Privacy Policy
Personal Data Processing Principles
/Privacy Policy and Privacy Notice/
provided by the controller to the data subject when obtaining personal data from the data subject Homba online store.en
-
Operator
1.The controller hereby in accordance with Article 13(1)(a) of Directive 95/46/EC. 1 a 2. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27. May 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "The Device") provides the following information to the Data Subjectfrom whom the Data Controller obtains the personal data concerning him/her: .
-
Identity and contact details of the Data Controller:
Trade name: MAD Solutions s.ro
Headquarters: Tokajská 11, Košice 040 18, Slovak Republic
Registered in the Register of the District Court Košice I, Section Sro, Entry No. 16391/V
IČO: 51993813
DIČ: 2120852151
VAT number: SK2120852151
Bank account: SK59 1100 0000 0029 4606 2199
Seller is a VAT /Value Added Tax/
2.1Links
2.11 These principles and instructions on the protection of personal data form part of the General Terms and Conditions published in the Seller's Online Shop.
III. Personal data processed
3.1The controller processes the following personal data: name, surname, residence, email address, telephone number, data obtained from cookies, IP addresses.
-
Identity and contact details of the representative of the Operator:
4.1The representative of the Operator is not appointed. The Operator is also the Seller within the meaning of the term set out in the General Terms and Conditions of the online store.
-
Contact details of the responsible person:
5.1The person responsible is not designated.
-
Purposes of the processing of the Data Subject's personal data:
6.1The purposes of processing the Data Subject's personal data are:
6.11processing of accounting documents
6.12recording of contracts and clients for the purposes of concluding and executing contracts
6.13archiving of documents in accordance with legislation
6.14marketing activities of the operator
VII. Legal basis for the processing of the Data Subject's personal data
7.1The legal basis for the processing of the data subject's personal data will be, depending on the specific personal data and the purpose of their processing, the consent of the data subject to the processing of personal data, the fulfilment of a legal obligation of the controller, the fulfilment of a contract to which the data subject is a party.
VIII. Recipients or categories of recipients of personal data
The recipients of the data subject's personal data will be, or at least may be:
8.1the statutory bodies or members of the statutory bodies of the Operator
8.2employees of the Operator
8.3business representatives of the Controller and other persons cooperating with the Controller in the performance of the Controller's tasks. For the purposes of this document, all natural persons performing dependent work for the Operator on the basis of an employment contract or agreements on work performed outside the employment relationship shall be deemed to be employees of the Operator.
8.4The recipient of the data subject's personal data will also be the controller's collaborators, business partners, suppliers and contractors, in particular: an accounting company, a company providing services related to the creation and maintenance of software, a company providing legal services to the controller, a company providing consultancy to the controller, companies providing transport and delivery of products to buyers and third parties.
8.5The recipient of personal data will also be courts, law enforcement authorities, tax authorities and other state authorities, in the cases provided for by law.
-
Information about the intended transfer of personal data to a third country:
Not applicable - The controller does not intend to transfer personal data to a third country.
-
Personal data retention period:
Personal data will be retained for the necessary period of time, in accordance with the law, for the purposes of the performance of the contract and its subsequent archiving.
-
Learning about the existence of relevant rights of the Data Subject:
The affected person has the following rights, among others:
11.1the Data Subject's right of access under Article 15 of the Regulation, which includes:
11.11the right to obtain confirmation from the Data Controller as to whether personal data relating to the Data Subject are being processed;
-
in the event that the personal data of the Data Subject are processed, the right to obtain access to the personal data processed and the right to obtain the following information:
-
information about the purposes of the processing;
-
information on the categories of personal data concerned;
-
information on the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations;
-
if possible, information on the expected retention period of the personal data or, if this is not possible, information on the criteria for determining it;
-
information on the existence of the right to request from the Data Controller the rectification of personal data relating to the Data Subject or their erasure or restriction of processing and on the existence of the right to object to such processing;
-
information about the right to lodge a complaint with a supervisory authority;
-
if the personal data was not obtained from the Data Subject, any available information as to its source;
-
information on the existence of automated decision-making, including profiling as referred to in Article 22(2) of Directive 95/46/EC. 1 a 4. Regulation and, in such cases, at least meaningful information about the procedure used as well as the meaning and the expected consequences of such processing of personal data for the Data Subject;
11.12the right to be informed of the adequate safeguards under Article 46 of the Regulation relating to the transfer of personal data where personal data are transferred to a third country or an international organisation;
11.13the right to be provided with a copy of the personal data which are being processed, provided, however, that the right to be provided with a copy of the personal data being processed shall not adversely affect the rights and freedoms of others;
11.2the right of the Data Subject to rectification under Article 16 of the Regulation, the content of which is:
11.21the right to have incorrect personal data relating to the Data Subject rectified by the Controller without undue delay;
11.22the right to have incomplete personal data of the Data Subject completed, including by providing a supplementary declaration of the Data Subject;
11.3the right of the Data Subject to erasure of personal data (the so-called. the right "to be forgotten") under Article 17
An order, the contents of which are:
11.31the right to obtain from the Data Controller, without undue delay, the erasure of personal data relating to the Data Subject if any of the following grounds is met:
the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
-
The data subject withdraws the consent on the basis of which the processing is carried out, provided that there is no other legal basis for the processing of the personal data;
-
The data subject objects to the processing of personal data pursuant to Article 21(1) of Directive 95/46/EC. 1 Regulation and there are no overriding legitimate grounds for processing
-
personal data or the Data Subject objects to the processing of personal data pursuant to Article 21(1)(b) of Directive 95/46/EC. 2. Regulations;
-
personal data have been unlawfully processed;
-
personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which the Data Controller is subject;
-
the personal data were collected in connection with the offer of information society services pursuant to Article 8(1)(a) of Directive 95/46/EC. 1 Regulations;
11.4the right to have the Data Controller who has disclosed the Personal Data of the Data Subject take reasonable measures, including technical measures, having regard to the technology available and the cost of implementing the measures, to inform other Data Controllers who are processing the Personal Data that the Data Subject has requested them to erase any reference to, copy or replica of that Personal Data;
hereby, the right to erasure of personal data containing the rights under Article 17(1)(a) of Directive 95/46/EC shall not apply. 1 a 2. Regulations [t.j with the content of the rights under (i) and (ii) of this point. (c) point J. of this document] will not arise if the processing of personal data is necessary:
11.41to exercise the right to freedom of expression and information;
11.42for compliance with a legal obligation requiring processing under European Union law or the law of a Member State to which the Controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
11.43for reasons of public interest in the field of public health, in accordance with Article 9(1) of Regulation (EC) No .../... 2. Point. (h) and (i) of the Regulation, as well as Article 9(1)(h) and (i) of the Regulation. 3. Regulations;
11.44for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1). 1 Regulation where it is likely that the right referred to in Article 17(1)(a) of the Regulation will not be exercised. 1 Regulation will make it impossible or seriously impede the achievement of the purposes of such processing of personal data; or
11.45for proving, asserting or defending legal claims;
11.5the right of the Data Subject to restrict the processing of personal data pursuant to Article 18 of the Regulation,
the content of which is:
11.51the right to have the Controller restrict the processing of personal data in one of the following cases:
-
The data subject contests the accuracy of the personal data, during a period allowing the Controller to verify the accuracy of the personal data;
-
the processing of the personal data is unlawful and the Data Subject objects to the erasure of the personal data and requests instead that its use be restricted;
-
The controller no longer needs the personal data for the purposes of the processing, but the Data Subject needs it to establish, exercise or defend legal claims;
-
The data subject has objected to the processing pursuant to Article 21(1) of Directive 95/46/EC. 1 Regulation, pending verification that the legitimate grounds on the part of the Data Controller outweigh the legitimate grounds of the Data Subject;
11.52the right, where the processing of personal data has been restricted pursuant to point (i) of this point. (d) point J. of this document, such limited processing of personal data shall, except for storage, be carried out only with the consent of the Data Subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State;
11.53the right to be informed in advance of the lifting of the restriction on the processing of personal data;
11.6the right of the Data Subject to comply with the obligation to notify recipients under Article 19 of the Regulation, which includes:
11.61 1 and Article 18 of the Regulation, unless this proves impossible or involves disproportionate effort;
11.62the right for the Controller to inform the Data Subject about these recipients, if the Data Subject so requests;
11.7the Data Subject's right to data portability under Article 20 of the Regulation, the content of which is:
11.71the right to obtain the personal data concerning the Data Subject which he or she has provided to the Controller in a structured, commonly used and machine-readable format and the right to transfer those data to another controller without hindrance from the Controller if:
-
the processing is based on the Data Subject's consent pursuant to Article 6(1)(a) of Directive 95/46/EC. 1 Point. (a) of the Regulation or Article 9(1)(a) of the Regulation. 2. Point. (a) of the Regulation, or on a contract pursuant to Article 6(1)(a) of the Regulation, or on a contract pursuant to Article 6(1)(a) of the Regulation. 1 Point. (b) Regulations, and at the same time
-
the processing is carried out by automated means, and at the same time
-
the right to obtain personal data in a structured, commonly used and machine-readable format and the right to transmit those data to another controller, without hindrance by the Controller, will not adversely affect the rights and freedoms of others;
11.72the right to transfer personal data directly from one controller to another controller, where technically feasible;
11.8the right of the Data Subject to object under Article 21 of the Regulation, which includes:
11.81the right to object at any time, on grounds relating to the particular situation of the Data Subject, to processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(a) of Directive 95/46/EC, or to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1) of Directive 95/46/EC. 1 Point. (e) or (f) of the Regulation, including objecting to profiling based on those provisions of the Regulation;
11.82 [in the case of the exercise of the right to object at any time on grounds relating to the particular situation of the Data Subject to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(a) of Directive 95/46/EC], [in the case of the exercise of the right to object on grounds relating to the particular situation of the Data Subject. 1 Point. (e) or (f) of the Regulation, including to object to profiling based on those provisions of the Regulation] the right not to further process the personal data of the Data Subject unless the Data Subject demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Data Subject, or for the establishment, exercise or defence of legal claims
11.83the right to object at any time to the processing of personal data concerning the Data Subject for direct marketing purposes, including profiling to the extent that it is related to direct marketing; provided that if the Data Subject objects to the processing of personal data for direct marketing purposes, the personal data may no longer be processed for such purposes;
11.84(in relation to the use of information society services) the right to exercise the right to object to the processing of personal data by automated means using technical specifications;
11.85the right to object, on grounds relating to the particular situation of the Data Subject, to the processing of personal data concerning the Data Subject where the personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR. 1 Regulation, except where the processing is necessary for the performance of a task carried out for reasons of public interest;
11.9the right of the Data Subject relating to automated individual decision-making pursuant to Article 22 of the Regulation, the content of which is:
11.91the right not to be subject to a decision which is based solely on automated processing of personal data, including profiling, and which has legal effects concerning him or her or similarly significantly affects him or her, except pursuant to Article 22(1)(a). 2. Regulations [t.j except where the decision is: (a) necessary for the conclusion or performance of a contract between the Data Subject and the Controller, 11.92permitted by the law of the European Union or the law of a Member State to which the Data Subject is subject and which also provides for appropriate measures guaranteeing the protection of the rights and freedoms and legitimate interests of the Data Subject; or (c) based on the Data Subject's explicit consent].
XII. Information on the right of the Data Subject to withdraw consent to the processing of personal data
12.1The data subject shall be entitled to withdraw his or her consent to the processing of personal data at any time, without prejudice to the lawfulness of the processing of personal data based on the consent given prior to its withdrawal.
The data subject is entitled to withdraw his or her consent to the processing of personal data at any time, in whole or in part. A partial withdrawal of consent to the processing of personal data may relate to a specific type of processing operation(s), while the lawfulness of the processing of personal data to the extent of the remaining processing operations remains unaffected. A partial withdrawal of consent to the processing of personal data may relate to a specific specific purpose for processing personal data / certain specific purposes for processing personal data, while the lawfulness of the processing of personal data for other purposes remains unaffected.
The right to withdraw consent to the processing of personal data may be exercised by the Data Subject in paper form to the address of the Controller registered as its registered office in the commercial register at the time of withdrawal of consent to the processing of personal data or in electronic form by electronic means (by sending an e-mail to the e-mail address of the Controller indicated in the identification of the Controller in this document or by completing the electronic form published on the Controller's website).
XIII. Information on the right of the Data Subject to lodge a complaint with the supervisory authority
13.1The data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of employment or place of the alleged infringement, if he or she considers that the processing of personal data concerning him or her is in breach of the Regulation, without prejudice to any other administrative or judicial remedy.
The person concerned shall have the right to be informed by the supervisory authority to which the complaint has been lodged, as complainant, of the progress and outcome of the complaint, including the possibility of seeking judicial redress under Article 78 of the Regulation.
The supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic.
XIV. Information about the existence/non-existence of an obligation of the Data Subject to provide personal data
14.1The Controller informs the Data Subject that the provision of the Data Subject's personal data is necessary for the conclusion of the Purchase Contract and for its performance. The Controller informs the Data Subject that the Data Subject is not obliged to provide personal data or to consent to their processing. The consequence of not providing personal data and/or the consequence of not granting consent to the processing of personal data will be that the Controller will not be able to conclude and execute the purchase contract.
-
Information related to automated decision-making, including profiling:
15.1Not applicable - As the processing of the Data Subject's personal data in the form of automated decision-making, including the profiling referred to in Article 22 par. 1 a 4. Regulation, the Controller is not obliged to provide the information pursuant to Article 13 para. 2 lit. (f) Regulations, t. j information about automated decision-making, including profiling, and the procedure used, as well as the meaning and the expected consequences of such processing of personal data for the Data Subject.
XVI. Privacy and the use of cookies - What is a cookie?
In the context of the EU Directive on the protection of privacy in electronic communications, we offer a brief explanation of the function of cookies. Cookies are text files that contain small amounts of information that are downloaded to your computer, mobile or other device when you visit a website. Cookies are useful because they allow a website not only to recognise the user's device, but also to allow the user to access features on the site.
Basically, we divide cookies into two types.
Persistent cookies - these cookies remain on the user's device for the period of time specified in the cookie. They are activated whenever the user visits the website that created the cookie.
Relational cookies - these files allow the website operator to link the user's activities when the user opens the browser window and exits when the browser window is closed. Session cookies are created temporarily. When you close the browser, all session cookies are deleted.
16.1WHAT ARE COOKIE FILES?
A cookie is a small text file that a website stores on your computer or mobile device when you browse it. With this file, the website retains information about your actions and preferences (such as login name, language, font size and other display settings) for a certain period of time, so that you do not have to enter them again the next time you visit the site or browse its individual pages.
16.2HOW DO WE USE COOKIE FILES?
Our Online Shop uses cookies to store:
-
your display preferences, such as color contrast or font size settings;
-
the fact that you have already responded to a survey displayed in a separate window (pop-up), through which you can express your opinion on the content of the page (it will not be displayed again);
-
whether you have consented (or not) to our use of cookies on this website.
-
remarketing
Some subpages that are part of our site use cookies to anonymously collect statistics about how you got there and which video clips you watched.
Allowing the use of cookies is not strictly necessary for the proper functioning of the website, but it will provide you with a better user experience when working with it. You can delete or block cookies. However, in this case, certain functionality of the website may not work as it should.
The information stored in cookies is not used to personally identify you and the structure of the data is entirely under our control. Cookies are not used for purposes other than those set out in this text.
16.3DO YOU USE OTHER COOKIE FILES?
Some of our sites or sub-sites may use additional or different cookies than those listed above. In this case, details of their use will be provided in a separate cookie notice on the site in question.
16.4HOW TO CHECK COOKIE FILES
You can control and/or delete cookiesat your discretion - see aboutcookies for details.org. You can delete all cookies stored on your computer and you can set most browsers to prevent them from being stored. However, in this case, you may have to manually adjust some settings each time you visit the website, and some services and features may not work.
XVII. Final provisions
This Privacy Policy and Privacy Notice form an integral part of the General Terms and Conditions and the Complaints Policy. The documents - General Terms and Conditions and the Complaints Procedure of this online shop are published on the domain of the Seller's online shop.
This Privacy Policy shall become effective and effective upon posting on the Seller's Online Store 20.22021.