GDPR - Data Protection

Processing of Personal Data and Information for the Data Subject

Data Protection Conditions

I. Basic Provisions

The operator of personal data according to § 5 letter o) of Act No. 18/2018 Coll. on the protection of personal data as amended (hereinafter referred to as the “Act”) is ELEGAN s.r.o. Company ID 50209850 (hereinafter referred to as: “operator”).
The contact details of the operator are
address: Ovručská 3, 831 02 Bratislava

email: info@ezapalovace.sk

phone: 0944 575 076

Personal data refers to any information related to an identified or identifiable natural person; an identifiable natural person is one who can be directly or indirectly identified, in particular by reference to a specific identifier, such as a name, identification number, location data, network identifier, or reference to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
The operator has not appointed a person responsible for the protection of personal data.


II. Sources and Categories of Processed Personal Data

The operator processes personal data that you have provided or personal data that the operator has obtained based on the fulfillment of your order.
The operator processes your identification and contact data and data necessary for fulfilling the contract.


III. Legal Basis and Purpose of Processing Personal Data

The legal basis for processing personal data is
fulfillment of the contract between you and the operator according to § 13 par. 1 letter b) of the Act,
the legitimate interest of the operator in providing direct marketing (especially for sending commercial notifications and newsletters) according to § 13 par. 1 letter f) of the Act,
your consent to the processing for the purposes of providing direct marketing (especially for sending commercial notifications and newsletters) according to § 13 par. 1 letter a) of the Act in the event that no order for goods or services has been made.
The purpose of processing personal data is
to fulfill your order and to exercise the rights and obligations arising from the contractual relationship between you and the operator; personal data that is necessary for the successful fulfillment of the order (name and address, contact) is required when placing an order, providing personal data is a necessary requirement for concluding and fulfilling the contract, without providing personal data it is not possible to conclude the contract or to fulfill it by the operator,
sending commercial notifications and carrying out further marketing activities.
The operator engages in automated individual decision-making in accordance with § 28 of the Act. You have given your explicit consent to such processing.


IV. Retention Period of Personal Data

The operator retains personal data
for the time necessary to exercise the rights and obligations arising from the contractual relationship between you and the operator and to assert claims from these contractual relationships (for a period of 15 years from the termination of the contractual relationship).
for the time until the consent to the processing of personal data for marketing purposes is withdrawn, for a maximum of 3 years, if the personal data is processed based on consent.
After the retention period of personal data has expired, the operator will delete the personal data.


V. Recipients of Personal Data (Operator's Subcontractors)

The recipients of personal data are persons
Involved in the delivery of goods/services/processing of payments based on the contract,
providing services related to the operation of the e-shop and other services in connection with the operation of the e-shop,
providing marketing services,
for the purpose

Accounting of tax documents in accordance with the contract and with generally binding legal regulations in the scope of:
- first name and surname, title,
- postal address,
- billing address,
- email address,
- phone contact,
- bank connection details,
- details about the subject of performance Administrator.
The operator does not intend to transfer personal data to a third country (to a country outside the EU) or an international organization.


VI. Your rights

Under the conditions set by the Law, you have
the right to access your personal data according to § 21 of the Law,
the right to rectify personal data according to § 22 of the Law, or to restrict processing according to § 24 of the Law,
the right to delete personal data according to § 23 of the Law,
the right to object to processing according to § 27 of the Law,
the right to data portability according to § 26 of the Law,
the right to withdraw consent to processing in writing or electronically to the address or email of the operator provided in Article III of these conditions.
You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.


VII. Conditions for securing personal data

The operator declares that he has taken all appropriate technical and organizational measures to secure personal data.
The operator has taken technical measures to secure data storage (login name, password, antivirus program, and firewall) and storage of personal data in paper form (locked room).
The operator declares that only authorized persons have access to personal data.


VIII. Final provisions

By sending an order from the online order form, you confirm that you are familiar with the personal data protection conditions and that you accept them in their entirety.
You agree to these conditions by checking the consent via the online form. By checking the consent, you confirm that you are familiar with the personal data protection conditions and that you accept them in their entirety.
The operator is entitled to change these conditions. The new version of the personal data protection conditions will be published on its website and will also send you the new version of these conditions to the email address you provided to the operator.


These conditions take effect on May 25, 2018.