Privacy Policy
How we handle your personal data
Last updated 21 September 2026
This policy explains what personal data the eCube portal collects, why we collect it, who we share it with, how long we keep it, and what rights you have over it.
1. Who we are
The eCube portal is operated by SOS electronic s.r.o., Pri prachárni 16, 040 11 Košice, Slovakia, company ID (IČO) 3170 3186, registered in the Commercial Register of the District Court Košice I, section Sro, file No. 5791/V (“we”, “us”, the “operator”).
We are the controller of the personal data described in this policy within the meaning of Regulation (EU) 2016/679 (GDPR). For any question about this policy or about your personal data, write to ecubeportal@soselectronic.com.
This policy covers the eCube portal itself. It does not cover websites of our users or of third parties that we link to; those have their own policies.
2. What data we collect
We collect only what the portal needs in order to work. Depending on how you use eCube, this may include:
| Where it comes from | What we collect |
|---|---|
| Registration and your profile | When you register: e-mail address, password (stored only as a salted hash), country, and the consents you gave. In your profile: first and last name and, if you fill them in, company name, website, bio, social media links, contact e-mail address, phone number, address (street, city, postcode, country, region) and VAT number. |
| Content you publish | Products and their descriptions, images, documents and videos, comments, likes, and the author profile shown next to them. This content is public by design. |
| Contact form | Your name, e-mail address, optional phone number and the message itself. To help us answer and to detect abuse, the message also carries technical context: IP address, browser user agent, browser language, referring and current page URL, time zone, platform and screen size — plus your account ID, e-mail and name if you were signed in. |
| Newsletter | Your e-mail address and the date of your subscription. |
| Using the portal | Web server logs containing your IP address, the requested URL, response status, response time, user agent and referrer; short-lived counters keyed to your IP address that enforce our rate limits; and, for signed-in users, your recent search queries so that we can offer them back to you. |
| Analytics | Pseudonymous usage statistics — pages visited, approximate location derived from the IP address, device and browser type, and page-performance measurements (Web Vitals). With your consent, Analytics cookies are used to provide more complete measurement across your visit. Without consent, Google Analytics receives limited cookieless measurements. We do not send your name, e-mail address or account ID to Google. |
We do not knowingly collect special categories of personal data (health, biometrics, political or religious views and similar). Please do not put such data into products, comments or messages.
3. Why we use it and on what legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Creating and running your account, signing you in, two-factor authentication | Registration data, session cookies | Performance of a contract — Art. 6(1)(b) GDPR |
| Publishing your products and other content, and showing the author profile beside them | Content you publish, name, company details | Performance of a contract — Art. 6(1)(b) GDPR |
| Answering your enquiry sent through the contact form | Contact form data | Performance of a contract or pre-contractual steps — Art. 6(1)(b); our legitimate interest in responding to enquiries — Art. 6(1)(f) GDPR |
| Keeping the portal secure: rate limiting, abuse and bot detection (reCAPTCHA), account lockout after failed sign-in attempts, server logs | IP address, user agent, request metadata, reCAPTCHA signals | Our legitimate interest in protecting the service and its users — Art. 6(1)(f) GDPR |
| Operating, troubleshooting and improving the portal | Server logs, error reports | Our legitimate interest in a reliable service — Art. 6(1)(f) GDPR |
| Sending the newsletter and other marketing messages | E-mail address | Your consent — Art. 6(1)(a) GDPR (withdrawable at any time) |
| Measuring how the portal is used (Google Analytics) | Analytics identifiers and usage data | Your consent given in the cookie banner — Art. 6(1)(a) GDPR |
| Meeting our legal and accounting obligations, and defending legal claims | The data relevant to the given obligation or claim | Legal obligation — Art. 6(1)(c); our legitimate interest — Art. 6(1)(f) GDPR |
We do not use your personal data for automated decision-making that produces legal effects concerning you. reCAPTCHA scores a request as likely human or likely automated; a low score never blocks you outright — it only makes our security limits stricter or asks you to try again.
6. Transfers outside the EU/EEA
Our servers are located in the European Union. Some of the providers listed above belong to groups based in the United States and may process data outside the EEA. Where that happens, the transfer is covered by the European Commission’s Standard Contractual Clauses and, where applicable, by the provider’s certification under the EU–US Data Privacy Framework. You can ask us for a copy of the safeguards in place by writing to ecubeportal@soselectronic.com.
7. How long we keep it
| Data | Retention |
|---|---|
| Account and company data | For as long as your account exists. After you delete your account we erase or anonymise it, except where we must keep something to meet a legal obligation or to defend a legal claim. |
| Content you published | Until you or we remove it. If you delete your account, ask us what should happen to products and comments you posted — we will remove them or detach them from your identity as you prefer. |
| Contact-form enquiries | Up to 3 years from the last message in the exchange, so that we can follow up and evidence what was agreed. |
| Newsletter subscription | Until you unsubscribe; we keep the record of the unsubscribe itself so that we do not mail you again. |
| Web server logs | Up to 30 days, then deleted by log rotation. |
| Rate-limit counters | Minutes to hours — each counter expires with the time window it protects. |
| Recent search queries | 90 days after your last search, then deleted automatically. Deleting your account removes them immediately. |
| Analytics data | Up to 14 months in Google Analytics, then automatically deleted. |
| Consent records | Up to 12 months from the last time you set your cookie preferences. |
| Error reports and server timing samples | Up to 30 days in Sentry, then automatically deleted. |
8. Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy of it;
- rectify data that is inaccurate or incomplete — most of it you can edit yourself in your account;
- erase your data (“right to be forgotten”) where we no longer have grounds to keep it;
- restrict our processing while a dispute about accuracy or legitimate interest is resolved;
- data portability — receive the data you gave us in a structured, machine-readable format;
- object to processing based on our legitimate interest, and at any time to direct marketing;
- withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, write to ecubeportal@soselectronic.com. We answer within one month; if a request is complex we may extend that by two further months and will tell you why. We may need to verify your identity before acting on a request.
If you believe we handle your personal data unlawfully, you may lodge a complaint with the Slovak supervisory authority — Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava (dataprotection.gov.sk) — or with the authority in your country of residence.
9. How we protect your data
The portal is served over HTTPS. Passwords are never stored in readable form. Session cookies are HTTP-only and marked secure, sessions expire, and optional two-factor authentication is available on your account. Forms are protected by rate limits, account lockout after repeated failed sign-in attempts, and bot detection. Access to production systems is limited to the people who administer them.
No online service can be perfectly secure. If a personal data breach is likely to result in a high risk to you, we will notify you and the supervisory authority as required by Art. 33 and 34 GDPR.
10. Children
eCube is a business-to-business portal intended for professionals. It is not directed at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, write to ecubeportal@soselectronic.com and we will delete it.
11. Changes to this policy
We may update this policy as the portal changes or the law requires. The date at the top of the page always shows the current version. If a change materially affects you, we will tell you on the portal or by e-mail before it takes effect.
12. Contact
SOS electronic s.r.o., Pri prachárni 16, 040 11 Košice, Slovakia
E-mail: ecubeportal@soselectronic.com
See also our Terms and Conditions and Cookie Policy.