Privacy Policy
1. Basic Provisions:
The controller (administrator) of your personal data according to Article 4, Point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as GDPR) is the company: South s.r.o., Veterná ulica 500/36, 922 02 Krakovany, ID No: 51 841 070
The contact details of the controller are:
Email: info@abrakastore.sk
Phone: 0904 464 811
What is Personal Data?
Personal data refers to information related to an identified or identifiable natural person, who can be identified directly or indirectly, particularly based on a generally usable identifier or another identifier such as a name, surname, identification number, location data, or online identifier, or based on one or more characteristics or features that make up their physical identity, physiological identity, genetic identity, mental identity, economic identity, cultural identity, or social identity.
What is Personal Data Processing?
Personal data processing refers to any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collecting, recording, organizing, structuring, storing, altering, retrieving, consulting, using, disclosing by transmission, disseminating or otherwise making available, aligning or combining, restricting, erasing, or destroying.
The controller (administrator) is not obliged to appoint a Data Protection Officer.
2. Sources and Categories of Personal Data:
The controller processes personal data (directly from you) that you have provided or personal data obtained in connection with fulfilling your order.
Your identification and contact details, as well as data necessary for the performance of the contract.
3.Legal Basis and Purpose of Processing:
The legal basis for processing is:
The performance of a contract between you and the controller according to Article 6(1)(b) GDPR.
The legitimate interest of the controller in providing direct marketing according to Article 6(1)(f) GDPR.
Your consent to the processing of personal data for the purposes of direct marketing according to Article 6(1)(a) GDPR.
Purpose of Personal Data Processing:
The purpose of processing personal data is:
To handle your order and fulfill the rights and obligations arising from the contractual relationship between you and the controller. When placing an order, personal data necessary for the successful processing of the order (name, address, contact) are required, according to Article 6(1)(b) GDPR. This includes processing payments, delivering goods or services, handling complaints, etc. The processing of customer personal data occurs without the customer’s consent, as the legal basis for processing their personal data for the purpose of fulfilling the contract is the specific contract concluded remotely between the customer and the controller. Providing personal data is a necessary requirement for concluding and fulfilling the contract; without providing personal data, it is not possible to conclude the contract or for the controller to fulfill its terms. Sending marketing offers and conducting other marketing activities. The controller does not engage in automated individual decision-making within the meaning of Article 22 GDPR.
4.Retention Period:
The controller retains personal data: For the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to assert claims arising from these contractual relationships. For the period until consent to the processing of personal data for marketing purposes is withdrawn.
5. Recipients of Personal Data
Who is a recipient?
A recipient is anyone to whom personal data is disclosed, regardless of whether they are a third party. An authority of public power processing personal data based on a specific legal provision is not considered a recipient.
There are individuals involved in the delivery of goods, services, and payment processing based on a contract.
The controller does not transfer, disclose, or provide access to personal data to third countries.
6. Data Security Conditions
The controller declares that appropriate personnel, technical, and organizational measures have been implemented to ensure the protection of personal data.
The controller has implemented technical measures to secure data repositories and repositories of personal data in document form.
The controller declares that only authorized personnel designated by them have access to personal data.
7. Your Rights:
Under the conditions set out in the GDPR, you have:
The right to access your personal data according to Article 15 GDPR
The right to rectification of personal data according to Article 16 GDPR
The right to restriction of processing
The right to erasure (right to be forgotten) according to Article 17 GDPR
The right to object according to Article 21 GDPR
The right to data portability according to Article 20 GDPR
The right to withdraw consent (electronically or by postal address)
The right to lodge a complaint with the supervisory authority if you believe that your rights regarding the protection of personal data have been violated.
Additionally, you have the right to lodge a complaint with the supervisory authority if you believe that your rights regarding the protection of personal data have been violated.
How can you exercise your rights?
Right to access data:
You have the right to know if we process your personal data. If we do, you can request access to it. Based on your request, we will issue a confirmation with information about the processing of your personal data. You can submit your request electronically to the email address: info@abrakastore.sk or by mail to the correspondence address: Veterná ulica 500/36, 922 02 Krakovany, or to the business address: Štefanikova 15a, 921 01 Piešťany.
Right to Erasure
Under certain circumstances, you have the right to have your personal data erased. You can request the deletion of your data at any time. We will erase your personal data if:
We no longer need your personal data for the purpose for which you provided it.
You withdraw your consent.
You object to the processing of your personal data.
We process your personal data unlawfully.
The personal data must be erased to comply with a legal obligation.
You are a child, or a parent of a child, who consented to the processing of personal data over the internet.
Right to Restriction of Processing
You can request us to restrict the processing of your personal data. If we comply with your request, we will only store your personal data and will not process it further. Restriction of processing will occur if:
You inform us that your personal data is incorrect, until we verify its accuracy.
We process your personal data unlawfully, but you do not agree to its erasure and instead request that we only restrict the processing of your personal data.
We no longer need your data, but you need it to establish, exercise, or defend your legal claims.
You object to the processing of your personal data, until we verify whether our legitimate interests override your reasons.
Right to Object
You have the right to object to our processing of your personal data. If we process your personal data for the following purposes:
Due to our legitimate interest,
Creating a customer profile,
You can object to the processing if you have personal reasons for doing so.
How can you execute your rights?
You can contact us with your request in one of the following ways:
By email: at info@abrakastore.sk
By mail to the correspondence address: Veterná ulica 500/36, 922 02 Krakovany
Or to the business address: Štefanikova 15a, 921 01 Piešťany.
If you believe that your data protection rights have been violated, you have the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection at the following address:
Hraničná 12
820 07 Bratislava 27
Slovak Republic
Identification details:
Company ID: 36064220
Tax ID: 2021685985
Office Secretariat:
+421 /2 3231 3214
E-mail: statny.dozor@pdp.gov.sk
Submission Office Hours:
Monday – Thursday: 8:00 – 15:00
Friday: 8:00 – 14:00
Cookie Usage Policy
What are cookies?
As is common practice with almost all professional websites, this site uses cookies, which are small files downloaded to your computer to improve the services provided. This page describes what information we collect, how we use it, and why we sometimes need to store these files. We will also provide information on how you can prevent cookies from being stored, although this may downgrade or “break” certain elements of this website’s functionality. For more general information about cookies, see the Wikipedia article on HTTP cookies.
Disabling Cookies
You can prevent the setting of cookies by adjusting the settings on your browser (see your browser’s Help section for instructions on how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies usually results in also disabling certain features and functionalities of this site. Therefore, it is recommended that you do not disable cookies.
Cookies We Set
When you submit data through forms, such as those found on contact pages or comment forms, cookies may be set to remember your user details for future correspondence.
Third-party Cookies
In certain special cases, we also use cookies provided by trusted third parties. The following section describes which third-party cookies you might encounter through this site.
This site uses Google Analytics, one of the most widespread and trusted analytics solutions on the web, to help us understand how you use the site and ways that we can improve your experience. These cookies may track things such as how long you spend on the site and the pages that you visit so that we can continue to produce engaging content. For more information on Google Analytics cookies, see the official Google Analytics page.
Third-party analytics are used to track and measure usage of this site so that we can continue to produce engaging content. These cookies may track things such as how long you spend on the site or pages you visit, which helps us understand how we can improve the site for you.
In some cases, we may provide you with customed content to what you have told us about yourself either directly or indirectly by linking a social media account. These types of cookies simply allow us to provide you with content that we believe may interest you.
These types of cookies simply allow us to provide you with content that may interest you. We also use social media buttons and/or plugins that enable you to connect with your social network in various ways. For these buttons and plugins to work, the following social media sites, including Facebook and YouTube, will set cookies through our website. These cookies can be used to enhance your profile on their site or to provide data they hold for various purposes outlined in their privacy policies.
More Information
We hope this has clarified things for you, and as was previously mentioned, if there is something you are unsure about whether you need or not, it is usually safer to leave cookies enabled in case they interact with a feature you use on our website. If you are still looking for more information, you can contact us through one of our preferred contact methods.
WHERE CAN YOU CONTACT US?
If you have any comments, questions, or requests regarding the use of your personal data, or if you have any questions regarding this privacy and cookie statement, please contact us at the following email address: info@abrakastore.sk, or using the contact information provided in the Contact Us section. We welcome your questions and suggestions regarding this statement.
Final Provisions
By submitting an order via the online order form, you confirm that you are familiar with the terms of personal data protection and that you accept them.
You express your consent (an act of free will) by checking the “I agree” box through the online form. By checking this box, you confirm that you fully accept the terms of personal data protection.
The operator is entitled to change these terms. The new version of the personal data protection terms will be published on its website, and you will be informed of this via the email address you provided to the operator.
These terms take effect on July 20, 2018.
Operator of the online store www.abrakastore.sk (hereinafter referred to as the “Operator.”)
South s.r.o.
Veterná ulica 500/36, 922 02 Krakovany
Company ID: 51 841 070
VAT ID: SK2120805786
The Operator, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation), and with Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts:
Processing orders, issuing tax documents, and handling complaints in the online store www.abrakastore.sk to the extent of: (Ivan Sedlák, Veterná ulica 500/36, 922 02 Krakovany,
Company ID: 51 841 070, info@abrakastore.sk, 0904 464 811, bank account number: SK13 8330 0000 0030 0400 5566).
The seller hereby informs the buyer that the processing of personal data is permitted under Article 6(1)(b) of the General Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
In accordance with Article 6(1)(b) of the General Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, the seller, as the operator, will process the buyer’s personal data in the process of concluding a purchase contract without their consent as the data subject, since the processing of the buyer’s personal data will be carried out by the seller in pre-contractual relationships with the buyer and the processing of the buyer’s personal data is necessary for the fulfillment of the purchase contract, in which the buyer is one of the contracting parties.
Marketing and in the form of:
Sending newsletter messages to the email address by the customer’s subscription to the mailing list on the online store’s website abrakastore.sk, in the scope of: (title, first name, last name, email address).
Participation in advertising campaigns (promotions) conducted on the website of the online store South s.r.o. or in the form of leaflets, in the scope of: (title, first name, last name, postal address, email address, phone number, signature).
A visitor to the online store can subscribe to the newsletter directly by entering their email address in the “Subscribe to our newsletter…” field on the abrakastore.sk website, or as a buyer, they can express their consent by ticking the appropriate box before submitting the order, in accordance with Article 6(1)(a) of the General Data Protection Regulation (EU) 2016/679, to allow the seller to process and store their personal data, particularly those listed above and/or those necessary for the seller’s activities related to sending information about new products, discounts, and promotions on offered goods, and to process them in all its information systems related to sending information about new products, discounts, and promotions on offered goods. The buyer grants this consent to the seller for a definite period until the purpose of processing the buyer’s personal data is fulfilled. After fulfilling the purpose of processing, the seller will promptly ensure the disposal of the buyer’s personal data. The buyer can revoke their consent to the processing of personal data at any time in writing. Cancellation of consent for sending newsletter messages can also be done electronically by unsubscribing from the mailing list. An automatic unsubscribe option is displayed at the bottom of the newsletter message that you receive at the email address you provided. The consent will expire within one month from the delivery of the buyer’s consent withdrawal to the seller.
The Operator declares that:
The processed personal data of the data subjects will only be used for the aforementioned purposes within its business activities.
Not utilizing the newsletter subscription does not pose a threat of refusal of the contractual relationship.
General Provisions:
The personal data you provide to the operator through the registration form or direct order must be truthful, and in case of any changes, you are obliged to inform the operator without delay.
The protection of your personal data is governed by the provisions of the Data Protection Act, with your rights being regulated by the General Data Protection Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, for example, the right to request in writing:
Right of Access
You have the right to obtain a copy of the personal data we hold about you and information on how we use your personal data. In most cases, your personal data will be provided in written form unless otherwise requested by you. If you have requested this information electronically, it will be provided electronically if technically feasible.
Right to Rectification
We take reasonable measures to ensure the accuracy, completeness, and currency of the information we hold about you. If you believe that the data we hold is inaccurate, incomplete, or outdated, please do not hesitate to ask us to correct, update, or complete this information.
Right to Erasure
Under certain circumstances, you have the right to request the deletion of your personal data, such as when the personal data we have collected is no longer needed for the original processing purpose or if you withdraw your consent to processing. However, your right needs to be assessed against all relevant circumstances. For example, we may have certain legal and regulatory obligations that mean we cannot comply with your request.
Right to Restriction of Processing
Under certain circumstances, you are entitled to request that we stop using your personal data. This may include instances where you believe the personal data we hold may be inaccurate or you think we no longer need to use your personal data.
Right to Data Portability
Under certain circumstances, you have the right to request that we transfer personal data that you have provided to us to another third party of your choice. The right to data portability only applies to personal data that we have obtained based on your consent or a contract in which you are one of the parties.
Right to Object
You have the right to object to data processing that is based on our legitimate interests (such as processing personal data for network and infrastructure security purposes). If we do not have a compelling legitimate reason to process and you object, we will no longer process your personal data.
Rights Related to Automated Decision-Making
You have the right to refuse automated decision-making, including profiling, that results in a legal or similarly significant consequence for you. The company usually does not use automated decision-making or profiling in the context of employment.
Right to Withdraw Consent
In most cases, we do not process your personal data based on your consent. However, in specific cases, we may ask for your consent. When we do, you have the right to withdraw your consent to the further use of your personal data (e.g., photographs).
Right to File a Complaint
If you wish to file a complaint about how your personal data is processed, including exercising the above rights, you can contact us at: 0904 464 811, by sending an email to: info@abrakastore.sk, or by written request sent to the operator’s address: Veterná ulica 500/36, 922 02 Krakovany, or to the address of the operation at Štefanikova 15a, 921 01 Piešťany.
If you are not satisfied with our response or believe that we are processing your personal data unfairly or unlawfully, you can file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, https://dataprotection.gov.sk, Hraničná 12, 820 07 Bratislava 27; phone number: +421 /2/ 3231 3214; Email: statny.dozor@pdp.gov.sk.
Third Parties:
Your personal data may be provided to third parties and intermediaries, i.e., entities cooperating with the operator, such as transport and delivery companies. The current list of these entities is as follows:
Názov
Účel spracovania
Rozsah poskytovaných osobných údajov
Právny základ
Third Parties
Purpose of processing
Extent of provided personal data
Legal basis
Packeta
Príjem, spracovanie a doručovanie zásielok, notifikácia príjemcu zásielky
Meno, priezvisko, adresa doručenia emailová adresa, telefón
Podľa čl. 6 ods. 1 písm. b) Nariadenia- Plnenie zmluvných vzťahov medzi prevádzkovateľom a dodávateľom kuriérskych/doručovacích služieb.
Packeta
Receipt, processing, and delivery of parcels, notification of parcel recipients
Full name, delivery address, email address, phone number
According to Article 6(1)(b) of the Regulation – Performance of contractual obligations between the operator and the courier/delivery service provider.
Google
Marketingové účely :analýza správania sa na webe ,on-line reklama prostredníctvom Google Ads, spracovanie štatistík v nástrojoch Google Analytics
Cookie, IP adresa
Podľa čl. 6 ods.1 písm. f) Nariadenia. Oprávnený záujem –spracovávanie štatistík návštevnosti a predajov a marketingové účely (trackovanie pre marketingové účely si môže používateľ vypnúť
Google
Marketing purposes: website behavior analysis, online advertising through Google Ads, processing of statistics in Google Analytics tools.
Cookie, IP address
According to Article 6(1)(f) of the Regulation. Legitimate interest – processing of visitor and sales statistics and marketing purposes (users can opt out of tracking for marketing purposes).
Instagram
Marketingové účely: Online reklama, cielenie reklamy
Cookie(FB Pixel)
Podľa čl 6 ods.1 písm. f) Nariadenia. Oprávnený záujem –spracovávanie štatistík návštevnosti a predajov a marketingové účely (trackovanie pre marketingové účely si môže používateľ vypnúť
Instagram
Marketing purposes: Online advertising, targeted advertising.
Cookie(FB Pixel)
According to Article 6(1)(f) of the Regulation. Legitimate interest – processing of visitor and sales statistics and marketing purposes (users can opt out of tracking for marketing purposes).
Facebook
Marketingové účely: Online reklama, cielenie reklamy
Cookie(FB Pixel)
Podľa čl 6 ods.1 písm. f) Nariadenia. Oprávnený záujem –spracovávanie štatistík návštevnosti a predajov a marketingové účely (trackovanie pre marketingové účely si môže používateľ vypnúť
Facebook
Marketing purposes: Online advertising, targeted advertising.
Cookie(FB Pixel)
According to Article 6(1)(f) of the Regulation. Legitimate interest – processing of visitor and sales statistics and marketing purposes (users can opt out of tracking for marketing purposes).
Fio banka, a.s., pobočka zahraničnej banky
Realizácia platieb kartou
Emailová adresa ,IP adresa
Podľa čl. 6 ods. 1 písm. b) Nariadenia- Plnenie zmluvných vzťahov
Fio banka a.s., Foreign Branch of a Bank
Execution of card payments
email address, IP address
According to Article 6(1)(b) of the Regulation – Fulfillment of contractual obligations.
Gopay
Realizácia platieb kartou cez platobnú bránu
Emailová adresa ,IP adresa
Podľa čl. 6 ods. 1 písm. b) Nariadenia- Plnenie zmluvných vzťahov
Gopay
Execution of card payments through a payment gateway.
email address, IP address
Externá účtovníčka Ing. Tatiana Hulková
Účtovná firma zabezpečujúca spravovanie účtovníctva a personalistiky
Údaje na faktúrach : meno, priezvisko, mailová adresa, telefón,
Podľa čl. 6 ods. 1 písm. d) nariadenia – plnenie zmluvných vzťahov medzi prevádzkovateľom a sprostredkovateľom – sprostredkovateľská zmluva
External accountant Ing. Tatiana Hulková
Accounting firm providing management of accounting and personnel matters.
Invoice details: Full name, email address, phone number
According to Article 6(1)(d) of the regulation – fulfillment of contractual relationships between the operator and the intermediary – intermediary agreement.