PERSONAL DATA PROTECTION
I. Basic provisions
- The controller of personal data pursuant to Section 5 letter o) of Act No. 18/2018 Coll. on the protection of personal data, as amended (hereinafter referred to as the „Act“) and pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as the „GDPR“) is the company Suiseki Art s. r. o., Company ID: 57 432 252, with its registered office at Selec 112, 913 36 Selec (hereinafter referred to as the „controller“).
- The operator ensures the operation of the online store www.suiseki.sk.
- The operator's contact details are:
- email: info@suiseki.sk
- phone: +421 902 784 220
- Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- The contact person of the controller for personal data protection issues is Ing. Martina Fedorov, info@suiseki.sk.
II. Sources and categories of processed personal data
- The operator processes the personal data that you have provided to it or the personal data that the operator has obtained based on the fulfillment of your order.
- The operator processes your identification and contact data and data necessary for the performance of the contract.
III. Legal basis and purpose of processing personal data
- The lawful reason for processing personal data is:
- performance of the contract between you and the operator pursuant to Section 13(1)(b) of the Act;
- the legitimate interest of the operator in providing direct marketing, in particular in sending commercial communications and newsletters, pursuant to Section 13(1)(f) of the Act;
- Your consent to processing for the purposes of providing direct marketing, in particular for sending commercial communications and newsletters, pursuant to Section 13(1)(a) of the Act, in the event that no order for goods or services has been placed;
- fulfillment of the operator's legal obligations, particularly in the area of accounting and taxes, pursuant to Section 13(1)(c) of the Act.
- The purpose of processing personal data is:
- processing your order and exercising the rights and obligations arising from the contractual relationship between you and the operator; when placing an order, personal data is required that is necessary for the successful processing of the order, i.e. name, address and contact. Providing personal data is a necessary requirement for concluding and fulfilling the contract - without providing them, it is not possible to conclude the contract or for the operator to fulfill it;
- sending commercial communications and performing other marketing activities;
- bookkeeping and tax compliance.
- The operator does not make automated individual decisions within the meaning of Section 28 of the Act.
IV. Retention period of personal data
- The operator stores personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the operator and to exercise claims from these contractual relationships, namely for a period of 10 years from the termination of the contractual relationship.
- The operator stores personal data processed based on your consent for marketing purposes until you withdraw your consent, but for a maximum period of 3 years from the date of its granting.
- After the expiry of the personal data retention period, the controller will delete the personal data or destroy it in an appropriate manner.
V. Recipients of personal data
- The recipients of personal data are the following persons:
- involved in the delivery of goods and the execution of payments under the contract;
- providing e-shop operation services and other services related to the operation of the e-shop;
- providing marketing services.
- The operator does not intend to transfer personal data to a third country, i.e. to a country outside the European Union, or to an international organization.
VI. Cookies
- The operator's website uses cookies. Necessary cookies, without which the site cannot function, are used without your consent. Analytical and marketing cookies are used solely on the basis of your consent granted via the consent management bar.
- You can revoke or change the consent you have given at any time through the consent settings on the website or by changing the settings in your browser.
VII. Your rights
- Under the conditions set out in the Act, you have:
- the right to access your personal data pursuant to Section 21 of the Act;
- the right to correct personal data pursuant to Section 22 of the Act, or to restrict processing pursuant to Section 24 of the Act;
- the right to erasure of personal data pursuant to Section 23 of the Act;
- the right to object to processing pursuant to Section 27 of the Act;
- the right to data portability pursuant to Section 26 of the Act;
- the right to withdraw consent to processing in writing or electronically to the address or e-mail of the operator specified in Article I of these terms and conditions.
- You may object to the processing of your personal data for direct marketing purposes at any time and without giving any reason. You may also unsubscribe from commercial communications by clicking on the unsubscribe link in the footer of each such email.
- You also have the right to file a complaint with the Personal Data Protection Office of the Slovak Republic if you believe that your right to personal data protection has been violated.
VIII. Conditions for securing personal data
- The operator declares that it has taken all appropriate technical and organizational measures to secure personal data.
- The operator declares that only persons authorized by him have access to personal data.
IX. Final provisions
- By submitting an order from the online order form, you confirm that you have read and understand the terms of personal data protection.
- The operator is entitled to change these terms and conditions. The new version of the personal data protection terms and conditions will be published on its website.
These terms and conditions come into effect on 23.01.2026.
