Privacy policy

As we are concerned about the protection of our customers' personal data, we approach the collection of personal data responsibly and in accordance with data protection regulations. Below we describe which personal data is collected when you visit and use skiba.sk services, for what purpose we use this data and what are the other conditions of its processing.

Personal data protection

Privacy and data processing policy of the company and information provided to the data controllers in accordance with the GDPR ("General Data Protection Regulation") Regulation (EU) 2016/679 of the European Parliament and of the Council, in force and effective as of 25.05.2018 and 18/2018 of the Personal Data Protection Act hereinafter referred to as ("Act and GDPR") and (hereinafter also referred to as the "Terms and Conditions")

Skiba s.r.o., Sliačska 2, 831 02 Bratislava, ID No.: 47250909, registered in the Commercial Register of the OS Bratislava I, Section: Sro, Insert No.: 92202/B (hereinafter referred to as the "Operator").

In the use and processing of personal data, the Operator strictly complies with the relevant regulations on the protection of personal data. The right to use personal data as anonymous data is subject to the rights of the data subjects described below to the extent permitted by law.

This privacy statement applies only to www.skiba.sk (hereinafter referred to as "our website") and its related subpages, but not to websites that are controlled and operated by third parties. Please review the privacy statements of websites that are controlled and operated by third parties, as these websites are not under our control and the operator is not responsible for their content and privacy measures. Please note that third party websites have their own privacy policies, which you should read carefully before providing any personal information to third parties in order to protect your privacy.

1. DATA SECURITY

1.1 Personal Data Security.

The Company maintains strict security measures to protect Personal Data to prevent unauthorized or accidental access, alteration, destruction or loss, unauthorized transmission, as well as other unauthorized processing or misuse of such Personal Data. The Company requires all processors it uses to comply with the same stringent measures to ensure the security of the processing of personal data on the basis of contracts concluded for the processing of personal data within the meaning of Article 28 of the Regulation.

The measures taken are subject to regular review and are continuously adapted to the state of the art. Should there be a breach of the protection of your personal data, we will inform you without undue delay within 72 hours if such a breach of the protection of your personal data could lead to a high risk to your rights.

1.2 If you have been given access data to access and use our online tools on our website, you are responsible as a user for storing your name and password securely and for keeping them confidential.

1.3 Your PII is transmitted securely through encryption. The SSL (Secure Socket Layer) encryption system is most commonly used for secure communication with web servers. The PI in our systems such as the website is secured by appropriate technical and organisational measures against loss, destruction, alteration and further dissemination of data by unauthorised persons.

Data subject. Any natural person whose personal data is processed.

Consent of the data subject. Any serious and freely given, specific, informed and unambiguous indication of the data subject's wishes in the form of a statement or an unambiguous confirmatory act by which the data subject consents to the processing of his or her personal data.

Personal data: data relating to an identified natural person or an identifiable natural person who can be identified, directly or indirectly, in particular by reference to a generally applicable identifier, such as a name, surname, identification number, location data or online identifier, or to one or more characteristics or attributes which constitute his or her physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity.

Processing of personal data. A processing operation or set of processing operations concerning personal data or sets of personal data, in particular the obtaining, recording, organisation, structuring, storage, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise, rearrangement or combination, restriction, erasure, whether or not carried out by automated means or non-automated means.

Data Breach. A breach of security that results in the accidental or unlawful destruction, loss, alteration or unauthorized disclosure of, or unauthorized access to, transmitted, stored or otherwise processed personal data.

Controller. Anyone who, alone or jointly with others, defines the purpose and means of processing personal data and processes personal data on his or her own behalf.

Processor. Anyone who processes personal data on behalf of the controller.

Recipient - is anyone to whom personal data are disclosed, regardless of whether he or she is a third party: a public authority which processes personal data on the basis of a special regulation or an international treaty by which the Slovak Republic is bound, in accordance with the rules on the protection of personal data applicable to the purpose for which the personal data are processed, shall not be considered a recipient.

Third party - is anyone who is not a data subject, controller, processor or other natural person who processes personal data on behalf of the controller or processor.

Tracking of pages visited

In order to process statistical data about the use of our e-shop offer and the pages visited, we use Google Analytics from Google , which is certified for data protection in the area of tracking website traffic.

Data collected due to site traffic

During your visit to skiba.sk, the following data is collected and evaluated via embedded code, which is provided by your browser:

• request (name of the requested data file) (e.g. www. príklad.sk/index.html)
• browser type and version (e.g. Opera 5.0)
• browser language (e.g. Slovak)
• operating system used (e.g. Windows 7)
• browser window resolution
• screen resolution
• JavaScript activation
• enabling/disabling Java
• enabling/disabling cookies
• Referrer URL (previously visited page)
• IP address
• access time
• clicks

For the purpose of marketing and remarketing, we further process the data using the embedded javascript code of the following certified external services: Google Adwords, Facebook pixel.

Cookies

We use cookies in several places in our e-shop. These are small text files that are stored on your computer and your browser allows their storage. Cookies cannot be assigned to a specific person and do not contain any personal data. The linking of this data with other sources of data about your person is only done provided that you have given us your explicit consent on skiba.sk

Acceptance of cookies is not a necessary requirement for access to the e-shop. Please note, however, that the shopping cart functions and ordering of products are only possible provided that you have accepted the activation of technical cookies, which are necessary for the functionality of the skiba.sk e-shop. The data obtained from the use of these cookies will be used exclusively for the technical security of your purchase and will be deleted after a few days.

The most common cookies used by us are temporary cookies (so-called session cookies), which will be deleted after the browser session has ended. In addition, there are also long-term cookies ("persistent cookies") with which we can recognise you as a visitor. Cookies do not cause any damage to your computer and do not contain any viruses.

In particular, the following cookies are used:

• Purely technical cookies that are necessary for the functionalities of the e-shop and for an optimal display for the customer (e.g. login function, lifetime: 10 days; shopping cart functionalities, lifetime: 10 days; last viewed products, lifetime: 10 days) [nazovshopu]

The skiba.sk website also contains links and integrated content from other websites. This is the case, for example, if the viewed website uses an analysis or marketing automation tool from a third party (e.g. tools from Google, Facebook or Glami) or displays content from third-party websites, e.g. YouTube. This results in the acceptance of cookies from these third-party services. Trendlux, s.r.o. cannot control the storage of or access to these cookies. If you want to know how these third parties use them, please read the privacy and cookie policies of their services.

You can set in your browser settings whether or not cookies can be used. If you do not wish to be tracked exclusively on skiba.sk, you can object (see point I. a) tracking of the pages you visit.

Collection, processing and use of personal data

Contact information

The controller of the information systems in which your personal data is processed is:

Skiba Ltd.

Sliačska 2

831 02 Bratislava

Categories of personal data

Depending on which of our services you use, we collect the information necessary to provide them.

If you make a purchase with us, we collect the following data to process your order:

• Name and surname, email address, postal address, billing address, phone number, language, IP address

Your personal data may be disclosed to a third party if this is necessary for the processing of your orders and the proper performance of the purchase contract. We need your first name, last name, address (home/delivery address), email, phone number. Your email address serves as a means of communication. An order confirmation as well as information about the progress of the delivery of the goods will be sent to the entered email address. In the context of the processing of the order and the performance of the purchase contract, the data is provided to our contracted logistics service providers. The data may only be used by the service providers for the purpose of the performance of the purchase contract. We only process your personal data for the duration of the purpose for which we obtained it.

To objectively evaluate your satisfaction with our services, we use a third-party service, Heureka.sk, which will send you a form to evaluate your order 10 days after you place it. As part of this service, we send to Heureka.sk your order ID, your email address, the names and codes of the products you purchased.

If you register with us for future purchases, we need this information to do so:

• First and last name, email address, mailing address, billing address, phone number, language.

If you subscribe to our newsletter:

• Email address, authorization status via the activation link sent, IP address

We use the so-called double opt-in method for sending newsletters. This means that you will only receive them if you confirm the activation of this service by clicking on the link in the email delivered to your email address after you have subscribed. If you no longer wish to receive newsletters, you can cancel at any time. Simply click on the link in the footer of any such email or contact our customer support.

Form details

On skiba.sk you can use some forms to transmit data to us, such as a question to a retailer. As long as it is not personal data, this data will be stored in the form fields and statistically evaluated.

Customer account

You can set up your account through registration. In this account you can see the data we have stored about your orders (processed and unprocessed).

Secure data transfer

If you have registered with us, your account can only be accessed after you have entered your password. You should treat your access information confidentially and close your browser when you have finished your activity, especially if the computer is used by several persons Trendlux, s.r.o. does not accept liability for unauthorized disposal or other misuse of the password.

Consent to the use of data

You have the right to withdraw your consent to data processing at any time with effect for the future. You can unsubscribe from the newsletter via the link in the footer of each newsletter. Withdrawal of consent does not affect the lawfulness of data processing carried out on the basis of this consent prior to its withdrawal.

In addition, the stored personal data will be deleted if you decide to withdraw your consent, if the data processed for the purpose of achieving a specific purpose is no longer necessary or if the storage is inadmissible for any legal reason.

Right to information and other rights of data subjects

You have the right to exercise your rights under the GDPR, namely (i) the right to rectification, (ii) the right to erasure, (iii) the right to data portability, (iv) the right to object, (v) the right to withdraw consent, (vi) the right of access to information, (vii) the right to restriction. You can exercise these rights directly with the company by notifying profikuchar@profikuchar.sk

Right to Information.

You may request confirmation/information from us as to whether and to what extent your PII is being processed. We, as a company, are obliged to provide information upon your request within 30 days of receipt of such request. We may extend this period by a further 60 days, we would inform you of the postponement.

Right to correction.

You have the right to have us correct your incorrect PI relating to you or complete your incomplete PI without undue delay.

Right to erasure.

You may request the erasure of your personal data if the purpose (reason) for which it was collected has ceased, the processing is unlawful, the processing disproportionately affects your legitimate and protected interests or the processing is based on your consent and you have withdrawn your consent. However, there are reasons why your data cannot be deleted immediately, such as time limits imposed by law.

Right to data portability

You may require us to make the DPA you have provided to us available in a structured, commonly used and machine-readable format to another data controller where technically feasible and provided that the DPA is processed on the basis of the data subject's consent, on the basis of a contract and the processing of the DPA is carried out by automated means.

Right to object

If, we process your Personal Data on the basis of legitimate interest or public interest, you may object to the processing of your Personal Data at any time. We may not further process personal data unless we can demonstrate our compelling legitimate grounds for processing which override your interests, rights and freedoms, or where there are grounds for proving, exercising or defending legal claims.

Withdrawal of consent

Where you have given us consent, we inform you that you may withdraw this consent at any time. You can revoke it in the same way as you gave it. Withdrawal of consent does not affect the lawfulness of the processing of your data prior to the withdrawal of consent, but you must be informed of this fact before consent is given.ň

You have the right to request the restriction of the processing of your data where

- you deny the accuracy of the data, for a period of time that allows us to verify the accuracy of the data,

- the processing of your data is unlawful, but you refuse erasure and instead request restriction of the use of the data,

- we no longer need the data for the intended purpose, but you still need the data to assert, exercise or defend legal claims; or

- you have objected to the processing of the data.

The right to bring an action by the data subject.

If you believe that we have violated the Act and/or GDPR in processing your personal data, please contact us so that we can clarify any questions. However, you are of course entitled to lodge a complaint with the Slovak Data Protection Authority. A template of the petition is published on the website of the Office for Personal Data Protection, Hraničná 12, 820 02Bratislava. The Office will consider your complaint within 30 days and make a decision within 90 days or may extend the time limit accordingly.

The services provided within skiba.sk, for which the consent of the data subject is required under these General Terms and Conditions, are not directly addressed to persons under the age of 16.