Effective from 13 October 2026 | Version 1.0
1. Who is responsible for your personal data?
The data controller is TESCO STORES SR, a.s. (Tesco), registered at Cesta na Senec 2, 821 04 Bratislava, company registration number: 31 321 828.
You can contact Tesco about the processing of your personal data or the exercise of your rights at:
- Data Protection Officer: CE.DPO@tesco.com
- Telephone: 080 222 333
- Post: Cesta na Senec 2, 821 04 Bratislava, Slovakia, Legal Department, for the attention of the Data Protection Officer
2. What is Tesco Now (Tesco Hneď) and what is Wolt’s role?
Tesco Now (Tesco Hneď) is a Tesco-branded immediate online ordering service through which you can sign in using your Tesco customer account, browse and order Tesco products, choose an available delivery method, pay for your order, receive order updates, track your order where available, and obtain customer support.
Tesco has engaged Wolt Slovensko s.r.o., Mlynské Nivy 5, 81109 Bratislava, Slovak Republic, company registration number 52 396 771, to provide and technically operate Tesco Now (Tesco Hneď). Wolt processes personal data on Tesco’s documented instructions as Tesco’s data processor. Its activities include operating and maintaining the Tesco-branded Storefront, facilitating sign-in and order placement, transmitting orders, supporting payments and fulfilment, providing order tracking and customer support.
3. What personal data do we process?
Depending on how you use Tesco Hneď and the nature of your order, we may process:
- Tesco account, customer and authentication identifiers, including your customer UUID and the technical Tesco Hneď user identifier created to operate the service;
- contact and delivery information, including your name, email address, telephone number, delivery address and delivery instructions;
- order and fulfilment information, including products, quantities, price, discounts, selected store, order time, order number, status, fulfilment method, substitutions, refunds, cancellations and complaints;
- delivery and tracking information, including estimated and actual delivery times, courier status, masked contact data and location information necessary to provide the requested delivery;
- payment and transaction information necessary to process payment, reconciliation and refunds. Full payment-card details are handled by the relevant payment-service provider and are not made available to Tesco;
- customer-support information, including communications, order details, complaint information, call or message metadata, and the resolution of your request;
- technical, usage and security information, including IP address, device, browser and session identifiers, timestamps, authentication attempts, diagnostic logs, audit logs and security events; and
- operational reports and analyses concerning order, fulfilment, delivery, support, service availability, customer experience and suspected misuse.
Tesco Now (Tesco Hneď) is not intended to collect special-category personal data. Please do not include sensitive information in delivery instructions or support communications unless it is necessary for us to deal with your request. Wolt is not permitted to infer or create sensitive information from your product selections, behaviour, support communications or delivery information.
4. Why do we process your personal data?
| Purpose | How we use the information | Legal basis |
|---|---|---|
| Providing Tesco Now (Tesco Hneď) and fulfilling your order | Sign-in, ordering, payment, fulfilment, delivery or collection, order updates, tracking and necessary customer support. | Article 6(1)(b) GDPR |
| Customer service and complaint handling | Answering questions, investigating and resolving complaints, arranging refunds or remedies, documenting our response and managing disputes. | Article 6(1)(b) and, for legal claims, Article 6(1)(f) GDPR |
| Legal and regulatory compliance | Accounting and tax records, consumer-protection requirements, and responses to authorities or courts. | Article 6(1)(c) GDPR |
| Security, fraud prevention and legal claims | Authentication, protection of customers and systems, prevention and investigation of fraud or misuse, incident management and protection of legal rights. | Article 6(1)(f) GDPR |
| Operating and improving Tesco Hneď | Monitoring service performance, troubleshooting, capacity planning, operational analysis and improving reliability and customer experience. We use aggregated or anonymised information where reasonably possible. | Article 6(1)(f) GDPR |
Tesco’s legitimate interests include protecting customers, systems, services, assets and legal rights; ensuring that Tesco Hneď is secure and reliable; investigating misuse; handling claims; and understanding and improving operational performance. You may object to processing based on legitimate interests as explained in Tesco’s full Customer Privacy Notice.
Personal data collected through Tesco Hneď will not be used by Wolt for its own marketing. Tesco will use personal data for marketing only in accordance with your Tesco account choices and Tesco’s full Customer Privacy Notice.
5. Where do we obtain your personal data?
We obtain personal data directly from you, from your Tesco customer account, automatically from your device and use of Tesco Hneď, and from the organisations involved in operating and fulfilling the service, including Wolt, the participating Tesco store, delivery partners, payment-service providers and approved technology providers.
If you provide personal data about another person, such as the person receiving the delivery, you should ensure that you are entitled to provide it and that the person is informed about its use.
6. Is the information mandatory?
Information identified as required during sign-in, checkout, payment and delivery is necessary to provide Tesco Now (Tesco Hneď) and fulfil your order. If you do not provide it, we may be unable to authenticate your account, create or process the order, accept payment, arrange delivery or collection, contact you about the order, or provide customer support. Optional information does not have to be provided unless it becomes necessary for a particular delivery or support request.
7. Who receives your personal data?
We disclose personal data only where necessary for the purposes explained in this notice or where the law requires it. Recipients may include:
- Wolt Slovensko s.r.o., which operates Tesco Hneď on Tesco’s behalf;
- couriers and delivery partners, which receive the information necessary to complete the delivery;
- payment-service providers, which process payment, transaction and refund information;
- approved providers of hosting, storage, database, authentication, communications, telephone-number masking, mapping, monitoring, security, analytics and customer-support services;
- Tesco Group companies supporting customer service, technology, information security, legal, compliance and other central services; and
- courts, law-enforcement bodies, tax authorities, data protection or consumer-protection authorities, insurers, auditors and professional advisers where disclosure is legally required or necessary to protect legal rights.
Where a recipient processes personal data on Tesco’s behalf, it must follow Tesco’s documented instructions and appropriate contractual, confidentiality and security requirements.
8. How long do we keep your personal data?
Tesco retains personal data only for as long as necessary for the relevant purpose and in accordance with the retention periods and criteria described in Tesco’s full Customer Privacy Notice. These periods take account of the customer relationship, order fulfilment, complaint handling, accounting and tax obligations, security requirements, and the establishment, exercise or defence of legal claims.
Wolt retains Tesco Now (Tesco Hneď) personal data only for as long as necessary to provide the service on Tesco’s behalf and in accordance with Tesco’s documented instructions. On termination of the service, Wolt must return or delete the personal data in accordance with its agreement with Tesco, except where applicable law requires continued storage.
9. International transfers
Some approved service providers may process personal data in, or access it from, countries outside the European Economic Area. Information about Tesco’s approach to international transfers, the safeguards used and how to request further information is provided in Tesco’s full Customer Privacy Notice.
Where required, Tesco uses an applicable adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where necessary.
10. Automated decision-making and profiling
Tesco does not use Tesco Now (Tesco Hneď) personal data to make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
Tesco Now (Tesco Hneď) customer data is not made available to Wolt for independent advertising, audience creation, lookalike modelling or personalization.
11. Your rights
Depending on the applicable GDPR conditions, you may have rights of access, rectification, erasure, restriction, objection and data portability, as well as the right to withdraw consent where processing is based on consent. A full explanation of these rights, their conditions and how Tesco handles requests is available in Tesco’s full Customer Privacy Notice.
To exercise your rights in relation to Tesco Hneď, contact Tesco at adatvedelem@tesco.com. Wolt assists Tesco with requests relating to Tesco Hneď and may forward any request it receives to Tesco for handling.
12. Complaints
You have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Galvaniho 7/B, 821 04 Bratislava, Slovak Republic („Office“), statny.dozor@pdp.gov.sk, http://www.dataprotection.gov.sk/:
13. Security
Tesco requires appropriate technical and organizational measures to protect personal data against unauthorized or unlawful access, accidental loss, alteration, disclosure, destruction and other misuse. Depending on the relevant risk, these measures include access and authentication controls, encryption, logging and monitoring, confidentiality obligations, data segregation, incident-management procedures, security testing and contractual security requirements for Wolt and its subprocessors. Access is limited to persons who need the information for their role.
14. Cookies and similar technologies
Tesco Now (Tesco Hneď) may use cookies or similar technologies required to maintain the session, authenticate customers, preserve the basket, support checkout, protect the service and ensure that it operates correctly. Information about any non-essential technologies, their purposes, providers and duration is provided through the cookie information and preference controls presented on the relevant website.
15. Changes to this notice
We may update this notice where Tesco Now (Tesco Hneď) the supporting technology, service providers, processing activities or legal requirements change. The current version will be available through Tesco Now (Tesco Hneď) and Tesco’s website. Where a change materially affects the processing of your personal data, we will take reasonable steps to bring it to your attention where appropriate.