Last updated: 14 January 2026
Privacy Policy
Ulvorixa s. r. o., with registered office at Mlynské nivy 5, 821 09 Bratislava, company ID 56 789 012 ("Ulvorixa" or "we") is the controller of personal data within the meaning of Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on the Protection of Personal Data.
1. What data we process
When you fill in the newsletter form we process your name and email address. When you open an investor account we additionally process your birth ID, ID document, address of permanent residence, IBAN and data required for KYC and AML verification.
2. Purpose and legal basis
We process your data on the basis of your consent (Art. 6(1)(a) GDPR) for marketing communication, on the basis of contract performance (Art. 6(1)(b) GDPR) for providing investment services, and on the basis of legal obligations (Art. 6(1)(c) GDPR) for AML and tax purposes.
3. Retention period
Marketing data is retained until withdrawal of consent, no longer than 5 years from the last contact. Investment-contract data is retained for 10 years in line with the Slovak Anti-Money Laundering Act.
4. Data recipients
Your data may be shared with the National Bank of Slovakia, the Slovak Financial Administration, our KYC/AML provider (Ondato UAB), our payment processor (Lemonway SAS) and our cloud infrastructure provider (Hetzner Online GmbH, EU).
5. Your rights
You have the right to access, rectify, erase, restrict processing, data portability and the right to object. You can exercise these rights at privacy@ulvorixa.com. You can also lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava.
6. Data Protection Officer
You can reach our Data Protection Officer (DPO) at dpo@ulvorixa.com or by post at our registered office.