Personal data, its processing and protection

The processing of personal data is governed by the following principles:

Personal data

According to Act 18/2018 Coll. on the Protection of Personal Data, personal data is defined as:

"Any information relating to an identified natural person or an identifiable natural person who can be identified, directly or indirectly, in particular by reference to a common identifier, to another identifier such as a name, surname, identification number, location data or an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, psychological, mental, economic, cultural or social identity."

How we use your information:

This privacy statement tells you how we, the company, collect and use your personal information when processing your orders or contacting you with offers of new goods.

Why does a company have to collect and store my personal data?

In order to be able to deliver and deliver the goods you have selected, we must collect the identification and correspondence personal data of the data subjects for correspondence and transport purposes, for the purposes of handling complaints and keeping prescribed records of transactions carried out. Providing this personal data is a contractual requirement and your obligation, without it it is not possible to conclude a contract and deliver the goods. The legal basis is the performance of the contract. The retention period is 4 years. If you register on our website and create your user account, your e-mail address will be processed for the purpose of managing and making your user account accessible. Providing your e-mail address is mandatory, without it it is not possible to register. Upon successful registration, you have the opportunity to enter your identification personal data and contact details into your user account, which you can change or delete at any time. The legal basis is your consent, which can be revoked at any time. The retention period is until you cancel your user account. If you have given us your consent, we may also process your personal data for marketing purposes, for example to deliver you offers of our goods and services. The legal basis is your consent. You can of course withdraw it at any time. The retention period is until you withdraw this consent. In any case, we are committed to ensuring that the information we collect and use is appropriate for this purpose and does not constitute a violation of your privacy.

Will the company share my personal data with another operator?

We may share your personal data with third parties who have a contractual agreement with our company during the course of our cooperation with you. All third parties with whom we may share your data are obliged to store it securely and use it only for the purpose of delivering the goods. When the intermediaries no longer need your personal data to provide this service, they proceed in accordance with Act 18/2018 Coll.

How will the company use the personal information it collects about me?

The Company will process (collect, store and use) the personal data provided in a manner that is in accordance with Act 18/2018 Coll. on the Protection of Personal Data. We will strive to keep your personal data accurate and up-to-date and will not store it for longer than necessary. The Operator is obliged to store information in accordance with the law, for example information required for income tax and audit purposes. How long certain types of personal data should be stored may also be regulated by specific business sector requirements and agreed procedures. Personal data may be stored in addition to the specified periods also depending on individual business needs.

Under what circumstances will the company contact me?

Our aim is not to invade the privacy of data subjects and in this regard we undertake not to ask irrelevant or unnecessary questions. Furthermore, the information you provide is subject to strict measures and procedures to minimise the risk of unauthorised access or disclosure.

Can I request information about what personal data the company processes about me?

If a company processes and stores your personal data, you can request the following information:

  • Contact details of the relevant data protection officer.

  • The purpose of the processing, as well as the legal basis for the processing.

  • Where the processing is based on the legitimate interests of the organisation or a third party, information about those interests.

  • Categories of personal data collected, stored and processed.

  • Recipients, or categories of recipients, to whom the data is disclosed.

  • If the company intends to transfer personal data to a third country or an international organization, information on how it ensures this. The EU has approved the transfer of personal data to certain countries that meet a minimum standard of personal data protection. In other cases, the company will ensure that specific measures are put in place to secure your personal data.

  • How long will the data be stored?

  • Details of the rights of data subjects to rectification, erasure, restriction or objection to processing.

  • Information about the right of data subjects to withdraw consent at any time.

  • How to file a complaint with a supervisory authority.

  • Whether the provision of personal data is a legal or contractual requirement, or a requirement necessary for the conclusion of a contract, as well as whether data subjects are obliged to provide personal data and the possible consequences of failure to provide such data.

  • The source of the personal data, if not collected directly from the data subjects.

  • Any details and information about automated decision-making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing.

Your rights as a data subject

Whenever we possess or process your personal data, you, the data subject, have the following rights:

  • Right of access - you have the right to request a copy of the information we hold about you.

  • Right to rectification - you have the right to correct data we hold about you that is inaccurate or incomplete.

  • Right to be forgotten - in certain circumstances you can request that the data we hold about you be deleted from our records.

  • Right to restriction of processing - if certain conditions apply to have the right to restrict processing.

  • Right to portability - you have the right to have the data we hold about you transferred to another organisation.

  • Right to object - you have the right to object to certain types of processing, such as direct marketing.

  • Right to object to automated processing, including profiling - you also have the right to the legal effects of automated processing or profiling.

  • Right to judicial review: if the company refuses your request based on the right of access, we will give you a reason why. You have the right to complain.

Competent supervisory authorities:

Personal Data Protection Office of the Slovak Republic

Hraničná 12 820 07 Bratislava 27

Slovak Republic

statny.dozor@pdp.gov.sk

+421 /2/ 3231 3214