Privacy policy

Privacy Policy

Personal Data Protection
Controller’s information duty towards data subjects

pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter “Regulation (EU) 2016/679” or “GDPR”)

Controller

The controller of personal data is:

Jakub Bielek – hrajpadel.sk
Place of business: Hollého 3855/85, 036 01 Martin
Company ID (IČO): 57 350 035
Tax ID (DIČ): 1130691298
VAT ID (IČ DPH): SK1130691298
Email: info@hrajpadel.sk

Website: www.hrajpadel.sk

The controller has not appointed a data protection officer, as there is no obligation to do so under the GDPR.

How did we obtain your personal data?

The controller obtains and processes personal data in its own name through authorized persons, who are primarily the controller and persons entrusted with running the e-shop.

When the controller processes your personal data, you are a data subject, i.e. a person whose personal data is being processed.

The controller processes personal data mainly about the following data subjects:

e-shop customers,
registered users of the website,
persons who placed an order without registration,
persons who contacted the controller via the contact form, email or another communication channel,
website visitors.

The controller obtains your personal data:

most often directly from you (when placing an order, registering, filling in a form, or communicating),
through technical means (cookies, IP address, device information),
where necessary, through third parties (e.g. payment gateways, shipping companies).
Principles of personal data protection

When processing your personal data, the controller complies with the principles under Article 5 of the GDPR, in particular:

the principle of lawfulness, fairness and transparency,
the principle of purpose limitation,
the principle of data minimisation,
the principle of accuracy,
the principle of storage limitation,
the principle of integrity and confidentiality,
the principle of accountability.

Only the controller’s authorized persons, who are bound by a duty of confidentiality, have access to personal data.

The controller is obliged to provide personal data in cases stipulated by special legal regulations, in particular to public authorities, courts or other authorized entities.

On what basis will your personal data be processed?

Your personal data will be processed lawfully, in particular for the following purposes and on the following legal bases:

compliance with the controller’s legal obligations,
performance of a contract or pre-contractual relations,
legitimate interests of the controller,
consent of the data subject,
performance of tasks carried out in the public interest, where this results from special regulations.
What are the possible consequences of failing to provide personal data?

If the controller processes personal data on the basis of a legal obligation, providing personal data is a legal requirement, and failing to provide it may result in the inability to fulfil the legal obligation or in the refusal of service.

In the case of contractual and pre-contractual relations, failing to provide personal data may result in the inability to conclude or perform a contract.

If personal data is processed on the basis of consent, providing the data is voluntary and consent can be withdrawn at any time.

Who are the recipients of your personal data?

Categories of recipients of personal data:

the controller’s authorized persons,
e-shop platform providers (e.g. Shopify),
payment service providers (e.g. Stripe),
shipping companies,
accountant and tax advisor,
public authorities, courts and other authorized entities.
Will your personal data be transferred outside the European Union?

Personal data may be transferred to third countries through service providers based outside the EU, exclusively in accordance with the GDPR and on the basis of appropriate safeguards for the protection of personal data.

Will your data be used for automated individual decision-making?

Personal data will not be used for automated individual decision-making or profiling.

How long will your personal data be stored?

Personal data will be stored:

for the duration of the contractual relationship,
for the period required by special legal regulations,
for the duration of the legitimate interest,
until consent is withdrawn, where consent is the legal basis.
Use of cookies

The website uses cookies to ensure the proper functioning of the site, for analytics, and to improve the user experience. Details are provided in a separate cookie policy.

What are your rights?

You have the right to:

withdraw consent,
access your personal data,
rectify your personal data,
erase your personal data,
restrict processing,
data portability,
object to processing,
lodge a complaint with a supervisory authority.

The supervisory authority is:

Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky)
Hraničná 12, 820 07 Bratislava 27
www.dataprotection.gov.sk