Privacy Policy and Cookie Notice of the online shop martinfabian.sk

Privacy Policy and Cookie Notice – Click here for the PDF version

Principles and instructions on the protection of personal data provided by the controller to the data subject when obtaining personal data from the data subject and instructions on cookies of the martinfabian.sk online store

I. Operator

1.1. The identity and contact details of the Operator are:

Business name: Longpoint s. r. o.
Headquarters: Rovniankova 1658/2, Bratislava – municipal district Petržalka 851 02, Slovak Republic
Registered: Office of the Municipal Court Bratislava III, Section Sro, Entry No. 180462/B
ID: 56426780
VAT number: 2122305339
Bank account: SK52110000000000002943175411
The seller is not a payer of value-added tax.

1.2.  Email contact and telephone contact of the Operator is:

Email: shop@martinfabian.sk
Telephone number : +421 918 010 717

1.3.Address of the Operator for sending documents:

Longpoint s. r. o., Rovniankova 1658/2, Bratislava – Petržalka 851 02, Slovak Republic

1.4. In accordance with Article 13(1) and (2), the Operator hereby. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC GDPR (hereinafter referred to as the “Regulation”), further in accordance with Act No. 18/2018 Coll. of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Act”). Act on the Protection of Personal Data and on Amendments to Certain Acts, as amended, and in accordance with Act No. 452/2021 Coll., the Act on Electronic Communications, as amended, provides the Data Subject – ( Buyer ), from whom the Controller ( Seller ) obtains personal data concerning him/her, with the following information, instructions and explanations:

II. References

2.1. This Privacy Policy and Privacy Notice form part of the General Terms and Conditions published on the Seller’s Website.

2.2. Pursuant to §3, paragraph 1, letter n), Act No. 102/2014 Coll. The Seller informs the Consumer that there are no special relevant codes of conduct to which the Seller has committed itself, whereby a code of conduct means an agreement or a set of rules defining the Seller’s conduct, which the seller has undertaken to comply with that code of conduct in relation to one or more specific commercial practices, or sectors of trade if these are not provided for by law or by other legislation or by action of a public authority) which the seller has undertaken to comply with, and the manner in which the consumer may become acquainted with them or obtain the text of them.

III. Privacy policy and use of cookies. Instructions and explanation of cookies, scripts, and pixels

3.1. The website operator provides the following brief explanation of the function of cookies, scripts and pixels:

3.1.1.Cookies are text files that contain small amounts of information that are downloaded to your device when you visit a website. With this file, the website retains information about your actions and preferences (such as login name, language, font size and other display settings) for a certain period of time so that you don’t have to enter them again the next time you visit the website or browse its individual pages

A script is a piece of program code that is used to make a website function properly and interactively. This code runs on the operator’s server or on your device.

Pixels are small, invisible text or images on a website that are used to monitor website traffic. In order for this to happen, various data is stored via pixels.

3.1.2. Cookies are divided into:

• Technical or functional cookies – they ensure the proper functioning of the Operator’s website and its use. These cookies are used without consent.
• Statistical cookies – The operator obtains statistics regarding the use of its website. These cookies are only used with consent.
• Marketing/Advertising Cookies – Used to create advertising profiles and similar marketing activities. These cookies are only used with consent.
• Performance cookies – collect information about how the site is used – which pages a visitor opens the most and whether they receive error messages from a page. These cookies do not store any information that identifies the user.

3.2. How to control cookies:

3.2.1 You can control and/or delete cookies at your discretion – see aboutcookies.org for details. You can delete any cookies stored on your computer or other device, and you can set most browsers to prevent them from being stored.

3.3. The Operator’s website uses the following cookies,:

• All cookies used by the Operator can be found at https://www.cookieserve.com/ by entering the Operator’s web address https://www.martinfabian.sk
• Technical or functional cookies – the information is accessed by the Website Operator. Duration of cookies 2 years.
• Statistical cookies – the information is accessed by the Website Operator. Duration of cookies 2 years.
• Marketing and advertising cookies – the information is accessed by the Website Operator. Duration of cookies 2 years.

3.3.1. Cookies made available to third parties:

Google analytics, Google ADS: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For more information on privacy please visit https://support.google.com/analytics/topic/2919631?hl=sk&ref_topic=1008008

IV. Personal data processed

4.1. The Operator processes the following personal data on its website: name, surname, residence, email address, home telephone number, mobile phone number, billing address, delivery address data obtained from cookies, IP addresses.

V. Contact details of the Data Protection Supervisor

5.1. The controller has appointed a data protection supervisor in accordance with Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. Contact: Email: info@martinfabian.sk, Tel: 0903848083

5.2. The Operator, is also the Seller within the meaning of the term set out in the General Terms and Conditions of this website.

VI. Purposes of the processing of the Data Subject’s personal data and duration of the processing of personal data

6.1. The purposes of the processing of the Data Subject’s personal data are in particular:

6.1.1. the registration, creation and processing of contracts and client data for the purpose of concluding contracts with third parties.

6.1.2. processing of accounting documents and documents related to the business activity of the Operator.

6.1.3. compliance with legal regulations in connection with the archiving of documents and documents, e.g. pursuant to Act No. 431/2002 Coll., the Accounting Act, as amended, and other relevant regulations.

6.1.4. the activities of the Operator in connection with the fulfillment of the request, order, contract and similar institutes of the Concerned Person.

6.1.5. the Operator’s newsletter, marketing and similar advertising activities. If the Data Subject consents to the Operator’s marketing and similar advertising activities.

6.2. The Data Subject’s personal data shall be kept by the Data Controller only for the time strictly necessary for the purposes of the performance of the contract and their subsequent archiving within the meaning of the statutory time limits imposed on the Data Controller by law. If the Data Subject has consented to the sending of promotional emails and similar offers, the Data Subject’s personal data shall be processed for these purposes until such time as the Data Subject withdraws his or her consent. However, for a maximum period of 10 years.

VII. Legal basis for the processing of the Data Subject’s personal data

7.1. Where the Data Controller carries out processing of personal data based on the Data Subject’s consent, such processing shall be initiated only after the Data Subject has given his or her consent.

7.2. If the Controller processes the personal data of the Data Subject for the purposes of negotiating pre-contractual relations and the conclusion and performance of a purchase contract, and the related delivery of goods, products or services. The data subject is obliged to provide personal data for the proper performance of the purchase contract, otherwise the performance cannot be ensured. Personal data for this purpose are processed without the consent of the data subject.

VIII. Recipients or categories of recipients of personal data

8.1. The recipients of the Data Subject’s personal data will be, or at least may be:

8.1.1. the statutory bodies or their members of the Controller.

8.1.2. persons performing work activities in an employment or similar relationship for the Operator.

8.1.3. business representatives of the Controller and other persons cooperating with the Controller in the performance of the Controller’s tasks. For the purposes of this document, all natural persons performing dependent work for the Operator on the basis of an employment contract or agreements for work performed outside the employment relationship shall be deemed to be employees of the Operator.

8.1.4. The recipient of the Data Subject’s personal data will also be the Controller’s collaborators, business partners, suppliers and contractors, in particular: an accounting company, a company providing services related to the creation and maintenance of software, a company providing legal services to the Controller, a company providing consultancy services to the Controller, companies providing transport and delivery of products to purchasers and third parties, marketing companies, companies operating social networks, companies providing payment gateways and other payment methods.

8.1.5. The recipient of personal data will also be courts, law enforcement authorities, tax authorities and other state authorities, if so provided by law. Whereby personal data will be provided by the Data Controller to the said authorities and state institutions on the basis of and in accordance with the legislation of the Slovak Republic.

8.1.6. List of third party processors and recipients who process the personal data of the Data Subject:

• Slovenská pošta, a.s., Partizánska cesta 9, 975 99 Banská Bystrica, ID No.: 36631124 – third party providing transport services
• Packeta Slovakia s. r. o., with registered office at Sliačska 1E 831 02 Bratislava – municipal district Nové Mesto, ID No: 48136999 – third party providing transport services
• STRIPE PAYMENTS EUROPE, LIMITED, C/O A & L Goodbody, Ifsc, North Wall Quay, Dublin, D01 H104, Ireland – third party payment gateway
• FedEx Express Slovakia s.r.o., Pri starom letisku 14, 830 06 Bratislava 36, Slovenská republika. Spoločnosť je zapísaná v Obchodnom registri Mestského súdu Bratislava III, Oddiel: Sro, Vložka č.: 5165/B, IČO: 31 351 603, IČ DPH: SK2020329113.

IX. Information on the disclosure of personal data to third countries and the retention period:

9.1. Not applicable. The controller does not transfer personal data of individuals to third countries.

X. Instruction on the existence of relevant rights of the Data Subject:

10.1. The data subject has the following rights, among others, whereby:

10.1.1. Clause 10.1 is without prejudice to the other rights of Data Subjects.

10.1.2. The Data Subject’s right of access under Article 15 of the Regulation, which includes: the right to obtain confirmation from the Data Controller as to whether it is processing the Data Subject’s personal data and, if so, to what extent. At the same time, if they are processed, he has the right to find out their content and to request information from the Data Controller on the reason for their processing, in particular information on: The reason for their processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations, the expected period of retention of the personal data or, if this is not possible, information on the criteria for determining it, the existence of the right to request from the Data Controller the rectification of personal data relating to the Data Subject or their erasure or restriction of processing and the existence of the right to object to such processing, the right to lodge a complaint with a supervisory authority if the personal data have not been obtained from the Data Subject, any available information as to their source, the existence of automated decision-making, including the profiling referred to in Article 22(1)(a) of Directive 95/46/EC, the existence of automated data processing, the existence of automated data processing as referred to in Article 22(1) of Directive 95/46/EC, the existence of the right to object to such data processing, the right to lodge a complaint with a supervisory authority if the personal data have not been obtained from the Data Subject 1. a 4. Regulation and, in such cases, at least meaningful information about the procedure used as well as the significance and foreseeable consequences of such processing of personal data for the Data Subject, about the adequate safeguards pursuant to Article 46 of the Regulation relating to the transfer of personal data, if personal data are transferred to a third country or an international organisation.

10.1.3. the right to be provided with a copy of the personal data being processed, provided, however, that the right to be provided with a copy of the personal data being processed shall not adversely affect the rights and freedoms of others.

10.1.4. the right of the Data Subject to rectification pursuant to Article 16 of the Regulation, which includes the right: for the Controller to rectify, without undue delay, inaccurate personal data relating to the Data Subject; the right to the completion of incomplete personal data of the Data Subject, including through the provision of a supplementary statement by the Data Subject; the right of the Data Subject to the erasure of personal data (“right to be forgotten”) pursuant to Article 17 of the Regulation, which includes the right to the erasure of personal data pursuant to Article 17 of the Regulation, which includes the right to:

10.1.5. the right to obtain from the Data Controller, without undue delay, the erasure of personal data concerning the Data Subject where one of the following grounds is met: the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, the Data Subject withdraws the consent on the basis of which the processing is carried out, provided that there is no other lawful basis for the processing of the personal data, the Data Subject objects to the processing of the personal data pursuant to Article 21 para. Regulation and there are no overriding legitimate grounds for the processing of the personal data, or the Data Subject objects to the processing of the personal data pursuant to Article 21(2). Regulation, the personal data has been unlawfully processed, the personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which the Data Controller is subject, the personal data has been collected in connection with the offer of information society services pursuant to Article 8(1). of the Regulation;

10.1.6. the right for the Data Controller who has disclosed the Personal Data of the Data Subject to take reasonable measures, including technical measures, having regard to the technology available and the cost of implementing the measures, to inform other Data Controllers carrying out the processing of the Personal Data that the Data Subject has requested them to erase all references to that Personal Data, or a copy or replica thereof, subject to the right to erasure of the Personal Data containing the rights pursuant to Article 17(1) and (2) of the Data Protection Regulation. Regulation shall not arise if the processing of the personal data is necessary:

10.1.7. to exercise the right to freedom of expression and information.

10.1.8. for compliance with a legal obligation requiring processing under European Union law or the law of a Member State to which the Controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.

10.1.9. for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) of the Regulation as well as Article 9(3). Regulation.

10.1.10.for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1). Regulation in so far as the right referred to in Article 17(1) is likely. of the Regulation will make it impossible or seriously impede the achievement of the purposes of such processing of personal data; or for the establishment, exercise or defence of legal claims;

10.1.11.the right of the Data Subject to restrict the processing of personal data pursuant to Article 18 of the Regulation, which includes:

10.1.12.the right to have the Data Controller restrict the processing of personal data in respect of one of the following cases: The data subject contests the accuracy of the personal data during a period allowing the Controller to verify the accuracy of the personal data, the processing of the personal data is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data, the Controller no longer needs the personal data for the purposes of the processing but the data subject needs the personal data for the establishment, exercise or defence of legal claims, the data subject has objected to the processing pursuant to Article 21 para. 1. Regulation, pending verification whether the legitimate grounds on the part of the Controller outweigh the legitimate grounds of the Data Subject;

10.1.13.the right, where the processing of personal data has been restricted, to have such restricted personal data processed only with the consent of the Data Subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State, with the exception of storage;

10.1.14.the right to be informed in advance of the lifting of a restriction on the processing of personal data;

10.1.15.the right of the Data Subject to comply with the obligation to notify recipients under Article 19 of the Regulation, which includes: the right for the Data Controller to notify any recipient to whom personal data have been disclosed of any rectification or erasure of personal data or restriction of processing carried out pursuant to Article 16, Article 17(1)(a), (b) or (c) of the Regulation. 1. and Article 18 of the Regulation, unless this proves impossible or requires disproportionate effort, the right for the Controller to inform the Data Subject about these recipients, if the Data Subject so requests;

10.1.16. the Data Subject’s right to data portability under Article 20 of the Regulation, which includes: the right to obtain personal data relating to the Data Subject which he or she has provided to the Controller in a structured, commonly used and machine-readable format and the right to transfer that data to another controller without hindrance by the Controller if:

1. the processing is based on the Data Subject’s consent pursuant to Article 6(1)(a) of the Regulation or Article 9(2)(a) of the Regulation, or on a contract pursuant to Article 6(1)(b) of the Regulation, and at the same time
2. the processing is carried out by automated means, and at the same time:

10.1.17.the right to obtain personal data in a structured, commonly used and machine-readable format and the right to transmit such data to another controller without hindrance by the Data Controller will not adversely affect the rights and freedoms of others;

10.1.18.the right to transfer personal data directly from one Controller to another Controller, where technically feasible;

10.1.19.the right of the Data Subject to object under Article 21 of the Regulation, which includes:

10.1.20.the right to object at any time, on grounds relating to the particular situation of the Data Subject, to processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) or (f) of the Regulation, including to object to profiling based on those provisions of the Regulation;

10.1.21.in the case of the exercise of the right to object at any time, on grounds relating to the particular situation of the Data Subject, to processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(a)(1)(b) or (c) of the Regulation. (e) or (f) of the Regulation, including the right to object to profiling based on these provisions of the Regulation, the right not to have the Data Subject’s personal data further processed by the Controller, unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defence of legal claims

10.1.22.the right to object at any time to the processing of personal data concerning the Data Subject for direct marketing purposes, including profiling to the extent that it is related to direct marketing; provided that if the Data Subject objects to the processing of personal data for direct marketing purposes, the personal data shall no longer be processed for such purposes;

10.1.23.in relation to the use of information society services, the right to object to the processing of personal data by automated means using technical specifications;

10.1.24.the right to object, on grounds relating to the particular situation of the Data Subject, to the processing of personal data concerning the Data Subject where the personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1). Regulation, except where the processing is necessary for the performance of a task carried out for reasons of public interest;

10.1.25.the right of the Data Subject relating to automated individual decision-making under Article 22 of the Regulation, which includes:

10.1.26.the right not to be subject to a decision which is based solely on automated processing of personal data, including profiling, and which has legal effects concerning him or her or similarly significantly affects him or her, except pursuant to Article 22(2). Regulation [i.e. except where the decision is: (a) necessary for entering into, or performance of, a contract between the Data Subject and the Data Controller,

10.1.27.permitted by European Union law or the law of a Member State to which the Controller is subject and which also provides for appropriate measures guaranteeing the protection of the rights and freedoms and legitimate interests of the Data Subject; or (c) based on the Data Subject’s explicit consent.

XI. Instructions on the right of the Data Subject to withdraw consent to the processing of personal data:

11.1. The data subject is entitled to withdraw his or her consent to the processing of personal data at any time, without prejudice to the lawfulness of the processing of personal data based on the consent given prior to its withdrawal.

The data subject is entitled to withdraw his or her consent to the processing of personal data at any time, in whole or in part. The partial withdrawal of consent to the processing of personal data may relate to a specific type of processing operation(s), while the lawfulness of the processing of personal data to the extent of the remaining processing operations remains unaffected. A partial withdrawal of consent to the processing of personal data may relate to a specific personal data processing purpose(s), while the lawfulness of the processing of personal data for the remaining purposes remains unaffected.

The right to withdraw consent to the processing of personal data may be exercised by the Data Subject in paper form to the address of the Controller registered as its registered office in the commercial register at the time of withdrawal of consent to the processing of personal data, or in electronic form by electronic means (by sending an e-mail to the e-mail address of the Controller indicated in the identification of the Controller in this document).

XII. Instructions on the right of the Data Subject to lodge a complaint with the supervisory authority:

12.1. The data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement, if he or she considers that the processing of personal data concerning him or her is in breach of the Regulation, all without prejudice to any other administrative or judicial remedy.

The data subject shall have the right to be informed by the supervisory authority to which the complaint has been lodged of the progress and outcome of the complaint, including the possibility of seeking a judicial remedy pursuant to Article 78 of the Regulation.

12.2. The supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic. Tel. contact: +421 /2 3231 3214, Email: statny.dozor@pdp.gov.sk,

XIII. Information related to automated decision-making, including profiling:

13.1. As the processing of the Data Subject’s personal data in the form of automated decision-making, including profiling referred to in Article 22(1) and (4), is not involved in the case of the Data Controller. 2(f) of the Regulation, the Data Controller is not obliged to provide information pursuant to Article 13(2)(f) of the Regulation, i.e. information on automated decision-making, including profiling, and on the procedure used, as well as on the significance and foreseeable consequences of such processing of personal data for the Data Subject. Not applicable.

XIV. Final Provisions

14.1. This Privacy Policy and the privacy and cookie notices form an integral part of the General Terms and Conditions and the Complaints Policy. The documents – the General Terms and Conditions and the Complaints Procedure of this Website are published on the domain of the Seller’s Website.

14.2. This Privacy Policy shall come into force and effect upon its publication on the Seller’s Website on 08.10.2024

This eshop is certified https://www.pravoeshopov.sk