PERSONAL DATA PROTECTION AND COOKIES LESSONS
/ Principles and instructions on personal data protection
provided by the operator to the affected person when obtaining personal data from the affected person and instructions on cookies of the Internet shop www.holeshotpunx.sk /
1.1. The identity and contact details of the Operator are:
Business name: HOLESHOT sro
Registered seat: Budovateľská 3611/23, Prešov 080 01, Slovak republic
Registered in the register of the Prešov District Court, Section: Sro, File number: 41799 / P
ID: 53 616 081
Bank account: SK57 0900 0000 0051 7860 3549
The seller is not a VAT payer / Value added tax /
1.2. Email contact and telephone contact to the Operator is:
Tel. No .: + 421949887569
1.3. Address of the Operator for sending documents:
HOLESHOT sro, Tomášiková 136/35, 040 01 Košice, Slovak republic
1.4.The operator hereby in accordance with Article 13 par. 1. and 2. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC on the general data protection regulation ( hereinafter referred to as the “Regulation”) provides the Affected Person from whom the Operator obtains personal data concerning him / her with the following information and instructions:
2.1. These principles and instructions on personal data protection form part of the General Terms and Conditions published on the Seller's Website.
2.2. Pursuant to §3, par. 1, letter n), Act no. 102/2014 Coll. The Seller informs the consumer that there are no special codes of conduct to which the Seller has committed itself to complying with them, where the Code of Conduct means an agreement or set of rules defining the conduct of the Seller who has undertaken to comply with this Code of Conduct in relation to to one or more specific commercial practices, or commercial sectors, unless these are provided for by law, or other legislation or measure of a public authority) which the seller has undertaken to comply with, and the way in which the consumer may become acquainted with them or obtain them. wording.
3.1. The operator provides the following brief explanation of the function of cookies:
3.1.1. Cookies are text files that contain a small amount of information that is downloaded to your computer, mobile phone or other electronic device that you use to browse the web domain when you visit the website.
Cookies not only allow the operator's web domain to recognize the user's device, but also allow the user to access the functions on the site.
We divide cookies into two basic types, namely:
Persistent cookies - these cookies remain on the user's device for the time specified in the cookie file. They are activated whenever the user visits the web domain that created the cookie.
Relational cookies - these files allow the web domain operator to link the user's activities when the user opens a browser window and exits when the browser window is closed. Relational cookies are created temporarily. When you close your browser, all relational cookies are deleted.
3.2.Explanation of cookies
3.2.1. A cookie is a small text file that a website stores on your computer or mobile device when you browse it. This file keeps your website informed of your steps and preferences (such as login name, language, font size, and other display settings) for a period of time, so you don't have to re-enter them the next time you visit or browse the website.
188.8.131.52. the fact that you have already responded to a survey that appears in a separate window (pop-up), through which you can express your opinion on the content of the page (it will not be displayed again);
184.108.40.206. Marketing and remarketing
The information stored in cookies will not be used for your personal identification and the data structure is fully under our control. Cookies are not used for purposes other than those specified in this text. Some of our sites or sub-sites may use additional or different cookies than those listed above. In this case, detailed information on their use will be provided on a separate page on cookies on the website in question.
3.4.How to control cookies
3.4.1. You can control and / or delete cookies at your discretion - see aboutcookies.org for details . You can delete all cookies stored on your computer, and you can set most browsers to prevent them from being stored.
IV. Personal data processed
4.1. The operator processes the following personal data on its website: name, surname, residence, email address, home phone number, mobile phone number, billing address, delivery address, data obtained from cookies, IP addresses.
V. Contact details of the person responsible for personal data protection supervision
5.1. The controller has appointed a person responsible for personal data protection in accordance with Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. Contact: firstname.lastname@example.org
5.2. The Operator is also the Seller in the sense of the term stipulated in the General Terms and Conditions of this website.
VI. Purposes of the processing of personal data of the data subject and the time of processing of personal data
6.1. The purposes of processing the personal data of the Data subject are in particular:
6.1.2. registration, creation and processing of contracts and client data for the purpose of concluding contracts with third parties
6.1.3. processing of accounting documents and documents related to the business activities of the Operator
6.1.4. compliance with legal regulations in connection with the archiving of documents and papers, e.g. according to law no. 431/2002 Coll., Act on Accounting as amended and other relevant transcripts
6.1.5. activities of the Operator in connection with the fulfillment of the application, order, contract and similar institutes of the Affected Person.
6.2. The Operator retains the personal data of the Affected Person only for the time strictly necessary for the purposes of performance of the contract and their subsequent archiving in accordance with the legal deadlines imposed on the Operator by legal regulations.
VII. Legal basis for the processing of personal data of the Data subject
7.1. The legal basis for the processing of personal data of the Data subjects is, depending on the specific personal data processed and the purpose of their processing, the consent of the Data subjects to the processing of personal data.
7.2. In the event that the Operator performs the processing of personal data based on the consent of the Affected Person, this processing will be initiated only after the given consent has been given by the Affected Person.
7.3. In the event that the Operator processes the personal data of the Affected Person for the purposes of negotiating pre-contractual relations and concluding and fulfilling the purchase contract, and the related delivery of goods, products or services. The person concerned is obliged to provide personal data for the proper performance of the purchase contract, otherwise it is not possible to ensure performance. Personal data for a given purpose shall be processed without the consent of the data subject.
VIII. Recipients or categories of recipients of personal data
8.1. The recipients of the data subject of the data subject will be or at least can be:
8.1.1. statutory bodies or their members of the Operator
8.1.2. persons performing work activities in an employment or similar relationship for the Operator.
8.1.3. sales representatives of the Operator and other persons cooperating with the Operator in the performance of the Operator's tasks. For the purposes of this document, all natural persons performing dependent work for the Operator on the basis of an employment contract or agreements on work performed outside the employment relationship shall be considered employees of the Operator.
8.1.4. The recipients of the data subject will also be the operator's associates, its business partners, suppliers and contractual partners, in particular: accounting company, company providing services related to software creation and maintenance, company providing legal services to the operator, consulting company, transport companies and delivery of products to buyers and third parties, marketing companies, social networking companies, payment gateway companies and other payment methods.
8.1.5. The recipients of personal data will also be courts, law enforcement agencies, the tax office and other state bodies, if so provided by law. Where personal data will be provided to the Operator by the given authorities and state institutions on the basis of and in accordance with the legal regulations of the Slovak Republic
IX. Information on the transfer of personal data to third countries and the retention period:
9.1.Not applicable. The operator does not transfer personal data of persons to third countries.
X. Instruction on the existence of relevant rights of the Affected Person:
10.1. The person concerned has, inter alia, the following rights, namely:
10.1.1. Point 10.1 does not affect other rights of the Affected Persons.
10.1.2. The right of the data subject to access the data pursuant to Art. 15 Regulations containing:
the right to obtain from the Operator a confirmation or processing of personal data of the Affected Person, and if so to what extent. At the same time, if they are processed, it has the right to find out their content and request from the Operator information on the reason for their processing, especially information on : Reason for their processing, categories of personal data concerned, recipients or categories of recipients to whom personal data were or will be provided. recipients in third countries or international organizations, the expected retention period of personal data or, if this is not possible, information on the criteria for determining it, the existence of the right to request the controller to correct or delete or restrict the processing of personal data concerning the data subject and the existence of the right to object to such processing, the right to complain to the supervisory authority if personal data have not been obtained from the data subject, any available information as to their source, the existence of automated decision-making, including profiling referred to in Article 22 (2). 1. and 4. of the Regulation and in these cases at least meaningful information on the procedure used, as well as the meaning and expected consequences of such processing of personal data for the data subject, on adequate safeguards under Article 46 of the Regulation concerning the transfer of personal data if personal data are transferred to third country or international organization.
10.1.3. the right to provide a copy of the personal data being processed, but subject to the condition that the right to provide a copy of the personal data processed must not adversely affect the rights and freedoms of others.
10.1.4. the data subject's right to rectification pursuant to Article 16 of the Regulation, the content of which is the right: that the Operator, without undue delay, correct incorrect personal data concerning the data subject. the right to supplement incomplete personal data of the data subject, including by providing a supplementary statement of the data subject, the data subject's right to delete personal data (the so-called "forgetfulness" right) pursuant to Article 17 of the Regulation, which contains:
10.1.5. the right to obtain from the Operator without undue delay the deletion of personal data concerning the Affected Person, if any of the following reasons is met:
personal data are no longer necessary for the purposes for which they were obtained or otherwise processed. The data subject shall withdraw the consent on the basis of which the processing is carried out, provided that there is no other legal basis for processing the personal data. The data subject objects to the processing. personal data pursuant to Article 21 (1) 1. Regulations and no legitimate grounds for processing personal data prevail, or the data subject objects to the processing of personal data pursuant to Article 21 (1). 2. Regulations, personal data have been processed illegally, personal data must be deleted in order to comply with a legal obligation under European Union law or the law of the Member State to which the Operator is subject, personal data have been obtained in connection with the offer of information society services under Article 8 (1). 1. Regulations;
10.1.6. the right of the Operator who disclosed the data subject's personal data, taking into account the available technology and the cost of implementing the measures, to take appropriate measures, including technical measures, to inform other data processing operators that the Data subject requests them to delete all links to such personal data, a copy thereof or a replica, the right to delete personal data containing the content of rights under Article 17 para. 1. and 2. Regulations shall not arise where the processing of personal data is necessary:
10.1.7. to exercise the right to freedom of expression and information.
10.1.8. to fulfill a legal obligation requiring processing under European Union law or the law of the Member State to which the Operator is subject, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the Operator.
10.1.9. on grounds of public interest in the field of public health in accordance with Article 9 (2). 2. (h) and (ii) of the Regulation, as well as Article 9 (1) 3. Regulations.
10.1.10. for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (2). 1. Regulations, in so far as it is probable that the right referred to in Article 17 (1) 1. Regulations shall make it impossible or seriously difficult to achieve the objectives of such processing of personal data; or to prove, assert or defend legal claims;
10.1.11. the right of the data subject to a restriction on the processing of personal data pursuant to Article 18 of the Regulation, the content of which is:
10.1.12. the right for the Operator to restrict the processing of personal data in one of the following cases: The data subject challenges the accuracy of personal data during a period allowing the Operator to verify the accuracy of personal data, the processing of personal data is illegal and the data subject objects to the deletion of personal data and requests instead to restrict their use. The controller no longer needs personal data for processing purposes, but needs the Data subject to prove, assert or defend legal claims. The data subject objected to the processing under Article 21 (1). 1. Regulations, until it is verified whether the justified reasons on the part of the Operator outweigh the legitimate reasons of the Affected Person;
10.1.13. the right that, where the processing of personal data has been restricted, such restricted personal data, with the exception of storage, be processed only with the consent of the data subject or to prove, assert or defend legal claims, or to protect the rights of another natural or legal person; reasons of overriding public interest of the European Union or a Member State;
1/10/14 the right to be informed in advance of the lifting of the restriction on the processing of personal data;
1/10/15 the right of the Data subject to fulfill the notification obligation towards the recipients pursuant to Article 19 of the Regulation, the content of which is: the right for the Operator to notify each recipient to whom personal data have been provided of any correction or deletion of personal data or restrictions on processing carried out pursuant to Article 16; 1. and Article 18 of the Regulation, unless it proves impossible or requires a disproportionate effort, the right for the Operator to inform the Affected Person of these recipients, if the Affected Person so requests;
1/10/16 the data subject's right to data portability pursuant to Article 20 of the Regulation, which contains: the right to obtain personal data concerning the data subject and provided to the Operator in a structured, commonly used and machine-readable format and the right to transfer such data to another controller without prevented by its Operator if:
and / the processing is based on the consent of the Data subject pursuant to Article 6 para. 1. letter (a) Regulation or Article 9 (1) 2. a) Regulations, or on a contract pursuant to Article 6 para. 1. letter b) Regulations, and at the same time
b / the processing is carried out by automated means, and at the same time:
1/10/17 the right to obtain personal data in a structured, commonly used and machine-readable format and the right to transfer such data to another controller without the Operator's defense preventing it shall not adversely affect the rights and freedoms of others;
10.1.18. the right to transfer personal data directly from one controller to another, as far as is technically possible;
1/10/19 the right of the data subject to object pursuant to Article 21 of the Regulation, which contains:
10.1.20. the right to object at any time on grounds relating to the specific situation of the data subject against the processing of personal data concerning him or her carried out pursuant to Article 6 (1). 1. letter e) or f) Regulations, including objections to profiling based on these provisions of the Regulation;
10.1.21. in the event of the exercise of the right to object at any time on grounds relating to the specific situation of the Data subject against the processing of personal data concerning him or her carried out pursuant to Article 6 para. 1. letter e) or f) Regulations, including objections to profiling based on these provisions of the Regulation, the right not to further process the personal data of the Data subject unless he proves the necessary legitimate reasons for processing which outweigh the interests, rights and freedoms of the Data subject or reasons to prove , asserting or defending legal claims
10.1.22. the right to object at any time to the processing of personal data concerning the data subject for the purposes of direct marketing, including profiling, in so far as it relates to direct marketing; in this case, if the Data subject objects to the processing of personal data for the purposes of direct marketing, the personal data may no longer be processed for such purposes;
10.1.23. in relation to the use of information society services, the right to exercise the right to object to the processing of personal data by automated means using technical specifications;
10.1.24. the right to object, on grounds relating to the specific situation of the data subject, to the processing of personal data concerning the data subject if the personal data are processed for the purposes of scientific or historical research or for statistical purposes pursuant to Article 89 (1). 1. Regulations, but except where processing is necessary for the performance of a task for reasons of public interest;
10.1.25. the right of the Data subject related to automated individual decision-making under Article 22 of the Regulation, which contains:
10.1.26. the right not to be subject to a decision based solely on the automated processing of personal data, including profiling, which has legal effects affecting or similarly affecting him, except in cases under Article 22 (2). 2. Regulations [ie unless the decision: (a) is necessary for the conclusion or performance of a contract between the Affected Person and the Operator;
10.1.27. permitted by the law of the European Union or by the law of the Member State to which the Operator is subject and which at the same time lays down appropriate measures guaranteeing the protection of the rights and freedoms and legitimate interests of the Person concerned;
XI. Instruction on the right of the Data subject to revoke the consent to the processing of personal data:
11.1. The data subject shall be entitled to withdraw his or her consent to the processing of personal data at any time, without prejudice to the lawfulness of the processing of personal data based on the consent given prior to the withdrawal.
The data subject is at any time entitled to withdraw his consent to the processing of personal data - in whole or in part. The partial withdrawal of consent to the processing of personal data may concern a certain type of processing operation (s), while the lawfulness of the processing of personal data to the extent of the remaining processing operations remains unaffected. The partial withdrawal of consent to the processing of personal data may relate to a specific purpose of the processing of personal data / certain specific purposes of the processing of personal data, while the lawfulness of the processing of personal data for other purposes remains unaffected.
The Affected Person may exercise the right to revoke the consent to the processing of personal data in paper form to the Operator's address registered as his registered office in the Commercial Register at the time of revoking the consent to the processing of personal data or in electronic form by electronic means (by sending an e-mail to the Operator's e-mail address stated when identifying the Operator in this document).
XII. Instruction on the right of the person concerned to lodge a complaint to the supervisory authority:
12.1. The data subject has the right to lodge a complaint with the supervisory authority, in particular in his Member State of habitual residence, place of work or alleged infringement, if he considers that the processing of personal data concerning him is contrary to the Regulation, namely: all without prejudice to any other administrative or judicial remedy.
The person concerned has the right to be informed by the supervisory authority to which the complaint has been lodged, as the complainant, of the progress and outcome of the complaint, including the possibility to seek judicial redress under Article 78 of the Regulation.
12.2. The supervisory body in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic.
XIII. Information related to automatic decision making, including profiling:
13.1. As in the case of the Operator it is not the processing of personal data of the Data subject in the form of automated decision-making, including profiling referred to in Article 22 para. 1. and 4. Regulations, The operator is not obliged to provide information under Article 13 para. 2 letter f) Regulations, ie information on automated decision-making, including profiling, and on the procedure used, as well as on the meaning and expected consequences of such processing of personal data for the Data subject. Not applicable.
XIV. Final provisions
14.1. These Principles and instructions on personal data protection and instructions on cookies form an integral part of the General Terms and Conditions and the Complaints Procedure. The documents - General Terms and Conditions and the Complaints Procedure of this Website are published on the domain of the Seller's Website.
This eshop is certified http://www.pravoeshopov.sk