Privacy policy
Version 1.2, effective 2026-10-05
The little data BoxHop processes: cookieless analytics (only with your consent), your approximate country, server logs. No accounts, no cookies.
Data controller
The controller for data processing on this site is Vitalii Bartashchuk (Za vodou 161/2, 032 03 Liptovský Ján, Slovak Republic), IČO 54225337. Email: info@vaet.sk. We have not appointed a data protection officer; for any privacy matter, contact info@vaet.sk.
What we process
BoxHop has no user accounts and asks for no personal details. We process only: (1) privacy-friendly, cookieless usage analytics via Vercel (aggregated page views — no cross-site tracking, no profiles); (2) your approximate country, derived momentarily from your IP address at our hosting edge to pre-select the “From” country in the rate checker — it is not stored; (3) standard server logs kept for security and troubleshooting; (4) your IP address, held only in our server’s working memory as the key of a per-IP rate limit on our price and country look-ups, to protect the service from abuse — it is not written to disk.
Cookies and consent
We set no cookies. Usage analytics (cookieless, via Vercel) loads only after you choose “Accept” in the notice; if you choose “Decline” or make no choice, it does not load. Your choice is saved in your browser’s local storage so the notice does not reappear; that entry stays on your device and is not sent to us. The shipping options you pick are sent to our own pricing endpoint only to return quotes; they are not linked to you.
Withdrawing consent
You can withdraw consent at any time via “Cookie settings” in the footer of every page. Your choice is cleared, the notice reappears and the optional services stop. Withdrawing is as easy as giving consent (Art. 7(3) GDPR).
Legal basis
Usage analytics rests on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Hosting, the country pre-selection, rate limiting and server logs rest on our legitimate interest (Art. 6(1)(f) GDPR) in running a secure, useful website.
Recipients
Our hosting and analytics provider is Vercel Inc., acting as our processor. When you click a “Book” link you leave BoxHop for the broker or carrier’s own website — a separate controller under its own privacy policy — and we send them no data about you.
Transfers to the USA
We use service providers established in the USA (Vercel Inc.). By Implementing Decision (EU) 2023/1795 the European Commission found that companies certified under the EU-US Data Privacy Framework (DPF) provide an adequate level of protection (Art. 45 GDPR); the providers named state that they are certified. In addition, the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) in the respective data-processing agreements apply. Details on request at info@vaet.sk.
Retention
Analytics data is aggregated and not tied to individuals. Server logs are kept by our hosting provider Vercel for the log-retention period of our hosting plan and are then deleted automatically. Rate-limit entries exist only in working memory: they are cleared whenever the server instance restarts or the table exceeds 10,000 entries, and they are never stored. We store no personal profiles.
Your rights
Under the GDPR you may request access, rectification, erasure, restriction or data portability, and object to processing. You may lodge a complaint with the Úrad na ochranu osobných údajov Slovenskej republiky or with the data protection supervisory authority of the EU country where you live, work or where the alleged infringement took place (Art. 77 GDPR). As we hold no account or identifying profile, we may be unable to identify individual visitors. Contact us at info@vaet.sk.