Principles of personal data processing

PERSONAL DATA PROCESSING PRINCIPLES

In the company madebythe: s.r.o. , with registered office at Staré Grunty 6347/18, 841 04 Bratislava, Slovak Republic, IČO 51 178 401, registered in the OR of the Metského súd Bratislava III, insert no.: 123653/B (hereinafter referred to as " we ") process personal data in the course of our business activities.

Below in this document, we try to provide you with all the necessary information about the processing of your personal data in accordance with Regulation no. 2016/679 on the protection of natural persons in the processing of personal data and on the free movement of such data (hereinafter referred to as " GDPR ").

If you still have any questions or would like to exercise your rights, please contact us, for example by email at ahoj@zurnal.sk

Processed personal data, purpose, legal basis and period of their processing

Category of persons	The purpose of personal data processing	Legal basis and processed personal data	Processing time
From customers	Creating and managing a user account	The legal basis is your consent , which you show by registering. Identification data (name, surname), registration data (email). After registration, for example, you have the option to include the selected goods in the so-called wishlist and then we will send you an e-mail with a warning that the goods included in the wishlist are sold at a discounted price or are available again. You can change this wishlist at any time.	Until you cancel your account. If you do not use the account for a long time, we can send you an email stating that if you do not log in to the account within a certain period of time after receiving it, we will cancel your account.
	Resolving a problem within the ordering process	If, as part of the ordering process, you start filling in your personal data, the process fails for any reason and you are unable to complete the order, for example in the case of a technical problem, we will immediately send you an e-mail if you fill in your e-mail address, with saved basket and the data you filled in. You will be able to complete the purchase within 1 day. The legal basis is primarily our legitimate interest in eliminating the problem and completing the order, in conjunction with the secondary one, i.e. taking measures before concluding the contract .	30 days from the day the order process was not completed.
	Conclusion and fulfillment of contracts with customers	The legal basis is the necessity for the performance of the contract . Identification data (name, surname), contact data (delivery address and residential address, e-mail, telephone), accounting data (invoicing address, card number, bank account number), order history, user account data, data related to possible complaints (product identification, product defects, solution). If you are self-employed or act for a company, also business name, ID number, or entry in the register, VAT number and VAT number. The provision of personal data is a contractual requirement and your obligation, without which it is not possible to conclude a contract and deliver goods or provide a service.	During the duration of the contractual relationship and the warranty period, which in most cases is 2 years.
	Exercising claims after the termination of the contract	The legal basis is our legitimate interest consisting in the right to recover any receivables and other claims that may have arisen, as well as having the ability to demonstrate that our contractual obligations have been properly fulfilled. Identification data (name, surname), contact data (delivery address and residential address, e-mail, telephone), accounting data (invoicing address, card number, bank account number), order history, user account data, data related to possible complaints (product identification, product defects, solution). If you are self-employed or act for a company, also business name, ID number, or entry in the register, VAT number and VAT number.	For a period of 5 years from the termination of the contractual relationship, in the case of court proceedings for the entire duration of the proceedings.
	Fulfillment of obligations resulting from regulations in the field of accounting and taxation	The legal basis is the fulfillment of a legal obligation imposed on us by legal regulations in the field of accounting and taxes. Identification data (name, surname), contact data (delivery address and address of permanent residence, e-mail, telephone), accounting data (bank account number and other information on tax documents), as well as copies of contracts.	For a period of 10 years from the end of the year in which the contract was fulfilled.
	Direct marketing	The legal basis is our legitimate interest in providing and offering you similar services, goods, and informing you about news. Legitimate interest applies to our offers by phone as well as by mail. In the case of e-mail, the legal basis is your consent , which you express on our online store and by clicking on the link in the confirmation e-mail. Identification (name, surname) and contact data (delivery address and address of permanent residence, e-mail, telephone).	Until the moment of your objection, or withdrawal of consent.
	Ratings and references	The legal basis is your consent . Identification data (name, surname), registration data (email). We will publish the evaluation and reference without your personal data, i.e. anonymized (name, initial of last name and country). We can ask for your evaluation and reference after the purchase by sending you an email. The legal basis for sending this email is our legitimate interest , but you have the opportunity to express your disagreement with this sending during the purchase.	Until the moment of anonymization, which occurs within 30 days of your evaluation, or references.
	Internal analyses, development and improvement of our e-commerce and service quality, planning.	The legal basis is our legitimate interest . Your personal data that we have based on another purpose, or legal basis.	For the period during which, on the basis of another purpose, or legal basis, we process. After this time, only in anonymized form, when it will no longer be personal data.
Visitors to the online store	Statistics, display of advertisements for our services or goods	The legal basis is your consent to the storage of cookies. IP address, location, data about the use of our online store, for example, location, time, products viewed. You can find more information in https://madebythe.sk/cookies	For the period indicated in https://madebythe.sk/cookies .
Anyone	Dealing with suggestions, inquiries and questions	The legal basis is our legitimate interest , as well as your consent. Identification data (name, surname), contact data (address, e-mail, phone), IP address and cookies, question asked via form, email, chat, via social networks or by phone.	Until equipment, however, the longest is 30 days after equipment, or longer if you give your consent.
Subscribers news (newsletter)	Regular sending of commercial and marketing announcements by e-mail	The legal basis is your consent , which you show by registering to receive news (newsletter) on our online store and then clicking on the link in the confirmation e-mail. E-mail.	Until withdrawal of consent.
Contestants and winners	Organization and evaluation of the competition	The primary legal basis is the consent of the contestant, which he expresses by participating in the contest. Provision of personal data is a condition for participation in the competition, without which participation is not possible. The secondary legal basis is also the fulfillment of the contract , i.e. the fulfillment of our rights and obligations arising from the rules of the competition, and after fulfillment also our legitimate interests to inform about the result of the competition by publishing the winner's profile in a comment to the post about the competition and to have the ability to demonstrate that our obligations were properly fulfilled . Participation in the competition, as well as consent to the processing of personal data for this purpose, is voluntary and consent can be revoked at any time. Withdrawal of consent will terminate the processing of personal data and participation in the competition. Identification data (name, surname), contact data (address, e-mail, phone), username and, in the case of a competition on a social network, also a profile on a social network (for example, Facebook or Instagram), or other provided data that may be related to the competition .	For the time necessary for the organization and evaluation of the competition. In the case of unsuccessful contestants, this period will not exceed the duration of the competition and, consequently, the necessarily necessary time after the evaluation of the competition, which is necessary to resolve any suggestions and complaints from the contestants and which should not exceed 3 months after the evaluation of the competition. In the case of winners, the period for processing their personal data is 10 years after the evaluation of the competition and the awarding of the prize, as in this case it is the period during which we are obliged to keep accounting documents in relation to the prize awarded according to tax and accounting legislation.

With whom we share your personal data

In limited cases, we provide your personal data to other entities (recipients), in most cases to our service suppliers. It can be the following cases:

Disclosure to third parties if permitted or required by law , for example disclosure to state authorities in accordance with law, in the event of a sale of our business or in the event of our legal protection through a legal representative.

Provision to our suppliers (so-called intermediaries) , who, on the basis of the contract, provide us with various services, in the framework of which your personal data is processed. These are mainly companies that provide or provide an ERP system (enterprise software for the management and coordination of internal company resources), payment gateway, marketing, emailing, e-commerce platform, web chat, reviews, IT development and IT support, fulfillment (storage, transport ), package management and delivery, accounting services, application linking, and cookies (more in the Cookies section below).

We only work with service providers who provide adequate security guarantees and who are contractually obligated to process your personal data only in accordance with our instructions and maintain the confidentiality of your personal data.

Automated individual decision-making, including profiling and

We do not make decisions that are based solely on automated processing, including profiling, and that have legal effects that concern you or similarly significantly affect you.

Personal data of children under 16 years of age

Our online store is not intended for children under 16 years of age. Children under the age of 16 can only use our online store if their legal representative, especially a parent, has given their consent.

Transfer of personal data outside the EU/EEC

Free movement of personal data applies within the European Union/European Economic Area.

If we transfer personal data to third countries, we will do so in accordance with the GDPR. It may be, for example, countries that the European Commission has decided guarantees an adequate level of personal data protection, or the supplier of the service we use has committed to comply with standard contractual clauses adopted by the European Commission, or it may be a combination of both cases.

We currently plan to transfer personal data to the US only if the service provider is part of the Privacy Shield Framework and we have a contract with them that contains standard contractual clauses.

We use cookies on our online store. Detailed information on how we use them can be found in this section https://zurnal.sk/cookies .

Your rights

You have several rights under the GDPR. This is the right to access personal data, to correct it, to delete it, to restrict processing, to object to processing, to data portability, the right to withdraw consent to the processing of personal data, and the right to file a complaint with a supervisory authority.

Right of access

You have the right to obtain confirmation from us as to whether your personal data is being processed, and if so, you have the right to access this data. Upon request, we will therefore provide you with all information regarding the processing of your personal data.

Right to rectification

You have the right to have us correct your incorrect personal data and complete them if they are incomplete.

Right to erasure (right to be “forgotten”)

We delete your personal data if they are no longer needed for the purposes for which they were collected or if you revoke the consent on the basis of which we carried out the processing. However, this right does not apply absolutely. There are cases when we need to store personal data, for example for accounting purposes.

The right to restrict the processing of personal data

You have the right for us to restrict the processing if (i) you have contested the accuracy of the personal data, during the period allowing to verify the accuracy of the personal data, (ii) the processing is unlawful and you object to the erasure of the personal data and request a restriction of its use instead; (iii) we no longer need the personal data for processing purposes, but you need them to prove, exercise or defend legal claims; (iv) you object to the processing, until we verify whether the legitimate reasons on our side prevail over your legitimate reasons.

The right to object to processing

You have the right to object at any time to the processing of your personal data, which is carried out (i) on the basis of legal necessity for the purposes of legitimate interests pursued by us or a third party, (ii) for the purposes of profiling, and (iii) for the purposes of direct marketing.

Right to data portability

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transfer this data to another operator without us preventing you from doing so, if the processing of personal data is based on your consent or contract and at the same time the processing is carried out by automated means.

Right to withdraw consent

If the processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the legality of processing based on consent granted before its withdrawal.

The right to file a complaint

If you believe that the processing of your personal data is in violation of the GDPR, you have the right to file a complaint with the supervisory authority, which is the Office for the Protection of Personal Data of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava 27, e-mail: statny. dozor@pdp.gov.sk .