Information on the processing of personal data
according to which the operator informs its customers and potential clients about the processing of their personal data
Operator:
MEGABOOKS SK, spol. s r.o.
Kopčianska 3748/41, 851 01 Bratislava – mestská časť Petržalka
IČO: 36 699 594
company registered in the Commercial Register of the District Court Bratislava I, section: Sro, file no .: 43137 / B
(hereinafter referred to as the "Operator")
Relevant contact details of data protection officers:
In the event that the data subject has any questions regarding the processing of personal data, or if he would like to exercise any of his rights related to the processing of personal data by the Operator, he may address his request to the following authorized person:
Martin Šimek
e-mail: martin.simek@megabooks.sk
tel. č.: 0918 702 163
(hereinafter referred to as the "Authorized Person")
The application does not have a prescribed form and the person concerned may submit it by e-mail, post, telephone or in person.
Purpose
The controller hereby fulfills the information obligation towards its customers and potential customers (hereinafter referred to as "Affected Persons") regarding the processing of their personal data (pursuant to Article 13 of Regulation 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to personal data processing and movement of such data [so-called GDPR]).
The data subjects have the opportunity to find out about the processing of their personal data before the Operator starts processing them.
The goal and effort of the Operator is that the Affected Persons are informed in a simple manner about the processing of their personal data by the Operator and that they know their rights in connection with the processing of personal data. If the Data subject has any questions related to the processing of his personal data, he may contact the above-mentioned Authorized Person, who will provide him with an answer in a concise and comprehensible manner.
Information on personal data of Affected Persons processed by the Operator
The Operator processes the following personal data of its customers (or potential customers), with the following purpose and on the basis of the stated legal basis:
Purpose | ||
|---|---|---|
fulfillment of legal obligations in the field of taxes and accounting | special laws (especially the Income Tax Act, the VAT Act, the Accounting Act) | - identification data of the customer (especially name, surname, address of residence or place of business, or ID number, VAT number, VAT ID number) - information on delivered goods; |
fulfillment of a legal obligation in the field of registration | special laws (especially the law on archives and registries) | - name and address of the recipient and sender of the mail |
fulfillment of a contractual obligation (delivery of goods to the customer) | the contract between the Operator and the Affected Person | - identification data of the customer (especially name, surname, title, address of residence or place of business, or ID number, VAT number, VAT number) - information on delivered goods and services - address for delivery - email address - telephone contact |
marketing (sending information about the Operator's goods to existing or past customers in the form of newsletters) | legitimate interest | - identification data of the customer (especially name, surname, address of residence or place of business) - information on delivered goods - e-mail address |
analysis of the Behavior of the Affected Persons on the Operator's website (as the Affected Person moves the cursor, what part of the order he has made, the behavior and interaction of the customer with the website) | consent | - IP address - information about viewed goods - page navigation |
In the event that the Affected Person is interested in finding out about specific personal data that the Operator processes about him, he may turn to the Authorized Person with his request.
Categories of recipients of personal data
The Operator provides the personal data of the Affected Persons to the following categories of recipients:
an accounting service provider that manages the Operator's accounts;
delivery service providers;
web hosting service provider;
IT support provider;
payment service providers;
Tax Office;
court, executor;
other public authorities, if required by special legislation.
If the Affected Person is interested in finding out about a specific recipient and the scope of personal data provided to that recipient, he / she may contact the Authorized Person with his / her request.
Transfer of personal data to a third country
The Operator will not transfer the personal data of the Affected Persons to third countries (outside the European Union).
Retention period of personal data
The personal data of the Persons concerned shall be kept for the period required by the relevant special regulation. In the absence of such a special regulation, the retention period results from the Operator's registration plan.
If the processing of personal data is based on a contract, the Operator processes the personal data of the data subject for the duration of the contract and in addition for the expiration of the limitation period related to the exercise of the last eligible claim of the Operator or the data subject.
Personal data for marketing purposes are processed for a period of 5 years from their provision.
The Operator shall provide the Affected Person, at his request, through the Authorized Person, with information on the period during which he retains his personal data.
Information about cookies
Cookies are small text files that a website stores on the affected person's computer or mobile device when browsing them. Thanks to this file, the website retains information about the steps and preferences of the Affected Person for a certain period of time, so that he / she does not have to mention it again the next time he / she visits the site or browses its individual pages.
The website sk uses the following types of cookies for the following purpose:
Cookie label | Type of cookie | The purpose of cookies | Data collected |
|---|---|---|---|
facebook pixel code | advertising | tracking conversions from Facebook ads | - IP address |
google analytics | analytical | obtaining statistical data on users of the Operator's website | - IP address |
hotjar.com | analytical | analysis of the behavior of visitors to the Operator's website | - IP address |
luigisbox.com | analytical | an analytics tool that processes and evaluates search and search results, including their conversion | - IP address |
megabooks.sk | necessary | customer login and logout | - IP address |
megabooks.sk | necessary | shopping basket | - meno a priezvisko |
Cookies may be checked or deleted by the Affected Person at his or her discretion. See org. The person in question can delete all cookies stored on their computer or mobile device, and you can set most browsers to prevent them from storing them. The procedure for deleting cookies depends on the browser you are using. Below are links to the steps from the providers of the most used Internet browsers:
The data subject's rights in relation to the processing of personal data
The data subject has the right to obtain confirmation from the Operator as to whether personal data concerning him are being processed and, if so, he has the right to obtain access to this personal data.
[Further details and information concerning the right of access may be obtained by the Affected Person from the Authorized Person.]
The data subject has the right to have the Operator correct incorrect personal data concerning him without undue delay. With regard to the purposes of processing, he has the right to supplement incomplete personal data, including by providing a supplementary declaration.
The data subject also has the right to obtain the deletion of personal data concerning the Operator without undue delay, and the Operator is obliged to delete personal data without undue delay if any of the following reasons is met: (i) personal data are no longer necessary for the purposes for which they were obtained or otherwise processed; (ii) the data subject withdraws the consent on the basis of which the processing is carried out and if there is no other legal basis for the processing; (iii) personal data have been processed illegally; (iv) personal data must be deleted in order to comply with a legal obligation.
[Further details and information on the exercise of the right of cancellation may be obtained from the Authorized Person at the Authorized Person.]
The data subject has the right to have the Controller restrict processing in one of the following cases: (i) the data subject challenges the accuracy of the personal data during a period allowing the Data Controller to verify the accuracy of the personal data; (ii) the processing is unlawful and the Data subject objects to the deletion of the personal data and requests that their use be restricted instead; (iii) The Controller no longer needs personal data for processing purposes, but needs the Data subject to prove, assert or defend legal claims; (iv) The Affected Person has objected to the processing, until it is verified that the legitimate reasons on the part of the Operator outweigh the legitimate reasons of the Affected Person.
[Further details and information on the exercise of the right to restrict processing may be obtained from the Authorized Person.]
The data subject has the right to object at any time, for reasons relating to his specific situation, to the processing of personal data concerning him which is carried out on the basis of the legitimate interest of the Operator or a task performed in the public interest, including objections to profiling. The controller may not further process personal data unless it demonstrates the necessary legitimate reasons for the processing which outweigh the interests, rights and freedoms of the Data subject, or the reasons for proving, asserting or defending legal claims. If personal data are processed for the purposes of direct marketing, the data subject has the right at any time to object to the processing of personal data concerning him or her for the purposes of such marketing.
[Further details, conditions and exceptions in relation to the exercise of the right to object may be obtained by the Affected Person from the Authorized Person.]
The data subject shall have the right to obtain personal data concerning him which he has provided to the Operator in a structured, commonly used and machine-readable format and shall have the right to transfer such data to another operator if the processing is based on consent or contract and if the processing is carried out by automated means. means.
[Further details and information on the exercise of the portability right may be obtained by the Affected Person from the Authorized Person.]
The data subject has the right to lodge a complaint with the Office for Personal Data Protection if he or she considers that the processing of personal data concerning him or her is in breach of the applicable rules.
[Further details and information on the exercise of the right to complain may be obtained by the Affected Person from the Authorized Person.]
Further details and information on the exercise of the data subject's rights regarding the processing of his personal data may be obtained by the data subject from the Authorized Person.
Learn more about personal information
The data subject may inform the Authorized Person whether the provision of personal data is a legal or contractual requirement or a requirement necessary for the conclusion of the contract, as well as whether the data subject is obliged to provide personal data, as well as the possible consequences of not providing such data. data.
Alternative dispute resolution
If the user is a consumer, he has the right to turn to an ADR entity to protect his consumer rights. During ADR, the consumer works with the ADR entity to resolve the dispute quickly. In the event of a cross-border dispute, the consumer has the right to contact the European Consumer Center, which will provide him with a delivery address, an electronic address or a telephone contact with the ADR entity responsible for resolving his dispute. The possibilities and conditions of alternative dispute resolution are regulated by Act no. 391/2015 Coll. on Alternative Dispute Resolution and on Amendments to Certain Laws. More detailed information on alternative dispute resolution is available on this website, which also maintains a list of ADR entities and also on the SOI.sk website, which is one of the ADR entities. In the event of a dispute with the provider, the user may also submit a proposal to initiate an alternative dispute resolution through the platform located on this website.
Card payments
When paying with a Visa / Mastercard credit card, the user is always redirected to the secure payment gateway of GP Webpay as a provider of online payments or when paying via PayPal to PayPal's secure payment gateway. The provider does not process the user's personal data entered during payment.
