.
