General Data Protection

updated 1.7.2024

Terms of processing personal data

The administrator of the website available at the link https://www.slovenskecipky.eu in order to protect your rights observes the following rules when processing your personal of data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation) , hereinafter referred to as "Regulation".

A. Basic information for you as a data subject

If you use our website and use our services, we process your personal data. As a data subject, you have the right to the following information about us and how we handle your data.

A.1. Data cotroller identity and contact details

The owner of the website is JUDr. Andrea Kanoczová, with registered office at Laborecká 48, 0660 01 Humenné, ID number: 42380049. Contact e-mail of the data cotroller: lace.cipka@gmail.com. According to the Regulation, the data cotroller is the person who determines the purposes and means of personal data processing.

A.2. Contact details of the data processor

If you are interested in contacting the data processor, contact by e-mail: lace.cipka@gmail.com. The data processor is a person designated by us who provides us with advice on compliance with the Regulation and other regulations for the protection of personal data. The responsible person monitors the compliance of our activities with the Regulation and, if necessary, cooperates with the supervisory authority, which is the Personal Data Protection Office of the Slovak Republic.

A.3. Purposes of processing for which personal data are intended, as well as the legal basis of processing

The personal data provided by you are processed for various purposes as follows:

  1. in order to fulfill the order, i.e. confirmation of the order, issuance of a tax document - invoice, delivery of goods, processing of complaints, acceptance of payment for our goods. The legal basis for such processing of personal data is the fulfillment of obligations arising from the purchase contract concluded with you through our online store. Personal data that we process about you: name, surname, place of residence, e-mail address, billing address, delivery address, contact telephone number, IP address. If you visit our site only as an interested party, but do not order anything, we only process data about your IP address. This data is necessary for the smooth functioning of our website.
  2. in the case of registered users, the purpose of processing is your registration and provision of benefits for you. In this case, the legal basis is your consent, which allows us to process your personal data, on the basis of which we distinguish you from other (unregistered) users and provide you with various benefits, especially the complete management of your orders, archiving of your reviews. If you do not wish to be a member, you can revoke this consent at any time. Personal data that we process about you: e-mail address, password, IP address, history of your orders and reviews in the e-shop. As part of registration, we also process some of the following personal data about you, if you voluntarily provide them to us in your account settings: first name, last name, company information, phone.
  3. in case of consent to sending advertising information for the purpose of promoting the online store Slovenskecipky.eu and its products, the purpose of processing is to promote us , our online store and the goods offered. Again, the legal basis is your consent, which you can withdraw at any time. Personal data that we process about you: e-mail address, IP address.

A.4. Recipients or categories of recipients of personal data

According to the Regulation, a recipient is any person to whom we provide your personal data. We always do this only when the regulations allow it and when it is necessary to provide quality services for you. Nowadays the following categories of recipients to whom your personal data may be provided are considered:

  1. administrators, programmers and consultants who work for us but are not formally our employees.
  2. web hosting service provider
  3. external dispatch center
  4. transport companies: Packeta Slovakia s. r. o., Slovak Post.
All recipients are obliged to comply with legal regulations for the purpose of protecting your personal data. Recipients may also not use personal data for any purpose other than the purpose defined above in point 1.3. of these Conditions.

After the end of the purpose of processing, personal data may be further processed only to the extent necessary for statistical purposes or for archiving purposes, which is not considered incompatible with the original purpose of processing and is permitted with with regard to the principle of limitation of purpose according to Art. 5 par. 1 letter b) Regulations. After the end of the processing purpose, we will subsequently delete your data. Persons cooperating with us (i.e. recipients of your personal data).

A.5. Transfer of personal data to a third country or international organization

We do not plan and will not transfer your personal data to third countries or international organizations. If this should happen, we will notify you in advance and we will only do so after strict conditions have been met in order to ensure the protection of your personal data (further detailed in Articles 44 to 50 of the Regulation).

B. Additional information for the data subject

B.1. Period of storage of personal data or criteria for its determination

The storage period of your personal data depends on the purpose for which you provided us with the data. (Purpose of personal data processing - see above in point 1.3. of these Rules).

If the purpose of the processing is to fulfill your order (point A.3.a), we actively process this data only until your order is fulfilled. Subsequently, they are archived in the event of a tax audit for a maximum of 10 years from the completion of the taxable transaction. The right to process personal data is given if it is necessary to prove, exercise or defend legal claims.

If the purpose of processing is your registration and use of benefits (point A.3.b), we only process this data for as long as we have your consent. After withdrawing your consent, we can archive this data only if it is necessary to protect our interests. For example, if, due to the provision of a loyalty discount and your subsequent claim in court proceedings, it would be necessary to prove that you were a member of the loyalty program and what discount you were entitled to. The right to process personal data is given if it is necessary to demonstrate, exercise or defend legal claims. However, if you do not initiate any legal or other proceedings, we can archive this data about you for a maximum of 3 and a half years from the end of your membership in the loyalty program.

If the purpose of the processing is to send advertising information (point A.3.c), we process this data only for as long as we have your consent. After revoking your consent, we are obliged to delete all your personal data processed for that purpose without delay, no later than one month after revoking consent.

B.2. Existence of rights applied against the data controller

As a data subject, you have a number of rights in accordance with the Regulation, which you can exercise against us at your discretion and demand their fulfillment. These rights are:

  1. the right to request from the data controller access to personal data concerning the person concerned,
  2. the right to correct personal data,
  3. the right to delete personal data ("the right to be forgotten")
  4. the right to restrict processing,
  5. the right to object to processing,
  6. right to data portability.
All these rights are explained in detail in section C of these Personal Data Processing Terms below.

B.3. The right to withdraw consent at any time

In cases where we process personal data about you based on your consent (i.e. for purposes according to points A.3.b) and A.3.c) of these Rules), you have the right to withdraw your consent at any time. Revoking your consent does not affect legality of processing based on consent granted before its withdrawal. That is, even if you revoke your consent, we performed the actions carried out until your consent was revoked.

B.4. The right to file a complaint with a supervisory authority

If you believe that your rights stated in these Rules or in the Regulation have been violated, you have the right to file a complaint with the supervisory authority, which is the Personal Data Protection Office of the Slovak Republic.

B.5. Obligation or possibility to provide personal data

In order to fulfill your orders (purpose in accordance with point A.3.a) of the Rules) we absolutely need you to provide us with personal data about yourself, without which we cannot fulfill the order. If you do not want to provide us with this personal data, Unfortunately, we cannot properly deliver the ordered goods.

On the contrary, in order to register you as a member of the loyalty program and to send advertising information (purposes in accordance with points A.3.b and A.3.c), you are not obliged to provide us with your personal data. We can only process them based on your consent, which you may or may not give us. At the same time, you are entitled to withdraw it from us at any time.

B.6. Existence of automated decision-making including profiling

When processing your personal data for the purposes of the loyalty program and for sending advertising information (purposes in accordance with points A.3.b) and A.3.c), we perform profiling of your person. Profiling means automated processing of personal data, which consists in the fact that personal data relating to a natural person is used to evaluate certain personal characteristics or characteristics. It serves us to adapt the website for your needs. As part of profiling, you are shown content that might be of interest to you, and when sending advertising, we send you advertising that is relevant to you. The consequence of such processing is a more efficient provision of information for you, which makes it easier for you to use our website and shop.

C. Your data subject rights vis-à-vis the data controller

C.1. The right to request from the data controller access to personal data concerning the person concerned

As a data subject, you have the right to request confirmation from us as to whether personal data relating to you are being processed, and if so, you have the right to obtain access to this personal data and the following information:

  1. processing purposes;
  2. categories of affected personal data;
  3. recipients or categories of recipients to whom personal data have been or will be provided, in particular recipients in third countries or international organizations;
  4. if possible, the expected period of storage of personal data or, if this is not possible, the criteria for its determination;
  5. the existence of the right to request from the data controller the correction of personal data concerning the person concerned or their deletion or restriction of processing, or the right to object to such processing;
  6. the right to file a complaint with a supervisory authority;
  7. if the personal data was not obtained from the data subject, any available information as to its source;
  8. the existence of automated decision-making, including the profiling referred to in Article 22 par. 1 and 4 of the Regulations and, in these cases, at least meaningful information about the procedure used, as well as the meaning and expected consequences of such processing for you as the person concerned.
We have provided you with all this information in parts A and B of these Terms of Personal Data Processing. If any of this is not clear to you, do not hesitate to contact us.

If personal data is transferred to a third country or an international organization, the data subject has the right to be informed of adequate guarantees according to Article 46 of the Transfer Regulation. In your case it is not performed data transfer to a third country or international organization.

As the data controller, we are obliged to provide you with a copy of the personal data that is being processed. We may charge you a reasonable administrative fee for any additional copies you request. If you submit a request by electronic means, the information will be provided to you in a commonly used electronic form, unless you have requested another method. This right of yours to obtain a copy must not have adverse consequences on the rights and freedoms of others.

C.2. The right to correct personal data

As a data subject, you have the right to have incorrect personal data concerning you corrected without undue delay. With regard to the purposes of processing, you have the right to supplement incomplete personal data, including by providing a supplementary statement.

C.3. The right to erasure of personal data ("the right to be forgotten")

As a data subject, you have the right to obtain from us the deletion of personal data concerning you without undue delay. While we, as the data controller, are obliged to delete personal data without undue delay if any for the following reasons:

  1. personal data are no longer necessary for the purposes for which they were obtained or otherwise processed;
  2. the person concerned revokes the consent on the basis of which the processing is carried out, according to article 6 par. 1 letter a) Regulation or Article 9 par. 2 letters a) Regulations, and if there is no other legal basis for processing;
  3. the person concerned objects to the processing according to article 21 par. 1 of the Regulations and there are no valid reasons for processing or the data subject objects to the processing according to Article 21 par. 2 Regulations;
  4. personal data was processed illegally;
  5. personal data must be deleted in order to fulfill a legal obligation under the law of the Union or the law of the Slovak Republic;
  6. personal data was obtained in connection with the offer of information society services according to Article 8, paragraph 1 Regulations.
If we have disclosed personal data and we are required to delete personal data under any of the above conditions, we are required to take reasonable measures, taking into account the available technology and the costs of implementing the measures including technical measures to inform the data controllers who process the personal data that you have asked us to delete all references to this personal data, its copy or replicas.

The above paragraphs do not apply if the processing is necessary:

  1. to exercise the right to freedom of expression and information;
  2. to fulfill a legal obligation that requires processing under Union law or the law of a Member State to which the data controller is subject, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the data controller;
  3. for reasons of public interest in the field of public health in accordance with Article 9 par. 2 letters h) and i) of the Regulation, as well as Article 9 par. 3 Regulations;
  4. for the purposes of archiving in the public interest, for the purposes of scientific or historical research or for statistical purposes pursuant to Article 89, paragraph 1 of the Regulations, if it is likely that the right to erasure referred to in the first paragraph of this section will make it impossible or seriously difficult to achieve the goals of such processing, or
  5. to demonstrate, exercise or defend legal claims.

C.4. Right to restriction of processing

  1. As a data subject, you have the right to have us (as the data controller) restrict processing in one of the following cases:
    1. the person concerned contests the correctness of the personal data, during the period allowing the data controller to verify the correctness of the personal data;
    2. the processing is illegal and the data subject objects to the erasure of personal data and requests the restriction of their use instead;
    3. the data controller no longer needs the personal data for processing purposes, but the data subject needs them to prove, exercise or defend legal claims;
    4. the person concerned objected to the processing according to Article 21 par. 1 Regulations, until it is verified whether the legitimate reasons on the part of the data controller prevail over the legitimate reasons of the person concerned.
  2. If the processing has been restricted according to paragraph 1 above, such personal data, with the exception of storage, is processed only with the consent of the person concerned or for proving, exercising or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the Union or a member state.
  3. The data controller informs the affected person who has reached the restriction of processing according to paragraph 1 above before the restriction of processing is cancelled.

C.5. The right to object to processing

  1. As a data subject, you have the right to object at any time for reasons related to your specific situation against the processing of personal data that concerns you, if this processing is carried out on the basis of Article 6 para. 1 letter e) or f) Regulations. That is, in cases when:
    • is the processing necessary to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the data controller, or
    • the processing is necessary for the purposes of the legitimate interests pursued by the data controller or a third party, except when such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require protection personal data, especially if the person concerned is a child.
    You can also object to profiling based on the mentioned provisions. In this case, we may not further process your personal data, unless we demonstrate the necessary legitimate reasons for processing that prevail over your interests, rights and freedoms, or reasons for proving, exercising or defending legal claims.
  2. If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing, including profiling to the extent that it is related with such direct marketing.
  3. If you object to processing for direct marketing purposes, we may no longer process your personal data for such purposes.
  4. We hereby expressly draw your attention as a data subject to the right to object to the processing (including the right to object to profiling) mentioned in paragraphs 1 and 2 above.
  5. In connection with the use of information society services and regardless of Directive 2002/58/EC, the data subject may exercise his right to object by automated means using technical specifications.
  6. If personal data is processed for the purposes of scientific or historical research or for statistical purposes according to Article 89, paragraph 1 of the Regulations, the data subject has the right to object, for reasons related to his specific situation, to the processing of personal data concerning him, with the exception of cases where the processing is necessary for the performance of a task for reasons of public interest.

C.6. Right to Data Portability

The essence of this right is that you can ask us to provide all personal data that we process about you to another data controller in a technically acceptable form.

  1. So, as a data subject, you have the right to receive personal data concerning you and which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another data controller without us preventing you if:
    1. the processing is based on consent according to article 6 par. 1 letter a) Regulation or Article 9 par. 2 letters a) Regulations, or on the contract according to article 6 par. 1 letter b) Regulations, and
    2. if the processing is carried out by automated means.
  2. When exercising his right to data portability according to paragraph 1, the affected person has a higher right to transfer personal data directly from one data controller to another data controller, as long as this is technically possible.
  3. Exercising the right referred to in paragraph 1 of this article above does not affect article 17 of the Regulation. The aforementioned right does not apply to processing necessary to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the data controller.
  4. The right mentioned in paragraph 1 must not have adverse consequences on the rights and freedoms of others.

D. Other rights and rules when processing personal data

D.1. Personal information when paying for goods via electronic banking

If you use one of the offered electronic banking versions to pay for goods in our online store, we do not come into contact with any data such as login data. Payments are made directly to the bank's website. This will provide us with information about the success of the payment and your name and account number so that we can identify the payment.

D.2. Handling of personal data

We protect personal data against their damage, destruction, loss, change, unauthorized access and access, provision or publication, as well as against any other impermissible methods of processing. We process personal data in accordance with generally binding legal regulations, especially in accordance with the Regulation and also in accordance with good morals. Persons who come into contact with personal data are informed in advance of how they are to be processed and are informed of the obligation to maintain data confidentiality.

D.3. Correctness of personal data

The personal data you provide to us must be correct. If you discover that you have provided us with incorrect data or if your personal data has changed, please inform us of these facts. We will your data process correctly and in case of change, we will update them.

D.4. Removal of personal data

You can change your data in your account settings after logging in. To delete all your personal data, you must cancel your account. If you want to cancel your account, write to us at the email address: lace.cipka@gmail.com