Website check

SETTINGSWhat kind of website are you checking?

Online shop / selling to consumersCompany presentation websiteWebsite with a chatbot or AI content

Done 0 / 23

Mandatory details about the operator 0 / 5

Name and surname, or business name, and registered office / place of businessFor an individual, also the address required by law; for a company, its name and registered office.Section 4(1) of Act No. 22/2004 Coll.
E-mail and telephone numberDirect contact, not just a contact form.Section 4(1) of Act No. 22/2004 Coll.
Register and registration numberE.g. the Commercial Register (obchodný register — section, file number) or the Trade Register (živnostenský register).Section 4(1) of Act No. 22/2004 Coll.
Supervisory authorityName and address of the authority supervising the activity — for trade, usually the Slovak Trade Inspection (Slovenská obchodná inšpekcia).Section 4(1) of Act No. 22/2004 Coll.
VAT ID (IČ DPH), if you are a VAT payerOnly for VAT payers.Section 4(1) of Act No. 22/2004 Coll.

No analytics or marketing scripts load before consentCheck in the browser (developer tools → network) what loads on the first visit without any click.Section 109(8) of Act No. 452/2021 Coll.
“Reject all” is on the first layer of the banner, as accessible as “Accept all”Refusal must not be hidden in the settings.Opinion of ÚRSO and the Personal Data Protection Office on consent
No pre-ticked categoriesStrictly necessary cookies may be switched on; the others may not.Opinion of ÚRSO and the Personal Data Protection Office on consent
Consent is granular by purposeAnalytics and marketing separately.Opinion of ÚRSO and the Personal Data Protection Office on consent
Consent can be withdrawn at any time, just as easilyE.g. a “Cookie settings” link in the footer.ÚRSO opinion; Article 7(3) GDPR
Embedded third-party content (maps, videos, social media) loads only after consentOr use a solution that does not store third-party cookies.Section 109(8) of Act No. 452/2021 Coll.
Cookie information is publishedWhich cookies, for what purpose, for how long; including the strictly necessary ones.ÚRSO opinion; Article 13 GDPR

Information on the processing of personal dataWho processes, for what purpose, legal basis, retention period, people’s rights, contact.Article 13 GDPR
Forms collect only the data you needData minimisation: do not ask for a date of birth if you do not need it.Article 5(1)(c) GDPR
The site runs over HTTPSEncrypted transmission is a basic security measure.Article 32 GDPR
Agreements with processors (hosting, e-mailing, analytics)A processing agreement with everyone who processes data on your behalf.Article 28 GDPR

Price including all charges and delivery costsBefore the order is placed.Section 5(1)(d) of Act No. 108/2024 Coll.
Information on the right of withdrawal and the model form14 days from receipt; model in Annex 2 to the Act.Section 15(1)(f), Section 20 of Act No. 108/2024 Coll.
Exceptions to withdrawal are stated (e.g. made-to-measure goods)If you apply them.Section 19(1) of Act No. 108/2024 Coll.
Complaints procedure / information on liability for defectsTwo years; the period for remedying a defect is no more than 30 days.Sections 619 and 622 of the Civil Code
Online shop accessibility, if you are not a micro-enterpriseMicro-enterprise = fewer than 10 employees and turnover or balance sheet total up to €2 million; these are exempt for services.Act No. 351/2022 Coll., Section 2(3)

The chatbot clearly discloses that it is AIAt the latest at the first interaction.Article 50 of Regulation (EU) 2024/1689
Deepfake content is labelledAI-generated images, video or audio of realistic people or events.Article 50(4) of Regulation (EU) 2024/1689