Privacy Policy

Legal reason	Purpose	Data	Data source	Processors
Performance of contract	Implementation orders	Personal data of clients (contact details, address) and information about the ordered goods	Order form	Subcontractors, postal services, cloud storage, shipping companies, payment gateways
Performance of the contract	Reply to a message sent via the contact form	Clients' contact details	Contact form, email  communication	Subcontractors
Contract performance	Accounting	Client personal data (contact details, place of residence) and information about ordered goods	Invoices

Legitimate interest	Routine traffic analysis, server error detection and prevention of fraud and server attacks	Pseudo-anonymized identifiers of registered users, such as user IDs, IP addresses	User movement on the site, registration and creation of anonymized user ID	Google Analytics, web hosting services
Consent	Marketing and promotion website	E-mails, customer names,	Newsletter form

6. Legal basis and purpose of processing personal data

In most cases, we process your data for our own purposes as a data controller. We also transfer your data to our partners to secure payment and other details about your order. We also transfer the data to our intermediaries, who process it according to our instructions. With your consent, we may also provide your data to social media.

On this legal basis, we process your identification, contact and order data in order to comply in particular with the following laws:

   

• Act No. 40/1964 Coll., Civil Code,
• Act No. 250/2007 Coll., on Consumer Protection,
• Act No. 102/2014 Coll. on Consumer Protection in the Sale of Goods at a Distance or Off-Premises
• Act No. 222/2004 Coll., on Value Added Tax,
• Act No. 431/2002 Coll., on Accounting.

The legal basis for processing personal data is

•     performance of a contract between you and the controller pursuant to Article 6(1)(b) of the GDPR, (If you purchase from us as a natural person, we process your personal data for the purpose of processing your order (your identification and contact details and data about your orders. If you purchase from us as a representative of a legal entity, we process the same data for the same purpose based on our legitimate interest in concluding and fulfilling a contract with the person you represent).
•     for the purpose of payment for goods, including securing payment; in this regard, we may also transfer your data to our partners in the field of payment systems.

We may also transfer your personal data to other entities that are in the role of the controller, namely:

•     to the partner operating the E-shop - EVici webdesign s.r.o., IČO: 28598661
•     transport partners, in particular PPL CZ s.r.o., IČO: 25194798, Direct Parcel Distribution CZ s.r.o., IČO: 61329266, TOPTRANS EU, a.s., organizational unit, IČO: 28202376, if they deliver your order;
•    online payment by bank transfer, solution from COMGATE, ComGate Payments, a. s., IČO: 279 24 505.

 

Based on your consent to social networks: 

- Google Ireland Limited (registration number: 368047), with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland; the privacy policy of this company is available here: https://policies.google.com/technologies/ads

- Facebook Ireland Limited, with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, D02 X525, Ireland; the privacy policy of this company is available here: https://cs-cz.facebook.com/about/privacy

    The legitimate interest of the operator in providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(f) of the GDPR,
    Your consent to the processing for the purposes of providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(a) of the GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll. about certain information society services in the absence of an order for goods or services.

 

7. The purpose of processing personal data is

    Processing personal data in connection with the purchase of goods in the e-shop

 

The processing of personal data is necessary for the purposes of concluding a purchase contract and its subsequent implementation, delivering the ordered goods and also for the purposes of fulfilling statutory tax obligations.

In the event of creating an order, SecurStar Slovakia collects and processes your personal data to the following extent - name, surname, residential address or delivery address, telephone number, e-mail address. Providing this personal data is a prerequisite for concluding or changing a purchase contract, while providing personal data serves primarily for your clear and unmistakable identification and for contacting you for the purpose of delivering the ordered goods.

    Processing of personal data in connection with the handling of complaints, inquiries and claims

The legal basis for the processing of personal data is the fulfillment of the contractual and statutory obligations of SecurStar Slovakia. In connection with the handling of complaints and claims, SecurStar Slovakia s.r.o. also processes personal data for the purposes of its legitimate interests in the event of a possible dispute arising from the claim.

When handling complaints, SecurStar Slovakia s.r.o. collects and processes your personal data to the extent of - name, surname, residential address or delivery address, telephone number, e-mail address, transaction history of orders, data on purchased goods.

8.  Processing of personal data in connection with the management of customer accounts

If you register as a user, SecurStar Slovakia s.r.o. processes your personal data for the purpose of managing your customer account. The legal basis for processing is the performance of the contract, i.e. negotiations for the purpose of concluding a purchase contract, delivery of the ordered goods, related communication and also for the purpose of fulfilling statutory tax obligations.

In the case of customer account management, SecurStar Slovakia collects and processes the personal data of the data subject to the following extent: name and surname, e-mail address, telephone number, residential address or delivery address, password in encrypted form, data related to purchases made (e.g. type and price of goods, date of purchase, data on the status of the customer account)

providing personal data is a necessary requirement for concluding and fulfilling the contract, without providing personal data, the operator cannot conclude or fulfill the contract,
    sending commercial communications and other marketing activities.

    There is no automated individual decision-making by the controller within the meaning of Article 22 GDPR. 
    Personal data are not transferred outside the European Union.

 

9. Cookies

When you visit our website, we storeand then read small cookies on your device. A cookie is a small file of letters and numbers that we store in your web browser or on your computer's hard drive. Some cookies allow us to link your browsing activities on our website from the moment you open your web browser window until you close it. These cookies are deleted when you close your browser window. Others remain on your device for a certain period of time and are activated each time you visit the website that created the cookie.

These cookies and other files are necessary for our website to function. If you block these cookies in your browser, our website may not function properly and we may not be able to provide you with our products and services.

If you do not disable the use of third-party cookies and the transfer of your data to advertising and social networks in the Privacy Settings section, and you click on any link on our website (outside the notification bar) or click on the "I understand" button included in the notification after we notify you, we will assume that you agree to the use of these cookies and the transfer of your data to advertising and social networks. You can withdraw your consent at any time by disabling this feature in the Privacy Settings section.

Advertising-targeted cookies are processed only with your consent.

You can also browse our website in a mode that does not allow the collection of personal data. You can disable the use of cookies on your computer in your internet browser.

 

10. Data retention period
    The operator stores personal data

•     for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the operator and to assert claims arising from this contractual relationship (for a period of 15 years from the termination of the contractual relationship).
•    for the period until you withdraw your consent to the processing of personal data for marketing purposes, but no longer than 3 years if personal data is processed based on consent.

    After the retention period, the controller deletes the personal data.

 

11. Your rights
    Under the terms of the GDPR, you have

•     The right to access your personal data pursuant to Article 15 of the GDPR. You have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data from, to whom we transfer them.
•    The right to rectify personal data pursuant to Article 16 of the GDPR or to restrict processing pursuant to Article 18 of the GDPR. If you find that the personal data we process about you are inaccurate or incomplete, you have the right to have them rectified or completed without undue delay.
•    The right to erase personal data pursuant to Article 17 of the GDPR. In some cases, you have the right to have your personal data erased. We will delete your personal data without undue delay.
•    Right to restriction of processing. This right allows you to request in certain cases that your personal data be marked and not be subject to any further processing operations, but for a limited period of time.
•   Right to object to processing pursuant to Article 21 GDPR. You have the right to object to the processing of your personal data based on our legitimate interest.
•   Right to data portability pursuant to Article 20 GDPR. We will provide you with your personal data in a structured, commonly used and machine-readable format.
•   Right to withdraw consent to processing in writing or electronically to the address or e-mail of the controller specified in Article I of these terms and conditions.

You also have the right to file a complaint with the Personal Data Protection Authority if you believe that your right to the protection of personal data has been violated. You can file a complaint against our processing of personal data with the Office for Personal Data Protection, located at Hraničná 12, 820 07 Bratislava 27, e-mail: statny.dozor@pdp.gov.sk. 

 

12. Conditions for securing personal data
    The operator declares that it has taken all appropriate technical and organizational measures to secure personal data.
    The operator has taken technical measures to ensure data retention and the storage of personal data in paper form.
    The operator declares that only authorized persons have access to personal data.

 

13. Contact details

If you want to contact us during the processing, you can contact us at SecurStar Slovakia s.r.o., Černyševského 10, 851 01 Bratislava, or by e-mail: obchod@mokarabiacaffe.sk.