Privacy Policy

OPERATOR'S INFORMATION OBLIGATION 

PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL ON THE PROTECTION OF NATURAL PERSONS WITH REGARD TO THE PROCESSING OF PERSONAL DATA
ON THE FREE MOVEMENT OF SUCH DATA (HEREIN: "THE REGULATION")
IN ACCORDANCE WITH SECTION 19 OF ACT NO. 18/2018 COLL. ON THE PROTECTION OF PERSONAL DATA (HEREIN: "THE ACT").

1. OPERATOR OF THE ROCKSIDE.SK ONLINE STORE

Company name: GHR sro.
Registered office: Komarnická 28, 821 03 Bratislava, Slovakia
Company ID: 55 660 495
Tax ID: 2122056134
VAT ID: SK2122056134

Commercial Register of the Municipal Court Bratislava III
Section: Sro, File No.: 171780/B

website: www.rockside.sk 

2. PURPOSE OF PROCESSING PERSONAL DATA

  • Conclusion of a distance purchase contract through the operator's online store.
  • Delivery of goods and customer identification before handing over prepaid goods.
  • Order confirmation, payment for goods, delivery of ordered goods - by phone and via e-mail.
  • Records of customer orders for resolving any complaints.

3. NECESSITY TO PROVIDE PERSONAL DATA

The data subject provides the operator with personal data for the purpose of concluding a contract, which is necessary for us to conclude a contract with him/her.
and in the event that the operator does not provide the customer with personal data, the operator cannot conclude a contract with him. The operator only obtains the personal data that are necessary to fulfill the obligations that the customer expects from it by ordering goods. Without this data, it will not be possible to process the received order.

4. LIST OF PROCESSED PERSONAL DATA

  • Billing details – name and surname, permanent address, and when registering companies, also company ID, VAT number, VAT number
  • Delivery details – recipient's name and surname, delivery address
  • Contact details:

Telephone number – for the purposes of order confirmation, communication with the customer, and delivery of goods by courier service.

Email address (e-mail) – for the purpose of sending order confirmation and for further communication with the customer.

• Order data – for the purposes of processing orders and resolving any complaints.

5. THIRD PARTIES TO WHOM THE DATA WILL BE PROVIDED

We do not provide personal data to any companies managing personal data databases, or to any other third parties, except to the extent necessary for the actual delivery of goods by courier service.

6. DISCLOSURE OF DATA

Our company does not publish the obtained data under any circumstances.

7. PERIOD OF PROCESSING PERSONAL DATA

The period of processing personal data for individual purposes is determined within 5 years from the date of conclusion of the purchase contract.

8. RIGHTS AND OBLIGATIONS OF THE DATA SUBJECT

  • The data subject has the right to access his or her data. Upon request from the data subject, the controller shall issue a confirmation as to whether personal data concerning the data subject are being processed. If the controller processes such data, it shall issue a copy of such personal data to the data subject upon request.
  • The provision of a copy of personal data is free of charge. For any additional copies requested by the person, the controller will charge a fee corresponding to the administrative costs incurred in providing the copy. If the person requests information by electronic means, it will be provided to him in a commonly used electronic form, namely by e-mail, unless he requests another method.
  • The data subject has the right to have personal data corrected if the controller records incorrect personal data about him/her. At the same time, the data subject has the right to have incomplete personal data completed. The controller shall correct or complete the personal data without undue delay after the data subject requests it.
  • The data subject has the right to have personal data concerning him or her erased, provided that:
  1. the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  2. the data subject withdraws the consent on the basis of which the processing is carried out,
  3. the data subject objects to the processing of personal data,
  4. personal data was processed unlawfully,
  5. the reason for deletion is the fulfillment of an obligation under a law, special regulation or international treaty by which the Slovak Republic is bound, or
  6. personal data were collected in connection with the offer of information society services

a person under 16 years of age.

• The data subject will not have the right to erasure of personal data provided that their processing is necessary:

  1. to exercise the right to freedom of expression and information;
  2. to fulfill an obligation under a law, special regulation or international treaty by which the Slovak Republic is bound, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the controller,
  3. for reasons of public interest in the field of public health,
  4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, where the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of such processing, or for the establishment, exercise or defence of legal claims.
  • The operator will delete the personal data of the data subjects upon request, without undue delay after assessing that the data subject's request is justified.
  • The data subject has the right to restrict the processing of personal data where:
  1. challenges the accuracy of the personal data by means of an objection, within a period allowing the controller to verify the accuracy of the personal data;
  2. the processing is unlawful and the data subject requests the restriction of the use of the personal data instead of erasure;
  3. the controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the establishment, exercise or defence of legal claims;
  4. the data subject has objected to the processing of personal data on the basis of a legitimate claim of the controller, pending verification of whether the legitimate reasons on the part of the controller outweigh those of the data subject.
  • If the data subject requests restriction of the processing of their personal data, the controller will not perform any processing operations with the data concerned, except for storage, without the consent of the data subject.
  • The data subject will be informed by the controller if the restriction on the processing of this data is lifted.
  • The data subject has the right to data portability, which means obtaining the personal data that he or she has provided to the controller, and having the right to transmit these data to another controller in a commonly used and machine-readable format, provided that the personal data were obtained with the consent of the data subject or on the basis of a contract and their processing is carried out by automated means.

• The data subject has the right to object at any time to the processing of his or her personal data on grounds relating to his or her particular situation. The data subject may object to the processing of his or her personal data on the following grounds:

  1. the legal title of the performance of tasks carried out in the public interest or in the exercise of public authority, or on a legally authorized basis
    the operator's interest,
  2. processing of personal data for direct marketing purposes,
  3. processing for scientific or historical research purposes or for statistical purposes.
  • The operator shall assess the received objection within a reasonable time. The operator may not further process personal data unless it can demonstrate compelling legitimate interests in the processing of personal data that override the rights or interests of the data subject or grounds for exercising a legal claim.
  • The data subject has the right to withdraw his or her consent to the processing of personal data at any time, if the processing of personal data was based on this legal basis.
  • The data subject may withdraw their consent by contacting the operator with their request in any chosen manner.
  • However, the lawfulness of the processing of personal data based on the consent granted is not affected by its withdrawal.
  • The data subject has the right to file a petition to initiate proceedings with the Personal Data Protection Office of the Slovak Republic if he or she believes that his or her rights in the area of personal data protection have been violated.