PERSONAL DATA PROTECTION POLICY (GDPR)
PERSONAL DATA PROTECTION POLICY (GDPR)
1. Seller
The data controller is:
Business name: Adam Paškevič APx Knives
Registered office: Vinohradnícka 586, 95132 Horná Kráľová
Company ID (IČO): 52848728
Email: adam3258@gmail.com
10.1. The contracting parties agree that, for the proper handling and delivery of an order, if the buyer is a natural person, they are obliged to provide the seller in the order with their full name, billing address, delivery address including postal code, phone number, email address, and date of birth.
10.2. The contracting parties agree that, for the proper handling and delivery of an order, if the buyer is a legal entity, they are obliged to provide the seller in the order with their business name, registered office address, delivery address including postal code, Company ID (IČO), VAT ID (if assigned), full name of the contact person, phone number, and email address.
10.4. The seller hereby informs the buyer that pursuant to Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, “Regulation”), the seller, as the operator of the information system, will process the buyer’s personal data without their consent as the data subject in the process of concluding a purchase contract. This is because the processing of the buyer’s personal data is necessary for pre-contractual relations and for fulfilling the purchase contract in which the buyer is one of the contracting parties.
10.5. Pursuant to Article 6(1)(f) of the Regulation, the seller may, after delivering the ordered goods or services to the buyer, based on legitimate interest, process the buyer’s personal data for the purpose of direct marketing and send information about new products, discounts, and promotions on offered goods or services to the buyer’s email address.
10.6. The seller undertakes to handle and process the buyer’s personal data in accordance with the applicable laws of the Slovak Republic.
10.7. The seller declares that, in accordance with Article 5(1)(a) and (b) of the Regulation, the buyer’s personal data will be collected solely for the purposes stated in these Terms and Conditions.
10.8. The seller declares that for purposes other than those stated in these Terms and Conditions, the buyer’s personal data will always be collected on a separate, appropriate legal basis and will be processed and used exclusively in a manner consistent with the purpose for which it was collected. It will not be combined with personal data collected for other purposes or for fulfilling the purchase contract.
10.9. Before submitting an order, the buyer will be asked to confirm by checking a box that the seller has provided, in a sufficient, understandable, and unambiguous manner:
a) the seller’s identification details as stated in Article 1 of these Terms and Conditions;
b) the seller’s or responsible person’s contact information;
c) the purpose of personal data processing, which is the conclusion of a purchase contract between the seller and the buyer, and the legal basis for processing;
d) that the buyer is obliged to provide the required personal data for concluding the purchase contract and for proper handling and delivery of the order;
e) if processing is based on Article 6(1)(f), that the legitimate interest pursued by the seller is direct marketing;
f) identification data of a third party, such as the company delivering the ordered goods, or identification data of other recipients or categories of recipients, if applicable;
g) the retention period of personal data, or criteria for determining it;
h) information about the existence of the right to request access, rectification, deletion, restriction of processing, objection to processing, and data portability;
i) the right to lodge a complaint with the supervisory authority;
j) whether providing personal data is a legal or contractual requirement or necessary for entering the contract, whether the buyer is obliged to provide the data, and possible consequences of not providing such data;
k) the existence of automated decision-making, including profiling.
The buyer has the right to obtain a copy of the personal data being processed and to receive all the information listed above. For any additional copies requested by the buyer, the seller may charge a fee corresponding to administrative costs.
10.10. The seller declares that personal data will be processed in good faith and in a manner that does not violate the Regulation or other generally binding legal regulations, and will not circumvent them.
10.11. In accordance with the Regulation, the seller provides the buyer, whose data is being processed, with the following information:
a) the identity and contact details of the seller, and where applicable, the seller’s representative;
b) contact details of any responsible person;
c) the purposes of processing and the legal basis for processing;
d) if processing is based on Article 6(1)(f), the legitimate interests pursued by the seller or a third party;
e) the recipients or categories of recipients of personal data, if any;
f) where applicable, information on whether the seller intends to transfer personal data to a third country or international organization;
g) the retention period of personal data, or criteria for determining it;
h) information about the existence of the right to access, rectify, erase, restrict processing, object to processing, and data portability;
i) the right to lodge a complaint with the supervisory authority;
j) information on whether providing personal data is a legal or contractual requirement or necessary for concluding the contract, the buyer’s obligation to provide such data, and possible consequences of failure to provide the data;
k) the existence of automated decision-making, including profiling.
The buyer has the right to obtain a copy of the personal data being processed and to receive all the above information. For additional copies requested, the seller may charge a fee corresponding to administrative costs.
10.12. If the buyer exercises their right under section 10.11 in writing or electronically, and it is clear from the request that it concerns rights under 10.11, the request is considered submitted under this Regulation.
10.13. The buyer has the right to object to the processing of personal data for direct marketing purposes, including profiling to the extent related to such marketing. If the buyer objects, the seller will cease processing personal data for direct marketing purposes from the date the objection is received, and the buyer’s personal data will no longer be processed for these purposes.
10.14. If the buyer suspects unauthorized processing of their personal data, they may file a complaint with the Office for Personal Data Protection of the Slovak Republic. If the buyer is legally incapable, their rights may be exercised by a legal representative.
10.15. The seller will take appropriate measures to provide the buyer with all information listed in section 10.11 in a concise, transparent, understandable, and easily accessible form, clearly and simply worded. The information will be provided electronically or by other means agreed with the buyer in accordance with the Regulation.
10.16. The seller will provide the buyer with information on actions taken in response to the buyer’s request without undue delay, in any case within one month of receipt of the request.