Personal Data Protection
PERSONAL DATA PROTECTION POLICY
These personal data protection policies (hereinafter referred to as the "Policy") describe the method of obtaining, using and further handling of personal data obtained through the mmabox.sk web interface (hereinafter referred to as the "web interface") PERSONAL DATA CONTROLLER: KEVANS s. r. o. with registered office: Račianska 88B, 831 02 Bratislava Company ID: 52 588 149 Tax ID: 2121076342, Entry in the Commercial Register of the Municipal Court Bratislava III, Section: Sro, Insert No. 139859/B CONTACT DETAILS OF THE PERSONAL DATA CONTROLLER: Correspondence address: Račianska 88B, 831 02 Bratislava, KEVANS s. r. o. Responsible person: konatel sr.o. Contact e-mail: kvsporteu@gmail.com
The protection of personal data is very important to us. We ask you to carefully familiarize yourself with these Principles, which contain important information about the handling of your personal data and related rights and obligations.
1. INTRODUCTORY PROVISIONS
1.1. What are we guided by when handling personal data?
When handling personal data, we proceed in accordance with the legal order of the Slovak Republic and directly applicable regulations of the European Union, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “Regulation”) and Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts.
1.2. Personal data that we collect
We collect various data depending on which of our services you use. The scope of personal data processing is appropriate, relevant and limited to the fulfillment of the specified purposes.
1.2.1. When you shop with us, we collect:
Name and surname, delivery address, email address, phone number, bank account, payment details.
Data generated based on the duration of the contract – purchased products, customer segment, volume of services provided.
1.2.2. When you are a registered customer, we collect:
Name and surname, delivery address, email address, phone number, bank account, payment details.
Login names and passwords (we do not have access to the actual password).
1.2.3. When you subscribe to marketing messages from us, we collect:
First name and email address. Phone number, if you are a registered customer.
1.2.4. We also process the following personal data:
Information obtained using cookies, IP address (network identifier) including browser type, device and operating system, duration and number of accesses to the web interface and other similar information.
2. OBTAINING AND USING DATA
2.1. How do we obtain your personal data?
You provide us with your personal data, in particular when completing an order or when setting up a user account. If there is any change to your personal data, please inform us.
When visiting and using the web interface, some personal data may also be obtained and stored via cookies. You can read more about cookies in “Information about cookies”.
2.2. Purposes of processing personal data
2.2.1. Sale of goods.
In order to sell goods and improve the shopping process, we process your personal data. Specifically, this includes:
Processing an order for goods ordered through our website. The legal reason here is the necessity for the fulfillment of the purchase contract and, in the case of selected data, for the fulfillment of legal obligations (e.g. accounting documents).
Notification of the availability of goods.
If you request monitoring the availability of goods, we will process your personal data based on your consent.
2.2.2. Customer support.
To ensure customer service and to eliminate any problems in the fulfillment of the purchase contract.
2.2.3. Communication.
We use the collected data for the purpose of communicating with you and its individual customization. We may, for example, contact you by phone, email or other means to remind you that you have items in your online shopping cart, to help you complete your order, to inform you of the current status of your request, order or complaint or to obtain additional information from you, or to notify you that you must take action to keep your account active.
2.2.4. Improving the shopping process.
We use your data to continuously improve the shopping process and systems, including adding new features, and to make informed decisions using aggregated analyses and business intelligence, all based on our legitimate interest arising from the freedom to conduct business and the necessity of improving the services provided in order to succeed in competition. In order to ensure sufficient protection for your rights and interests, we use personal data that is anonymized to the greatest extent possible for the purpose of improvement.
mized.
2.2.5. Protection, security and dispute resolution.
We may also process data based on a legitimate interest, which consists in ensuring the protection and security of our systems and our customers, for the detection and prevention of fraud, the resolution of disputes and the enforcement of our agreements based on a legitimate interest.
2.2.6. Marketing offers.
We send you commercial communications regarding similar products to those you have purchased and commercial information about news and current promotions or discounts that may be of interest to you.
You can always refuse these commercial communications in the manner specified in each e-mail containing the commercial communication (by clicking on the unsubscribe link or in another manner).
If you unsubscribe from commercial communications, we will no longer use your electronic contacts for these purposes. We will start using them again if you register or explicitly request them.
The marketing offers that you see may be selected based on other information that we have obtained about you over time based on contact details, demographic data, favourites and usage data from our products and websites (cookies, IP address, data provided by your browser, click-through data, displayed commercial advertisements, visited products). We do not perform fully automated processing that would have legal effects for you.
Unless you are our customer, we process based on your consent.
You have the right to object to this processing at any time free of charge. Contact details are provided at the beginning of this document.
2.2.7. Processing of cookies from websites operated by KEVANS s. r. o.
If you have cookies enabled in your web browser, we process records of behavior from cookies placed on websites operated by KEVANS s. r. o., for the purpose of ensuring better operation of the KEVANS s. r. o. websites. o. and for the purposes of online advertising of KEVANS s. r. o.. More information can be found in “Information on cookies”.
2.3. On what legal basis do we use your personal data?
2.3.1. The basis for the processing of customer personal data is primarily the need to fulfill a contract to which the data subject is a party, or it is necessary to take measures prior to concluding a contract at the request of the data subject (Article 6(1)(b) GDPR). This applies in particular to personal data provided in the registration form on the account, ordering and concluding a purchase contract or for reservations in the online store, as well as when registering for the newsletter. Also in the case of personal data provided to us in connection with a customer complaint, the legal basis for their processing is the need to execute/serve the contract for the sale of the claimed goods.
2.3.2. In the case of processing for the marketing purposes mentioned above, with the exception of those carried out within the framework of the newsletter, the basis for this processing is the fulfilment of the objectives of the legitimate interests of the controller or its cooperating entities (Article 6(1)(f) GDPR), in which case the cooperating entities do not participate in the processing of the customer's data. On the other hand, if the controller's partners may have direct access to this information - the legal basis for such processing is the voluntary consent given by the customer (Article 6(1)(a) GDPR).
2.3.3. For other (other) purposes, the customer's personal data may be processed on the basis of:
2.3.3.1. voluntarily expressed consent - e.g. persons entering competitions (Article 6(1)(a) GDPR);
2.3.3.2. legal obligation - if the processing is necessary for compliance with a legal obligation of the administrator, for example when, based on tax or accounting regulations, the administrator accounts for concluded purchase contracts (Article 6(1)(c) GDPR);
2.3.3.3. necessary for purposes other than those listed above, which arise from the legitimate interests of the administrator or a third party, in particular to determine, exercise or defend claims, communicate with the customer also via contact forms (including responses to customer messages), market and statistical analyses (Article 6(1)(f) GDPR).
2.4. How long do we use the data?
2.4.1. Personal data may be stored for the duration of the use of the online store (and may be deleted after three years from the customer's last activity in the online store), and in the case of marketing activities - until the customer objects, and if it concerns cookie technology and similar, depending on technical issues, until these files are deleted using the browser / device settings (deleting files is not always identical to deleting personal data obtained through these files, and therefore an objection is possible).
2.4.2. If the processing of personal data depends on the customer's consent, the personal data may be processed until the consent is withdrawn.
2.4.3. In any case:
2.4.3.1. Personal data will also be stored if the law (e.g. accounting or tax purposes)
dpisy) obliges the administrator to process them;
2.4.3.2. Personal data will be stored longer in the event of a possible complaint by the customer against the administrator, so that the administrator can assert its claims or is necessary for the exercise or defense of claims against third parties, within the limitation period set by law, in particular the Civil Code.
2.4.4. Depending on the scope of personal data and the purpose of their processing, they may be stored for a different period. In any case, the longer of the personal data retention periods is decisive.
2.5. Transfer of personal data to third parties
2.5.1. We use all personal data obtained from customers exclusively for the internal needs of the administrator, protect them from misuse and do not provide them to third parties without prior notice or your consent. The exceptions are external companies that provide support services for us (e.g. transport, payment or e-shop development) and state authorities. We can or must provide these companies with your personal data to the minimum extent necessary for the smooth processing of the order or the functioning and improvement of the purchasing process.
2.5.2. This mainly concerns the following activities:
2.5.2.1. To pay for an order online (payment card, transfer), we transfer personal data to the service provider regarding payment processing.
2.5.2.2. For the purpose of delivering goods by contracted carriers, we transfer your personal data to:
Packeta Slovakia s. r. o., IČO: 48 136 999, Kopčianska 3338/82A, 851 01 Bratislava.
2.5.2.3. Other recipients of your personal data will be the operators offering marketing services and personalized advertising for the administrators:
Google Ireland Limited , Gordon House, Barrow Street, Dublin 4, Ireland
Facebook, Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland.
2.5.3. If necessary to investigate illegal use of our services or for the purposes of legal proceedings, the data may be provided to criminal investigation authorities. We contractually require all of these service providers to process your personal data in accordance with the terms of the privacy policy and applicable legislation.
3. YOUR RIGHTS IN RELATION TO PERSONAL DATA
3.1. Right to withdraw consent to the processing of personal data
If we process your personal data only on the basis of your consent (i.e. without any other legal reason), you can withdraw this consent at any time.
You can withdraw your consent to the processing of your personal data at any time, namely:
· in writing by letter sent to our correspondence address,
· If we process your data, you have the right to access this personal data and in particular the following information:
· · After you object, we will no longer process your personal data for these purposes.
3.5. Right to erasure ("right to be
forgotten")
You have the right to request that we erase your personal data if:
· objections to the processing of personal data,
· data,
· against processing.
When restricting processing, we are only entitled to store your personal data. Further processing is only possible with your consent or for legal reasons.
If the processing of personal data is restricted due to an objection to processing, the restriction lasts for the period necessary to determine whether we are obliged to comply with your objection.
If the processing of personal data is restricted due to a denial of the accuracy of the data, the restriction lasts for the period of verification of the accuracy of the data.
3.7. Right to data portability
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and to transmit them to another personal data controller.
3.8. How can you exercise your rights?
You can exercise your rights in relation to personal data via our contact details. All information and actions will be provided to you without undue delay.
We will do our utmost to protect your personal data to accommodate. However, if you are not satisfied with the equipment, you have the right to contact the competent authorities, in particular the Office for Personal Data Protection of the Slovak Republic (https://dataprotection.gov.sk/uoou/sk), which supervises the protection of personal data. This provision does not affect your right to contact this office directly with your complaint.
If, in particular, your residence, place of employment, or place of alleged violation of personal data protection is located outside the territory of the Slovak Republic, in another Member State of the European Union, you can contact the competent supervisory authority in this Member State.
4. MANAGEMENT AND PROCESSING OF PERSONAL DATA
4.1. Who processes your personal data?
We are the personal data administrator within the meaning of the regulations.
Your personal data is further processed for us, in particular by a tax advisor, accountant, subcontractors. To the extent necessary for the fulfillment of the contract or other obligations, we are authorized to transfer your personal data to other persons, e.g. carriers or other persons participating in the fulfillment of the contract or our obligations.
Your personal data will not be transferred to countries outside the European Union, unless this is necessary for the fulfillment of the contract, or for another reason in accordance with the rules for such transfer set forth in the regulations.
4.2. How do we process personal data?
Personal and other collected data are fully secured against misuse. Personal data will be processed in electronic form in an automated manner or in printed form in a non-automated manner.
These Principles are valid and effective from 01.12.2021.
Instructions on the exercise of the consumer's right to withdraw from the contract
INSTRUCTIONS
KEVANS s. r. o., registered office: Račianska 88B, 831 02 Bratislava, Slovak Republic, Company ID: 52 588 149, VAT No.: 2121076342, Commercial Register of the Municipal Court Bratislava III, Section: Sro, File No. 139859/B (hereinafter referred to as the “Seller”)
ON THE EXERCISE OF THE CONSUMER’S RIGHT TO WITHDRAW FROM THE CONTRACT
1. Right to withdraw from the contract
A consumer is a natural person who, when concluding and fulfilling a consumer contract, does not act within the scope of his/her business.
business activity, employment or profession. A consumer is not a corporate customer, i.e. a customer who purchases goods for a company (indicates the company ID, VAT number or VAT number when ordering).
You have the right to withdraw from this contract without giving a reason within 14 (in words: fourteen) days.
The withdrawal period will expire after 14 (in words: fourteen) days from the day on which you or a third party indicated by you, with the exception of the carrier, takes possession of the goods.
When exercising your right of withdrawal, you must inform us of your decision to withdraw from this contract by a clear statement (for example, a letter sent by post or e-mail). For this purpose, you can use the model withdrawal form that follows these instructions.
The withdrawal period is maintained if you send the notification of the exercise of the right of withdrawal before the withdrawal period expires.
2. Consequences of withdrawal
After withdrawal from the contract, we will refund all payments that you have made in connection with the conclusion of the contract, in particular the purchase price, including the costs of delivering the goods to you. This does not apply to additional costs if you have chosen a type of delivery other than the cheapest standard delivery method offered by us. The payments will be refunded to you without undue delay, at the latest within 14 (in words: fourteen) days from the day on which we receive your notification of withdrawal from this contract. Their payment will be made in the same way as you used for your payment, unless you have expressly agreed to a different payment method, without charging any additional fees.
Payment for the purchased goods will be paid to you only after the returned goods have been delivered back to our address or after you have submitted a document proving the return of the goods, whichever comes first.
In connection with the delivery of the goods, we inform you that the goods can be returned. In the event of withdrawal from the contract, you must send the goods back to us no later than 14 (in words: fourteen) days from the date on which you exercised your right to withdraw from the contract. The period is considered to have been met if you send the goods back before the 14-day period has expired. You bear the direct costs of returning the goods. We do not accept shipments sent on delivery.
You are responsible for any diminished value of the goods due to wear and tear or handling other than that necessary to establish the nature, characteristics and functionality of the goods.
Address for returning goods
KEVANS s. r. o., registered office: Račianska 88B, 831 02 Bratislava, Slovak Republic kvsporteu@gmail.com
